Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          m5k1ZFeuB/MRVMw3lLbqalfgkr+Y0B+zz6SlYwph7cU=
Subject key identifier:   30:15:51:AF:1D:9F:BF:2D:31:4E:13:0C:E1:65:64:57:96:E1:FB:87
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       01A103240E159D05D592207A8A763C8B6048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          1A89
Signing time:             Sat 03 Oct 2026 19:00:56 +0000
Manifest this update:     Sat 03 Oct 2026 19:00:56 +0000
Manifest next update:     Sun 04 Oct 2026 19:00:56 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: kd0wXfFi8Y8wy4uF3OoA2mQR5SbusUykTgtIJzPmmd4=)
                          2: NmgUP7e3LyCZ01solEPz1wLS4js.roa (hash: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:24:0e:15:9d:05:d5:92:20:7a:8a:76:3c:8b:60:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Oct  3 19:00:56 2026 GMT
            Not After : Oct  4 19:00:56 2026 GMT
        Subject: CN=301551af1d9fbf2d314e130ce165645796e1fb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:82:7d:a5:e1:c9:82:30:74:f6:e1:37:46:
                    5e:fc:53:5b:cf:2f:fa:8b:f7:a1:fa:b5:2f:af:9e:
                    ef:d8:09:eb:a7:ee:7d:78:c4:99:04:a6:71:91:34:
                    5b:9f:88:24:4c:6b:8e:31:35:4c:68:62:b6:63:c4:
                    88:d4:f2:81:80:5e:c9:50:6d:05:be:76:6b:17:b1:
                    85:f5:07:94:95:8a:fb:59:b7:f0:d2:fc:db:a6:80:
                    86:ae:27:55:a8:e0:7c:60:af:e3:0a:27:31:17:69:
                    76:78:8b:b0:06:66:ed:a3:a5:a3:3e:4b:12:de:16:
                    38:aa:69:83:d9:15:48:79:8c:25:f2:28:2a:86:7f:
                    53:7f:b3:13:1c:82:c3:ac:25:7d:60:ba:c7:fc:20:
                    29:2a:65:07:97:47:9f:2a:ae:7f:5d:fd:91:75:a9:
                    35:6d:2f:be:39:1a:c9:83:46:9f:55:d0:b6:5d:76:
                    8b:6f:f5:f7:1f:29:4a:0f:8f:86:68:f1:78:1f:03:
                    16:b8:fd:f6:00:0e:6a:a4:15:a0:9d:97:01:a7:0e:
                    f6:45:98:34:c2:c5:4c:67:05:c8:f1:b9:d5:a3:9d:
                    b3:8f:4b:7f:78:50:f6:37:56:ea:85:10:35:e7:19:
                    9a:82:00:f7:fa:97:16:69:3a:24:6c:9b:7d:18:74:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:15:51:AF:1D:9F:BF:2D:31:4E:13:0C:E1:65:64:57:96:E1:FB:87
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:16:99:e2:ce:7e:32:4d:82:ce:c4:c2:69:d9:da:3a:4a:fa:
         9d:eb:36:2c:0b:f8:cb:2e:88:eb:7b:95:ee:c1:7f:2d:3f:8c:
         26:d0:a0:d0:c3:af:b0:f5:3a:42:a0:16:62:a3:74:f4:49:35:
         f2:07:f5:38:34:a4:70:85:e9:b3:73:97:50:e3:c9:74:df:1d:
         07:46:e4:36:7e:22:fc:5b:2d:d1:3d:df:01:da:19:d2:0c:91:
         09:e1:06:16:60:3a:71:3d:35:11:09:b6:87:70:8e:02:a0:0e:
         20:f6:5a:8a:ef:b2:b3:41:8a:9c:ee:1c:ef:ca:2e:a9:16:e3:
         b9:2c:8f:3b:04:ee:14:6b:5d:f6:ce:73:aa:12:45:07:c2:29:
         a0:00:f6:d4:4c:47:66:ec:c0:fc:e0:41:89:8f:a3:6c:4c:01:
         6d:a7:3e:45:24:ac:40:26:80:7c:4e:3b:63:b5:f9:13:2e:d2:
         e6:52:a8:39:02:da:e9:be:e3:24:92:02:a8:70:8d:98:90:a2:
         d5:c4:07:81:9f:9b:40:ae:4e:38:bd:31:32:e0:62:52:a5:f4:
         87:ef:0c:ad:b4:7a:a9:d6:0e:63:4d:3d:bb:01:05:42:71:6e:
         0f:5d:0e:88:12:6a:6b:fd:1e:0a:3c:6d:be:7b:63:cb:c4:a6:
         26:f0:2e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDJA4VnQXVkiB6inY8i2BIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWRjMDBmZDJjMWUzZWFhZmNlY2NjMWI0YmExZjhmZDBh
NGE5OGMwHhcNMjYxMDAzMTkwMDU2WhcNMjYxMDA0MTkwMDU2WjAzMTEwLwYDVQQD
EygzMDE1NTFhZjFkOWZiZjJkMzE0ZTEzMGNlMTY1NjQ1Nzk2ZTFmYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJWCfaXhyYIwdPbhN0Ze/FNbzy/6
i/eh+rUvr57v2Anrp+59eMSZBKZxkTRbn4gkTGuOMTVMaGK2Y8SI1PKBgF7JUG0F
vnZrF7GF9QeUlYr7Wbfw0vzbpoCGridVqOB8YK/jCicxF2l2eIuwBmbto6WjPksS
3hY4qmmD2RVIeYwl8igqhn9Tf7MTHILDrCV9YLrH/CApKmUHl0efKq5/Xf2Rdak1
bS++ORrJg0afVdC2XXaLb/X3HylKD4+GaPF4HwMWuP32AA5qpBWgnZcBpw72RZg0
wsVMZwXI8bnVo52zj0t/eFD2N1bqhRA15xmaggD3+pcWaTokbJt9GHQgUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAVUa8dn78tMU4TDOFlZFeW4fuHMB8GA1UdIwQY
MBaAFOsdwA/SwePqr87MwbS6H4/QpKmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgt
OTBlMjFkZjAxZTkxLzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgtOTBlMjFkZjAxZTkx
LzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBaZ4s5+
Mk2CzsTCadnaOkr6nes2LAv4yy6I63uV7sF/LT+MJtCg0MOvsPU6QqAWYqN09Ek1
8gf1ODSkcIXps3OXUOPJdN8dB0bkNn4i/Fst0T3fAdoZ0gyRCeEGFmA6cT01EQm2
h3COAqAOIPZaiu+ys0GKnO4c78ouqRbjuSyPOwTuFGtd9s5zqhJFB8IpoAD21ExH
ZuzA/OBBiY+jbEwBbac+RSSsQCaAfE47Y7X5Ey7S5lKoOQLa6b7jJJICqHCNmJCi
1cQHgZ+bQK5OOL0xMuBiUqX0h+8MrbR6qdYOY009uwEFQnFuD10OiBJqa/0eCjxt
vntjy8SmJvAurw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 05:36:41 2026 by rpki-client