Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File:                     6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier:          BeXq7GKywUGYhVPaoNtsnidb99AV7eqfL5GR5J7ovjI=
Subject key identifier:   A4:4A:71:2D:35:DB:E5:80:F9:C3:1B:E3:E7:61:96:01:7C:AB:33:D6
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer:       /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial:       01A1483BC3F7597738857C5D52975EE0230A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number:          11E1
Signing time:             Sat 17 Oct 2026 05:00:38 +0000
Manifest this update:     Sat 17 Oct 2026 05:00:38 +0000
Manifest next update:     Sun 18 Oct 2026 05:00:38 +0000
Files and hashes:         1: 202qM1rsE239uIdAcf__Gnv7zdc.roa (hash: ieFIbb9cUztQSqOO5FEKp3hxs3Zx7kO0z2iNcIicraA=)
                          2: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: QfOhm1O+AOeseV0l4HIwhonOmQYA4Fls9Nwg2IXDRS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:3b:c3:f7:59:77:38:85:7c:5d:52:97:5e:e0:23:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
        Validity
            Not Before: Oct 17 05:00:38 2026 GMT
            Not After : Oct 18 05:00:38 2026 GMT
        Subject: CN=a44a712d35dbe580f9c31be3e76196017cab33d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:a9:b9:f0:3c:7c:40:ca:8c:9d:81:34:c2:
                    ce:da:9c:90:61:c6:fd:44:db:28:1b:5e:e7:8f:5c:
                    5e:69:6b:78:ec:8e:7c:87:36:18:43:7a:89:db:0d:
                    78:31:47:1d:16:54:94:4c:4c:86:c6:67:f5:46:db:
                    d8:9e:89:2f:52:4a:a8:e8:bc:30:3a:df:97:ef:9d:
                    64:0c:38:4d:89:9f:ef:25:ed:88:e3:13:08:fd:4c:
                    bb:a1:ee:48:7b:99:9b:dc:a7:4e:08:41:33:55:1c:
                    42:22:10:6a:4c:97:90:9b:31:95:e6:0c:e7:18:fe:
                    ca:71:0c:26:fd:59:00:98:6b:f9:da:41:4c:45:0f:
                    54:5d:b1:f5:1c:35:08:b7:e8:e3:fd:7e:fa:95:83:
                    be:33:19:e2:f8:8e:ac:3c:24:50:07:79:9b:ef:2f:
                    0c:f8:d8:84:c9:15:e4:d1:93:de:cf:7b:c1:b2:df:
                    e7:21:51:6e:56:57:91:d5:78:b3:bb:ee:ff:ca:e6:
                    6f:56:fe:1e:bb:79:94:f5:c2:ef:15:fb:98:7b:ee:
                    e4:2e:23:ea:c3:e2:6e:6b:61:c7:82:ac:12:1b:ac:
                    fc:1d:95:4a:dd:38:db:9b:fb:cc:8d:9a:ab:f3:bf:
                    91:67:21:00:de:aa:e7:21:7f:f8:1f:08:ef:c7:d6:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4A:71:2D:35:DB:E5:80:F9:C3:1B:E3:E7:61:96:01:7C:AB:33:D6
            X509v3 Authority Key Identifier:
                keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e3:a4:90:de:d8:c1:d3:53:62:e1:b9:54:ef:83:83:f4:3d:
         37:0e:4f:a0:70:24:c8:27:92:39:4d:21:99:8d:07:b6:d8:3c:
         c5:b8:9e:b9:78:0b:ed:87:40:91:88:d5:89:69:c2:ff:9d:52:
         f1:78:1d:c8:98:75:4a:84:47:77:fe:f7:3f:6e:d2:83:28:d1:
         fe:f6:b9:f9:83:3b:73:f8:7d:f8:48:fb:94:b6:2d:c3:aa:9f:
         aa:35:60:9a:64:bb:ec:01:e4:5e:ea:27:80:be:94:c7:02:14:
         9d:35:3a:88:6a:79:5f:2c:21:32:a9:3a:af:7e:c1:cb:99:cc:
         69:13:ee:79:76:c7:e6:bf:f2:2a:0c:72:db:00:f7:ff:a4:01:
         c5:f0:99:45:9b:47:39:3e:4f:dc:22:47:f9:49:99:6a:51:2d:
         ea:4f:46:b4:15:ba:50:64:27:f5:4e:20:a9:b5:00:3d:85:f3:
         2a:cd:3c:12:b7:15:ae:91:7c:2e:8e:7d:76:4b:40:39:97:c3:
         e9:a9:46:e6:4d:1c:3a:23:df:66:f9:83:18:ed:42:92:ef:66:
         08:60:25:62:f3:73:10:3b:e1:85:61:36:6d:79:07:1a:11:68:
         ef:bd:7a:b2:dc:12:ba:59:be:f1:9a:3d:03:2c:c2:2f:86:3a:
         1c:36:68:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIO8P3WXc4hXxdUpde4CMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTMyNGM0ZmZmMDcyNDBlZWIxZjAwZTYzZTYzNWY3Y2I5
MDJmOTgwHhcNMjYxMDE3MDUwMDM4WhcNMjYxMDE4MDUwMDM4WjAzMTEwLwYDVQQD
EyhhNDRhNzEyZDM1ZGJlNTgwZjljMzFiZTNlNzYxOTYwMTdjYWIzM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/apufA8fEDKjJ2BNMLO2pyQYcb9
RNsoG17nj1xeaWt47I58hzYYQ3qJ2w14MUcdFlSUTEyGxmf1RtvYnokvUkqo6Lww
Ot+X751kDDhNiZ/vJe2I4xMI/Uy7oe5Ie5mb3KdOCEEzVRxCIhBqTJeQmzGV5gzn
GP7KcQwm/VkAmGv52kFMRQ9UXbH1HDUIt+jj/X76lYO+Mxni+I6sPCRQB3mb7y8M
+NiEyRXk0ZPez3vBst/nIVFuVleR1Xizu+7/yuZvVv4eu3mU9cLvFfuYe+7kLiPq
w+Jua2HHgqwSG6z8HZVK3Tjbm/vMjZqr87+RZyEA3qrnIX/4Hwjvx9bOkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRKcS012+WA+cMb4+dhlgF8qzPWMB8GA1UdIwQY
MBaAFOvjJMT/8HJA7rHwDmPmNffLkC+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAt
OGFmMDVhZTMxOTJjLzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAtOGFmMDVhZTMxOTJj
LzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOOkkN7Y
wdNTYuG5VO+Dg/Q9Nw5PoHAkyCeSOU0hmY0Httg8xbieuXgL7YdAkYjViWnC/51S
8XgdyJh1SoRHd/73P27SgyjR/va5+YM7c/h9+Ej7lLYtw6qfqjVgmmS77AHkXuon
gL6UxwIUnTU6iGp5XywhMqk6r37By5nMaRPueXbH5r/yKgxy2wD3/6QBxfCZRZtH
OT5P3CJH+UmZalEt6k9GtBW6UGQn9U4gqbUAPYXzKs08ErcVrpF8Lo59dktAOZfD
6alG5k0cOiPfZvmDGO1Cku9mCGAlYvNzEDvhhWE2bXkHGhFo7716stwSulm+8Zo9
AyzCL4Y6HDZo9g==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:21:30 2026 by rpki-client