Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File:                     Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier:          KMGJ3KcIqlxWyKCR5xs5dbiqAJktSHL3dmSgt9p8GyM=
Subject key identifier:   67:00:73:58:9C:75:65:A8:AC:E7:FF:2E:6B:D4:94:B7:26:60:B7:89
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer:       /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial:       01A133A28366B84D5CB0E60E4429D80C5D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number:          12D6
Signing time:             Tue 13 Oct 2026 05:00:50 +0000
Manifest this update:     Tue 13 Oct 2026 05:00:50 +0000
Manifest next update:     Wed 14 Oct 2026 05:00:50 +0000
Files and hashes:         1: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: GRlK7DUqE+YNpksIRAt3jZadEaBBUiCMZDhw+PGvHc8=)
                          2: zuvfz_qQwxwSkAdtG0Js-khyYL4.roa (hash: xagvaZCpPwHCxyMBtZK7vMyfxxV2ODbD7qNizvfSRvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:a2:83:66:b8:4d:5c:b0:e6:0e:44:29:d8:0c:5d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
        Validity
            Not Before: Oct 13 05:00:50 2026 GMT
            Not After : Oct 14 05:00:50 2026 GMT
        Subject: CN=670073589c7565a8ace7ff2e6bd494b72660b789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:df:39:6e:e0:c1:e5:bd:13:25:07:c5:81:a3:
                    e9:a4:38:62:11:03:ce:cc:bd:56:75:d5:27:52:26:
                    5c:07:10:42:87:c6:ac:50:40:1a:79:4c:5a:0b:37:
                    8b:af:a6:4e:51:8f:09:25:c8:39:8e:6b:aa:ed:95:
                    0b:b9:a2:75:fa:63:76:df:3a:0f:dc:d3:16:57:07:
                    01:89:3d:84:cc:c4:b0:0f:5f:76:f1:61:90:35:16:
                    c6:7e:7f:5e:44:b7:b9:eb:40:be:90:ec:3e:dd:3d:
                    8e:63:f1:5b:c8:ae:e4:bb:ec:8a:e4:4d:24:ce:db:
                    cd:49:4e:a4:a4:40:29:a1:4d:34:f9:fd:0c:26:29:
                    76:bb:05:74:a7:54:b6:54:34:30:9f:d9:5c:97:05:
                    95:8c:17:e8:7a:4e:1b:62:54:87:c7:3c:11:8a:8f:
                    65:1a:c5:be:d7:c8:68:a6:dd:69:64:dd:9a:b5:8a:
                    42:b1:88:39:59:20:16:30:af:71:6d:bc:59:dd:80:
                    25:4e:c1:7b:5f:ae:66:9d:cb:04:8e:03:6b:6d:7e:
                    c9:a9:33:a9:ab:96:27:d4:ef:41:0b:05:00:8e:15:
                    39:1e:cf:ac:8e:65:b4:58:91:3d:78:30:6d:f9:d1:
                    ef:1d:74:c3:e8:7d:07:ab:f8:2d:7e:a2:b6:3a:9e:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:00:73:58:9C:75:65:A8:AC:E7:FF:2E:6B:D4:94:B7:26:60:B7:89
            X509v3 Authority Key Identifier:
                keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:41:d6:6b:3d:f8:a1:10:eb:40:8a:7f:49:bd:83:4c:8c:4b:
         dd:23:b5:ce:df:ca:10:6f:51:c1:5c:96:70:82:a2:00:1b:b9:
         dc:19:01:cb:98:9d:a4:6c:aa:15:17:25:17:5c:b1:74:09:af:
         e5:0b:d5:31:9b:fe:37:e2:0d:39:81:80:bb:69:ae:9e:5d:8f:
         fe:dc:46:c8:f0:03:19:8f:4a:4e:08:ea:75:dc:60:3d:3a:e2:
         81:59:c2:e6:3f:0c:3f:61:d5:4c:64:91:de:1f:1d:4c:04:2d:
         62:1e:fc:11:fe:9f:62:e5:4e:bb:83:a1:db:b4:cd:44:83:6f:
         d7:5b:c8:25:49:29:ba:b3:da:68:fb:9b:e7:68:c9:b0:b4:de:
         26:b3:78:b4:0a:35:45:39:9d:ac:aa:c5:2c:84:09:b7:42:6b:
         f5:2b:ad:64:61:7e:60:84:cc:cb:a1:2a:5c:26:83:e6:77:6f:
         17:35:4b:42:97:a0:73:19:fb:7a:36:f0:1e:fb:71:07:69:99:
         a5:01:ce:f0:84:47:2c:65:e5:5a:79:7c:8d:d2:f1:a0:4d:01:
         7e:39:38:b4:49:66:e2:66:1f:59:e6:d1:9d:d6:6c:ba:e7:b0:
         b9:59:14:97:87:31:5f:d5:10:d0:8b:97:91:ec:72:49:8f:c8:
         40:49:49:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEzooNmuE1csOYORCnYDF1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZmU4YzcyYWEzMmRlOTU3YjI0Y2Y5ZjczZjhhN2ZiMWFj
ZjBiNzEwHhcNMjYxMDEzMDUwMDUwWhcNMjYxMDE0MDUwMDUwWjAzMTEwLwYDVQQD
Eyg2NzAwNzM1ODljNzU2NWE4YWNlN2ZmMmU2YmQ0OTRiNzI2NjBiNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N85buDB5b0TJQfFgaPppDhiEQPO
zL1WddUnUiZcBxBCh8asUEAaeUxaCzeLr6ZOUY8JJcg5jmuq7ZULuaJ1+mN23zoP
3NMWVwcBiT2EzMSwD1928WGQNRbGfn9eRLe560C+kOw+3T2OY/FbyK7ku+yK5E0k
ztvNSU6kpEApoU00+f0MJil2uwV0p1S2VDQwn9lclwWVjBfoek4bYlSHxzwRio9l
GsW+18hopt1pZN2atYpCsYg5WSAWMK9xbbxZ3YAlTsF7X65mncsEjgNrbX7JqTOp
q5Yn1O9BCwUAjhU5Hs+sjmW0WJE9eDBt+dHvHXTD6H0Hq/gtfqK2Op4UnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcAc1icdWWorOf/LmvUlLcmYLeJMB8GA1UdIwQY
MBaAFEn+jHKqMt6VeyTPn3P4p/sazwtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUt
NDI5N2U1NzI2MTdlLzEvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUtNDI5N2U1NzI2MTdl
LzEvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkHWaz34
oRDrQIp/Sb2DTIxL3SO1zt/KEG9RwVyWcIKiABu53BkBy5idpGyqFRclF1yxdAmv
5QvVMZv+N+INOYGAu2munl2P/txGyPADGY9KTgjqddxgPTrigVnC5j8MP2HVTGSR
3h8dTAQtYh78Ef6fYuVOu4Oh27TNRINv11vIJUkpurPaaPub52jJsLTeJrN4tAo1
RTmdrKrFLIQJt0Jr9SutZGF+YITMy6EqXCaD5ndvFzVLQpegcxn7ejbwHvtxB2mZ
pQHO8IRHLGXlWnl8jdLxoE0Bfjk4tElm4mYfWebRndZsuuewuVkUl4cxX9UQ0IuX
kexySY/IQElJgg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:12:28 2026 by rpki-client