Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          CJrPDLpRSZcxgwn8YXMcXvTfTOruOkAkCe7JUJB98/o=
Subject key identifier:   F7:96:DE:AC:B8:D9:F0:DA:39:62:1E:3D:C5:DE:1F:C4:FB:75:A5:1C
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       01A0DFF44EBC05C0B2A97EBEB2589D7A85A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          1A41
Signing time:             Sat 26 Sep 2026 23:02:04 +0000
Manifest this update:     Sat 26 Sep 2026 23:02:04 +0000
Manifest next update:     Sun 27 Sep 2026 23:02:04 +0000
Files and hashes:         1: EadvWoNQk_Njor8ut2EuvMgsWZA.roa (hash: 272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: wp1SEow86yc8sXYZ21q6X/wRygn7jRAIVHCdmqSNuyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f4:4e:bc:05:c0:b2:a9:7e:be:b2:58:9d:7a:85:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Sep 26 23:02:04 2026 GMT
            Not After : Sep 27 23:02:04 2026 GMT
        Subject: CN=f796deacb8d9f0da39621e3dc5de1fc4fb75a51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:3b:fd:19:71:69:35:8d:03:2f:a3:f8:01:
                    94:c2:d5:fb:d8:78:1a:9c:92:0e:5a:1f:1e:13:09:
                    fe:ea:5a:77:3b:8a:43:3a:a9:e9:f0:34:98:15:63:
                    e4:12:f0:64:51:f1:2e:1a:3d:43:4b:13:cd:0d:2d:
                    eb:91:16:b4:eb:21:dc:5e:ab:49:bb:38:c4:77:db:
                    d8:26:f8:5f:51:45:c8:88:db:61:9e:e9:5f:6c:b2:
                    1e:05:86:c7:60:d2:ed:36:10:1f:57:68:e0:5f:8b:
                    b6:63:7c:49:aa:59:11:3e:f5:38:44:30:e3:b3:09:
                    db:e2:90:ca:be:34:a8:5a:6d:33:fc:57:75:c4:74:
                    c4:b5:75:4a:78:46:c4:07:9d:84:bb:96:2e:60:1f:
                    a2:3b:5f:1f:ba:43:99:36:f3:f3:b5:d5:41:3c:79:
                    9c:5a:b6:e2:a7:e5:a8:58:ed:5a:bc:c8:88:b1:a1:
                    5f:fd:06:b6:c7:d0:61:5f:c6:ba:f3:f5:a1:02:4d:
                    31:ed:97:2d:18:79:99:69:81:b1:ed:78:17:e1:58:
                    c5:58:cc:da:90:72:53:f3:ab:77:af:05:3d:2c:a5:
                    be:b0:af:60:52:59:0c:8c:01:eb:57:1d:79:4e:0c:
                    a5:ca:45:0d:b9:b8:2c:9c:e7:5c:fc:f1:bf:58:dc:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:96:DE:AC:B8:D9:F0:DA:39:62:1E:3D:C5:DE:1F:C4:FB:75:A5:1C
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:59:42:d5:35:4a:59:27:27:d6:49:7e:34:31:1d:c5:65:
         9b:5c:f3:30:90:e2:2f:f1:32:d5:99:06:a4:98:d5:f7:27:7e:
         fd:42:4b:3e:45:e7:54:c5:29:dd:64:50:ee:4b:e3:43:c5:68:
         14:8e:7e:47:a4:30:09:41:d4:a1:35:fe:00:61:00:63:71:ac:
         08:1b:1f:81:b1:d8:68:c4:49:9c:7f:4b:a9:20:fe:e5:f7:9c:
         0d:04:36:91:ff:74:f8:72:2d:82:fa:8f:a4:93:0d:ef:f0:4f:
         f9:ec:d9:6e:fc:d6:43:4b:25:ed:81:58:b4:c5:ac:e0:71:20:
         8c:32:13:6c:ef:61:df:a3:eb:2a:a7:7d:d5:07:98:47:42:df:
         fd:70:b0:44:89:b2:d6:ba:14:bd:a1:6a:bf:0c:6b:74:e5:45:
         9b:a2:ad:f8:91:c2:0e:a2:d6:61:72:9d:da:58:bc:2c:6c:7e:
         b4:cc:fa:f9:cc:5c:d5:c4:4c:ef:ca:0a:8e:03:e2:c8:f9:95:
         f5:92:22:e1:98:32:b3:6f:72:11:43:4d:49:88:cc:17:08:7f:
         cf:ae:53:20:77:0b:5e:3c:92:ee:5a:aa:ed:7e:99:8b:1e:48:
         2a:b5:a7:ef:77:d1:f7:94:d2:eb:96:6c:39:9d:a4:9d:8f:ea:
         c1:c6:3b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDf9E68BcCyqX6+slideoWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YThmZWE4ZmNhODAwYzFmYzQ5ZWYyZDg1YzkyZTMyMzc1
MmIwZWQwHhcNMjYwOTI2MjMwMjA0WhcNMjYwOTI3MjMwMjA0WjAzMTEwLwYDVQQD
EyhmNzk2ZGVhY2I4ZDlmMGRhMzk2MjFlM2RjNWRlMWZjNGZiNzVhNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs787/RlxaTWNAy+j+AGUwtX72Hga
nJIOWh8eEwn+6lp3O4pDOqnp8DSYFWPkEvBkUfEuGj1DSxPNDS3rkRa06yHcXqtJ
uzjEd9vYJvhfUUXIiNthnulfbLIeBYbHYNLtNhAfV2jgX4u2Y3xJqlkRPvU4RDDj
swnb4pDKvjSoWm0z/Fd1xHTEtXVKeEbEB52Eu5YuYB+iO18fukOZNvPztdVBPHmc
Wrbip+WoWO1avMiIsaFf/Qa2x9BhX8a68/WhAk0x7ZctGHmZaYGx7XgX4VjFWMza
kHJT86t3rwU9LKW+sK9gUlkMjAHrVx15TgylykUNubgsnOdc/PG/WNxm2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeW3qy42fDaOWIePcXeH8T7daUcMB8GA1UdIwQY
MBaAFLeo/qj8qADB/EnvLYXJLjI3UrDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQt
YWY3MTRhZDUyZjI5LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQtYWY3MTRhZDUyZjI5
LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5xZQtU1
SlknJ9ZJfjQxHcVlm1zzMJDiL/Ey1ZkGpJjV9yd+/UJLPkXnVMUp3WRQ7kvjQ8Vo
FI5+R6QwCUHUoTX+AGEAY3GsCBsfgbHYaMRJnH9LqSD+5fecDQQ2kf90+HItgvqP
pJMN7/BP+ezZbvzWQ0sl7YFYtMWs4HEgjDITbO9h36PrKqd91QeYR0Lf/XCwRImy
1roUvaFqvwxrdOVFm6Kt+JHCDqLWYXKd2li8LGx+tMz6+cxc1cRM78oKjgPiyPmV
9ZIi4Zgys29yEUNNSYjMFwh/z65TIHcLXjyS7lqq7X6Zix5IKrWn73fR95TS65Zs
OZ2knY/qwcY7ZQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:51:15 2026 by rpki-client