Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File:                     1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier:          gT6ZlW2ytsjPswPL57LOO0naOoB0qijF4RZYK1xxEy4=
Subject key identifier:   D7:1C:96:A8:A4:37:E6:59:26:CC:5E:20:90:63:A7:25:B3:2C:5B:62
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer:       /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial:       01A0E1AB6ADBDE63F8F5EF0833A81947CD42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number:          1A76
Signing time:             Sun 27 Sep 2026 07:01:42 +0000
Manifest this update:     Sun 27 Sep 2026 07:01:42 +0000
Manifest next update:     Mon 28 Sep 2026 07:01:42 +0000
Files and hashes:         1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: T/FtHBE9cx+ue9IK0nghG0csDcVV4QASTn19IfkSBVU=)
                          2: J6FmNDAxHRgFsssLSzgzQh53r1Y.roa (hash: 9kmfubQa+S1khPjpZARKisbPrmjL4y5wvcmzrFU7yFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:ab:6a:db:de:63:f8:f5:ef:08:33:a8:19:47:cd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
        Validity
            Not Before: Sep 27 07:01:42 2026 GMT
            Not After : Sep 28 07:01:42 2026 GMT
        Subject: CN=d71c96a8a437e65926cc5e209063a725b32c5b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:93:32:03:d7:a1:83:3e:9c:61:d3:5a:de:
                    4b:fb:fc:2b:73:64:f0:58:d8:16:1e:67:0e:72:57:
                    91:59:e2:79:e3:fa:0f:d7:de:64:23:f6:99:48:75:
                    fc:03:1e:81:75:58:62:9a:fe:7f:be:cd:fd:60:67:
                    04:83:ca:51:2b:5f:32:7d:8c:a1:d6:4d:0d:70:2a:
                    30:d8:4e:f4:df:11:6f:5f:f9:f4:db:dd:6f:3f:a3:
                    12:23:a5:86:a4:7a:37:42:2b:2e:59:49:9b:30:fb:
                    88:14:d1:da:c9:b4:72:b3:17:ea:a7:5a:ee:62:5f:
                    94:4e:47:98:c7:27:0c:ae:ba:e7:7d:e2:26:74:67:
                    c5:dd:8b:57:99:80:3e:d7:6f:6d:ff:46:a8:17:c0:
                    5f:cb:94:a3:78:46:15:e7:bd:a5:95:b2:a3:66:f8:
                    61:66:c3:a2:71:a9:54:5c:6b:b6:c8:d3:22:95:56:
                    35:5d:59:52:81:15:c1:af:0c:0d:81:68:6a:ae:96:
                    d0:61:82:0b:6c:b4:96:7c:89:bd:d8:37:7b:25:f5:
                    71:08:03:fb:44:bb:06:16:e8:bd:5f:f4:c6:49:e1:
                    58:5b:2c:2f:77:61:50:89:93:7b:52:b5:71:45:4e:
                    c8:2b:f6:26:33:6c:25:76:0f:5d:85:9a:c5:2c:3f:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1C:96:A8:A4:37:E6:59:26:CC:5E:20:90:63:A7:25:B3:2C:5B:62
            X509v3 Authority Key Identifier:
                keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:0e:4e:13:45:e7:9d:34:68:75:bb:b5:02:10:f5:4e:87:
         d5:84:6c:fc:64:9f:b8:95:26:40:74:1c:de:69:07:40:5b:3a:
         f3:dd:fc:1a:d5:c7:95:c5:30:e0:ef:15:6d:75:db:5d:b4:48:
         ba:08:25:7b:34:09:2d:a8:00:3a:0a:90:e8:59:0d:e5:44:c1:
         0a:01:fe:4f:f3:38:e9:06:7b:a7:98:10:31:13:71:af:73:83:
         ea:38:8a:1d:2a:b6:de:64:37:ce:c4:04:34:1a:32:0a:94:59:
         94:2d:53:64:3d:72:09:8c:15:7f:e4:42:f3:31:10:0a:54:48:
         b2:86:92:dc:ea:e0:f0:33:41:3d:df:bb:43:80:5f:2d:45:82:
         3a:3d:1c:87:ac:0d:96:4e:dc:51:07:c8:ea:f4:66:b8:3b:0b:
         89:2e:ee:97:09:a6:4b:a2:27:7c:e9:b6:7e:9f:52:1c:7f:55:
         69:8a:7a:7f:a3:7a:d1:08:8a:94:32:82:40:28:27:d2:35:30:
         b7:38:21:2e:a6:cf:5d:b5:7a:c9:f0:4a:6e:d5:41:c2:df:42:
         8c:41:a5:bc:44:22:3f:fa:ab:4d:1e:5e:5c:51:76:c9:5c:d5:
         85:cd:11:3d:8d:1d:59:39:e8:38:6f:58:0d:df:e8:7d:25:c7:
         85:3d:2a:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhq2rb3mP49e8IM6gZR81CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmVhOTJlY2M5YjBkMzU0YjVmZDcwMmUwOTkxZjE1MGEz
MDlmZTQwHhcNMjYwOTI3MDcwMTQyWhcNMjYwOTI4MDcwMTQyWjAzMTEwLwYDVQQD
EyhkNzFjOTZhOGE0MzdlNjU5MjZjYzVlMjA5MDYzYTcyNWIzMmM1YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KCTMgPXoYM+nGHTWt5L+/wrc2Tw
WNgWHmcOcleRWeJ54/oP195kI/aZSHX8Ax6BdVhimv5/vs39YGcEg8pRK18yfYyh
1k0NcCow2E703xFvX/n0291vP6MSI6WGpHo3QisuWUmbMPuIFNHaybRysxfqp1ru
Yl+UTkeYxycMrrrnfeImdGfF3YtXmYA+129t/0aoF8Bfy5SjeEYV572llbKjZvhh
ZsOicalUXGu2yNMilVY1XVlSgRXBrwwNgWhqrpbQYYILbLSWfIm92Dd7JfVxCAP7
RLsGFui9X/TGSeFYWywvd2FQiZN7UrVxRU7IK/YmM2wldg9dhZrFLD9FtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcclqikN+ZZJsxeIJBjpyWzLFtiMB8GA1UdIwQY
MBaAFNYuqS7Mmw01S1/XAuCZHxUKMJ/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTct
NTQ1OTQ3OTVlZWEyLzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTctNTQ1OTQ3OTVlZWEy
LzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7QOThNF
5500aHW7tQIQ9U6H1YRs/GSfuJUmQHQc3mkHQFs68938GtXHlcUw4O8VbXXbXbRI
ugglezQJLagAOgqQ6FkN5UTBCgH+T/M46QZ7p5gQMRNxr3OD6jiKHSq23mQ3zsQE
NBoyCpRZlC1TZD1yCYwVf+RC8zEQClRIsoaS3Org8DNBPd+7Q4BfLUWCOj0ch6wN
lk7cUQfI6vRmuDsLiS7ulwmmS6InfOm2fp9SHH9VaYp6f6N60QiKlDKCQCgn0jUw
tzghLqbPXbV6yfBKbtVBwt9CjEGlvEQiP/qrTR5eXFF2yVzVhc0RPY0dWTnoOG9Y
Dd/ofSXHhT0qsA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:23:21 2026 by rpki-client