Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          FRaAzAo7tXaQRk6fkfuzrD2Hrfelwj31sNQLzeUAo4A=
Subject key identifier:   05:C8:7B:B9:09:49:AE:33:24:1D:F3:10:E1:F1:1F:43:D2:75:B3:14
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       01A0D38301FD9E6A0DB67594490573AB3BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          1A59
Signing time:             Thu 24 Sep 2026 13:02:53 +0000
Manifest this update:     Thu 24 Sep 2026 13:02:53 +0000
Manifest next update:     Fri 25 Sep 2026 13:02:53 +0000
Files and hashes:         1: Am-KOohcL2MqtHNdtJvWFx7LN0g.roa (hash: LCrtT5oylKVJNkSk1MoZh1tTPAUpbotUkU/vpFTgXwg=)
                          2: TaUt_QbnT12Cj0MJDAhR-kF-PEw.roa (hash: zEveZ5gOVczcVTnDPyLcGk6kCF01sibDnDEggCPZLVo=)
                          3: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (hash: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE=)
                          4: kHcfHQ_Q7qYFE1i5oI94BxcWKSs.roa (hash: IqrgWq3K1h3GQVzAuQLHwLlEf6MEibclzogL4CwmRgw=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: OTIc8ngK1O+PetDozP0lAAodEkOZP1dWLEentm1Q0mo=)
                          6: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (hash: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c=)
                          7: zaMHea7sFzJLhecvORSvMX9hIVc.roa (hash: bJl+nhnvuUdcLs/tcqbGutj6qSb94yLtvZWixaa+/uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:01:fd:9e:6a:0d:b6:75:94:49:05:73:ab:3b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Sep 24 13:02:53 2026 GMT
            Not After : Sep 25 13:02:53 2026 GMT
        Subject: CN=05c87bb90949ae33241df310e1f11f43d275b314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:84:64:93:f0:19:cf:aa:59:a1:4d:89:65:
                    49:38:f3:f5:20:48:be:38:27:10:79:61:e6:76:ce:
                    93:27:77:b2:13:17:03:ba:11:4b:30:28:20:9a:6e:
                    34:9e:5f:65:d6:64:62:0c:5e:b0:f0:14:b4:c1:f0:
                    92:4f:89:a3:1a:8d:da:3f:93:07:df:30:f0:95:ff:
                    5e:85:ea:58:55:6d:00:a6:9b:a7:87:08:0a:04:66:
                    14:a0:0e:a1:1a:68:50:54:b6:66:53:84:fe:87:d7:
                    ef:24:8d:eb:76:1c:5a:0f:2f:a3:06:00:85:3c:f5:
                    ce:41:58:13:9a:fe:ab:33:ef:41:8a:df:1b:db:29:
                    d4:d1:b3:03:5b:e0:50:c1:6b:fc:4b:8b:a9:23:b0:
                    82:a8:c3:69:01:26:63:b8:8b:90:2d:87:fe:6b:21:
                    8b:a7:af:d5:f4:f8:be:2f:35:b1:8d:f2:41:66:c4:
                    74:7c:76:29:3a:e6:f1:4c:20:54:f5:7e:be:b6:56:
                    a5:09:28:39:ab:4a:fb:67:a1:f6:5c:11:e1:54:97:
                    aa:2f:c0:20:73:96:36:21:5e:c7:c2:9c:73:f7:ac:
                    e1:da:86:ff:f0:a2:d8:81:b5:76:ae:2f:02:75:9b:
                    1a:cb:bd:bc:72:94:7b:cc:26:e1:71:3f:2a:bb:22:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C8:7B:B9:09:49:AE:33:24:1D:F3:10:E1:F1:1F:43:D2:75:B3:14
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:3c:3e:7f:79:ab:1b:ff:dc:ca:05:10:05:12:e0:23:21:
         7d:b2:e7:60:0a:ca:bb:fb:c8:3c:e0:d1:06:98:71:df:96:60:
         a9:b3:52:7e:b8:1e:2e:f2:16:f2:ff:81:96:ac:85:99:df:3e:
         6f:25:7e:ef:4a:9a:71:08:2b:79:9f:9a:14:45:fb:f9:b1:86:
         b8:5c:81:e9:21:4b:2a:3a:75:f4:40:cc:43:d3:28:e2:d3:38:
         1a:ba:48:04:89:4c:8c:4b:a2:68:ff:3e:3a:88:05:42:e0:59:
         43:ed:a3:34:d3:b6:03:be:f7:3a:d1:b8:d3:a5:85:df:51:db:
         0e:c7:cf:91:62:6c:75:ae:b7:21:08:bd:db:81:a3:85:5a:82:
         2d:03:13:1b:f8:77:cf:34:57:c6:ff:31:8e:b2:c6:d0:45:a0:
         3b:fb:5b:ca:b0:53:84:c7:35:c3:e2:ec:60:74:4a:e2:d7:c0:
         35:82:c7:31:81:8a:31:d5:b0:76:75:5a:79:a4:cd:81:64:3a:
         60:fd:14:87:c3:5a:17:e3:6a:85:9b:5d:58:db:ca:ca:9a:b4:
         54:eb:ab:5a:eb:30:d5:2c:a6:a0:c5:8c:ec:6b:bb:de:38:1b:
         9a:96:97:f7:70:99:8b:4e:aa:5d:ce:c3:57:df:9e:19:4b:44:
         6d:82:31:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTgwH9nmoNtnWUSQVzqzv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw
NGE5ODEwHhcNMjYwOTI0MTMwMjUzWhcNMjYwOTI1MTMwMjUzWjAzMTEwLwYDVQQD
EygwNWM4N2JiOTA5NDlhZTMzMjQxZGYzMTBlMWYxMWY0M2QyNzViMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu12EZJPwGc+qWaFNiWVJOPP1IEi+
OCcQeWHmds6TJ3eyExcDuhFLMCggmm40nl9l1mRiDF6w8BS0wfCST4mjGo3aP5MH
3zDwlf9ehepYVW0AppunhwgKBGYUoA6hGmhQVLZmU4T+h9fvJI3rdhxaDy+jBgCF
PPXOQVgTmv6rM+9Bit8b2ynU0bMDW+BQwWv8S4upI7CCqMNpASZjuIuQLYf+ayGL
p6/V9Pi+LzWxjfJBZsR0fHYpOubxTCBU9X6+tlalCSg5q0r7Z6H2XBHhVJeqL8Ag
c5Y2IV7Hwpxz96zh2ob/8KLYgbV2ri8CdZsay728cpR7zCbhcT8quyI46QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXIe7kJSa4zJB3zEOHxH0PSdbMUMB8GA1UdIwQY
MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt
ODM2YzMxMmFjOGMyLzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy
LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNY8Pn95
qxv/3MoFEAUS4CMhfbLnYArKu/vIPODRBphx35ZgqbNSfrgeLvIW8v+BlqyFmd8+
byV+70qacQgreZ+aFEX7+bGGuFyB6SFLKjp19EDMQ9Mo4tM4GrpIBIlMjEuiaP8+
OogFQuBZQ+2jNNO2A773OtG406WF31HbDsfPkWJsda63IQi924GjhVqCLQMTG/h3
zzRXxv8xjrLG0EWgO/tbyrBThMc1w+LsYHRK4tfANYLHMYGKMdWwdnVaeaTNgWQ6
YP0Uh8NaF+NqhZtdWNvKypq0VOurWusw1SymoMWM7Gu73jgbmpaX93CZi06qXc7D
V9+eGUtEbYIxNA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:53:45 2026 by rpki-client