Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          mmDAPUw4wEAHd+J/KxspTWzlcFwa6hoCRPbEko7K420=
Subject key identifier:   AB:14:02:71:D5:D8:95:12:0C:65:F9:11:8A:B6:F1:DD:6B:9D:C8:E0
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       01A0D383C769E3325C7B56DDFB6676A4FCA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          10C4
Signing time:             Thu 24 Sep 2026 13:03:43 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:43 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:43 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: Ns07jcPBEHWiTIzJMsiocR9xKFp2TgMIQGFuamwcnlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:c7:69:e3:32:5c:7b:56:dd:fb:66:76:a4:fc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Sep 24 13:03:43 2026 GMT
            Not After : Sep 25 13:03:43 2026 GMT
        Subject: CN=ab140271d5d895120c65f9118ab6f1dd6b9dc8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:87:91:c3:36:3d:29:58:d5:2d:d9:7d:b0:
                    a7:fb:3b:0c:fb:46:ce:7f:86:35:23:19:87:ab:ba:
                    82:eb:43:46:a8:f7:35:16:46:8b:c6:93:e6:1b:49:
                    25:f7:af:04:2b:4c:8f:b2:62:e0:82:0a:94:d4:e2:
                    e9:d7:f6:f8:2c:0a:20:26:74:d9:3d:ec:64:e8:78:
                    44:6e:90:39:00:9e:0b:36:a3:5c:cc:03:dc:91:46:
                    b0:07:e6:2b:4b:89:2b:6a:10:c5:e3:6d:78:57:88:
                    89:5c:7b:93:3e:5b:32:74:4a:75:27:28:b1:28:d4:
                    20:13:78:1e:cc:46:a0:7b:cf:17:ad:a2:eb:53:ae:
                    93:e8:ef:59:4b:4e:b3:73:bf:14:35:e6:ce:bc:3a:
                    e8:46:ba:39:53:fa:f6:e3:7f:9e:a1:f2:dc:77:a3:
                    e7:7f:d5:8c:b0:e6:6f:8d:20:1d:b9:fa:c3:73:2a:
                    72:93:c3:f2:44:c5:4a:59:b7:3e:4e:c1:62:53:5e:
                    50:38:78:1d:b2:d6:c9:82:d5:4a:e5:fd:d2:7a:72:
                    d9:1c:6e:69:97:c3:74:47:f5:b7:cd:fe:7c:06:e9:
                    2f:22:7f:30:2d:69:8c:92:4e:78:e0:8f:09:40:c0:
                    6d:78:8c:27:b5:97:70:3d:9d:86:e0:72:e9:c4:2e:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:14:02:71:D5:D8:95:12:0C:65:F9:11:8A:B6:F1:DD:6B:9D:C8:E0
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:f6:90:26:c6:51:88:fb:30:66:3e:e8:0e:7d:a5:50:0a:
         ea:35:c1:2f:1c:4d:cf:d2:e4:f2:40:f8:ca:c0:8a:97:39:b7:
         33:be:3f:c2:e3:fe:ac:1b:80:32:6e:0f:0e:58:72:0b:5c:0a:
         3f:ff:ce:c6:e9:ca:8e:6f:c2:12:2d:5b:c8:fe:35:fc:ce:16:
         88:8b:7c:94:9f:b2:0c:89:1c:09:95:bb:b2:28:07:1f:7f:47:
         c6:7c:6c:a9:43:c4:95:6e:05:1c:ed:64:87:91:dd:be:1d:a4:
         8a:a5:ee:81:b7:7b:b2:92:8c:50:0f:94:18:42:0d:58:43:fb:
         a3:dc:ef:45:76:ce:28:1f:7f:73:65:07:4f:0b:5f:17:37:b0:
         25:2f:6d:38:93:d9:5c:fe:69:ee:fe:65:bc:b0:69:2f:27:5d:
         e7:df:bd:32:79:c9:75:46:9b:96:13:36:9b:4e:4c:9f:bb:63:
         b7:cc:78:81:ce:45:0c:07:ac:de:3b:a6:e4:0b:c4:ed:2f:db:
         27:bf:c1:ee:2d:79:65:71:af:76:d9:07:f0:38:49:a8:10:9d:
         cc:45:09:15:44:cb:bc:0a:30:6c:41:13:00:af:d7:df:ae:a5:
         43:9f:46:2e:84:51:dc:de:d8:7b:28:1d:79:9d:d9:3a:68:7d:
         5e:6e:23:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg8dp4zJce1bd+2Z2pPymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZWU0OThhZWFiYTE0NTU3NmE2MWI2MzdmMTM2ZWMxYzNm
NDMwZGQwHhcNMjYwOTI0MTMwMzQzWhcNMjYwOTI1MTMwMzQzWjAzMTEwLwYDVQQD
EyhhYjE0MDI3MWQ1ZDg5NTEyMGM2NWY5MTE4YWI2ZjFkZDZiOWRjOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmuHkcM2PSlY1S3ZfbCn+zsM+0bO
f4Y1IxmHq7qC60NGqPc1FkaLxpPmG0kl968EK0yPsmLgggqU1OLp1/b4LAogJnTZ
Pexk6HhEbpA5AJ4LNqNczAPckUawB+YrS4krahDF4214V4iJXHuTPlsydEp1Jyix
KNQgE3gezEage88XraLrU66T6O9ZS06zc78UNebOvDroRro5U/r243+eofLcd6Pn
f9WMsOZvjSAdufrDcypyk8PyRMVKWbc+TsFiU15QOHgdstbJgtVK5f3SenLZHG5p
l8N0R/W3zf58BukvIn8wLWmMkk544I8JQMBteIwntZdwPZ2G4HLpxC60JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsUAnHV2JUSDGX5EYq28d1rncjgMB8GA1UdIwQY
MBaAFOjuSYrquhRVdqYbY38TbsHD9DDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wZWM5MDUtNjc0MC00NmY0LWIwZTgt
YTA2OGFjOGIxMDI4LzEvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8wZWM5MDUtNjc0MC00NmY0LWIwZTgtYTA2OGFjOGIxMDI4
LzEvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgr2kCbG
UYj7MGY+6A59pVAK6jXBLxxNz9Lk8kD4ysCKlzm3M74/wuP+rBuAMm4PDlhyC1wK
P//OxunKjm/CEi1byP41/M4WiIt8lJ+yDIkcCZW7sigHH39HxnxsqUPElW4FHO1k
h5Hdvh2kiqXugbd7spKMUA+UGEINWEP7o9zvRXbOKB9/c2UHTwtfFzewJS9tOJPZ
XP5p7v5lvLBpLydd59+9MnnJdUablhM2m05Mn7tjt8x4gc5FDAes3jum5AvE7S/b
J7/B7i15ZXGvdtkH8DhJqBCdzEUJFUTLvAowbEETAK/X366lQ59GLoRR3N7Yeygd
eZ3ZOmh9Xm4jgA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:49:35 2026 by rpki-client