Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File:                     n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier:          GMIDlzEiGfc6eeQShp6obxDDhcAwaMg1xIuH7EWi5HE=
Subject key identifier:   B6:C8:F0:7F:7B:B7:E3:29:8B:D4:15:E3:E9:B9:56:EE:8E:E8:81:83
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer:       /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial:       01A1DCB95FFB9A054D63C5DCF251FD4EA839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number:          1793
Signing time:             Sun 15 Nov 2026 01:01:38 +0000
Manifest this update:     Sun 15 Nov 2026 01:01:38 +0000
Manifest next update:     Mon 16 Nov 2026 01:01:38 +0000
Files and hashes:         1: YdLZYGNBx5ifVhvHrE-Wi4s5Pq8.roa (hash: UhcnEKVQY6GztLAChvJDoRhnDCVtXiX/WS/jkKhjOg0=)
                          2: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: ZcPoy3lNSmOrOgduu8SOXbQZuJFecKXGLVsW7JYiwB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:b9:5f:fb:9a:05:4d:63:c5:dc:f2:51:fd:4e:a8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
        Validity
            Not Before: Nov 15 01:01:38 2026 GMT
            Not After : Nov 16 01:01:38 2026 GMT
        Subject: CN=b6c8f07f7bb7e3298bd415e3e9b956ee8ee88183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:64:0d:55:ca:c7:cb:f2:4e:e2:b4:1f:d9:
                    76:c0:23:e4:97:20:54:08:49:c2:21:ee:8f:3e:05:
                    67:29:da:87:cb:fa:d3:67:ae:15:a1:44:03:27:b7:
                    e6:26:c8:19:fe:5a:06:63:8b:c4:55:03:b1:9f:b3:
                    6d:49:86:da:b2:19:28:85:62:09:df:d1:95:d8:e3:
                    26:82:d1:f4:f1:d2:32:99:20:dd:19:27:ed:62:82:
                    86:af:c7:74:de:6e:0f:7d:80:26:05:9b:b9:24:a0:
                    7c:83:3e:2e:22:4a:f5:f9:fd:de:e6:ec:d0:dc:22:
                    49:f8:01:32:3e:dd:cf:89:7c:16:e5:94:9c:87:84:
                    9c:95:26:78:10:5a:4b:20:7d:86:61:ff:0b:97:25:
                    84:d7:b8:ef:28:9d:14:26:fc:83:da:2d:e2:b7:b1:
                    b6:64:e9:8e:3b:05:5f:a1:7b:02:cd:66:2f:67:3a:
                    b8:9b:62:da:cf:42:20:b6:a5:4f:be:d4:70:17:06:
                    2d:e7:dc:99:d0:5f:4f:13:92:ca:bf:6e:60:70:90:
                    7e:17:a9:5f:4e:b7:d0:86:ce:94:72:34:6b:4c:c1:
                    f4:bc:af:b0:e3:f1:ef:95:17:86:e7:4c:36:52:2c:
                    2e:6f:16:7d:89:51:dc:27:4d:da:59:22:b2:90:26:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C8:F0:7F:7B:B7:E3:29:8B:D4:15:E3:E9:B9:56:EE:8E:E8:81:83
            X509v3 Authority Key Identifier:
                keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b0:bd:7a:7b:b1:92:f6:a9:26:97:77:3c:63:bd:61:a5:37:
         3a:43:07:50:77:2b:ba:8d:5e:d8:54:2a:15:a3:5c:80:af:39:
         72:77:b5:dc:08:36:96:dd:74:8b:22:9d:eb:88:e4:ac:49:05:
         8c:e7:5c:67:2d:d6:fe:46:27:c2:b1:d2:74:38:84:33:6e:cb:
         f6:28:e5:01:93:14:1f:04:47:3a:13:5b:83:fe:d1:76:a6:e7:
         82:37:dd:92:c5:b0:06:41:91:38:ce:83:c9:79:e1:9b:58:6f:
         cf:92:16:13:08:8e:21:be:e2:25:7d:d8:73:ea:d8:3c:03:06:
         5b:62:d0:21:a2:2e:95:0e:25:d9:9b:c1:a2:91:20:a2:48:d8:
         d7:b2:2f:13:ee:97:11:b8:54:a6:04:47:17:d6:24:50:43:24:
         6b:24:3c:1b:44:70:4d:7e:1e:2e:01:6e:32:cb:62:9e:b5:01:
         f9:70:fa:69:0f:0c:a6:1f:32:fb:20:a2:8c:a6:f5:eb:a1:ad:
         fd:3f:16:95:77:32:f1:2f:cc:fe:25:c0:58:55:15:0b:f4:47:
         16:95:d4:5e:90:24:03:91:c7:75:b2:d7:47:c8:ea:f0:e2:f9:
         b6:ec:87:e6:d5:6d:f0:87:40:4c:a7:46:ae:4f:58:94:76:6e:
         94:bc:ed:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuV/7mgVNY8Xc8lH9Tqg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYTc4NTlkYzM5ZDQ3MzYxNDJjZjFlMjI5YzhhYzRiZTYy
M2I5MDMwHhcNMjYxMTE1MDEwMTM4WhcNMjYxMTE2MDEwMTM4WjAzMTEwLwYDVQQD
EyhiNmM4ZjA3ZjdiYjdlMzI5OGJkNDE1ZTNlOWI5NTZlZThlZTg4MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyBkDVXKx8vyTuK0H9l2wCPklyBU
CEnCIe6PPgVnKdqHy/rTZ64VoUQDJ7fmJsgZ/loGY4vEVQOxn7NtSYbashkohWIJ
39GV2OMmgtH08dIymSDdGSftYoKGr8d03m4PfYAmBZu5JKB8gz4uIkr1+f3e5uzQ
3CJJ+AEyPt3PiXwW5ZSch4SclSZ4EFpLIH2GYf8LlyWE17jvKJ0UJvyD2i3it7G2
ZOmOOwVfoXsCzWYvZzq4m2Laz0IgtqVPvtRwFwYt59yZ0F9PE5LKv25gcJB+F6lf
TrfQhs6UcjRrTMH0vK+w4/HvlReG50w2UiwubxZ9iVHcJ03aWSKykCaKYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbI8H97t+Mpi9QV4+m5Vu6O6IGDMB8GA1UdIwQY
MBaAFJ+nhZ3DnUc2FCzx4inIrEvmI7kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTIt
ZThkNmMyZjA3MWRmLzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTItZThkNmMyZjA3MWRm
LzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULC9enux
kvapJpd3PGO9YaU3OkMHUHcruo1e2FQqFaNcgK85cne13Ag2lt10iyKd64jkrEkF
jOdcZy3W/kYnwrHSdDiEM27L9ijlAZMUHwRHOhNbg/7RdqbngjfdksWwBkGROM6D
yXnhm1hvz5IWEwiOIb7iJX3Yc+rYPAMGW2LQIaIulQ4l2ZvBopEgokjY17IvE+6X
EbhUpgRHF9YkUEMkayQ8G0RwTX4eLgFuMstinrUB+XD6aQ8Mph8y+yCijKb166Gt
/T8WlXcy8S/M/iXAWFUVC/RHFpXUXpAkA5HHdbLXR8jq8OL5tuyH5tVt8IdATKdG
rk9YlHZulLzt5A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:44:18 2026 by rpki-client