Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          O40GH/t4gmd0OsFFu9nOcCj2uJXb7gbhD25TMKiqV1E=
Subject key identifier:   AB:C1:52:08:58:08:EF:22:E5:F0:A2:2D:6D:56:08:60:9B:8F:2F:53
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       01A0DCF29B5AAB47C390C2437E1DD6F11B11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          0585
Signing time:             Sat 26 Sep 2026 09:01:22 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:22 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:22 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: kAUjcRttnBrWqyPpFhXj1M1IFtbwUVJYaRWYo+NuI+4=)
                          2: YEUnSBKT0NF45geJlh4cxnhY8-E.roa (hash: 5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:9b:5a:ab:47:c3:90:c2:43:7e:1d:d6:f1:1b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Sep 26 09:01:22 2026 GMT
            Not After : Sep 27 09:01:22 2026 GMT
        Subject: CN=abc152085808ef22e5f0a22d6d5608609b8f2f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:f2:ca:aa:57:c8:ba:e9:2d:fc:cd:17:f2:
                    bb:30:7c:1d:5c:e4:c3:b0:0f:0a:64:1f:eb:38:3a:
                    a1:0d:57:47:c0:16:69:13:a0:3e:40:93:98:da:b0:
                    db:1a:c4:1b:fd:c0:7e:29:72:6e:1e:ad:45:f2:8c:
                    9e:e0:70:bd:5b:8f:f6:ec:24:47:b0:b6:a8:6c:aa:
                    c9:56:04:1e:e4:07:c9:08:44:e5:a3:e2:28:ce:17:
                    e2:2b:90:30:b0:e2:4f:80:0e:54:03:c4:d9:3b:fb:
                    95:f2:26:40:83:5f:de:14:ff:59:e6:a6:01:ce:39:
                    f1:f6:6e:94:cc:b4:05:24:76:16:16:89:76:79:92:
                    8b:03:3d:7a:f2:68:1a:86:07:08:00:a9:78:39:00:
                    da:b6:45:b1:6c:8d:28:36:a3:2d:a0:f9:da:10:d6:
                    e5:10:e5:38:ad:1a:ae:84:32:b8:3f:ae:f6:b3:3a:
                    00:2e:16:8b:c9:6f:7d:a0:96:d6:a6:f3:9e:2a:a3:
                    a6:04:1c:1d:c7:93:17:24:d2:be:1b:f2:b7:b1:4d:
                    37:58:36:61:70:5b:3f:17:30:52:33:c2:15:b4:f1:
                    30:26:ca:f4:b5:fc:c5:c9:77:94:22:db:c4:18:cc:
                    81:f7:15:ae:e3:4b:dc:59:c9:51:5d:7e:00:58:a8:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C1:52:08:58:08:EF:22:E5:F0:A2:2D:6D:56:08:60:9B:8F:2F:53
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:be:49:74:60:4f:08:49:f7:5a:63:f8:2e:a7:3d:df:6d:56:
         60:45:03:8c:ed:c6:2a:81:d8:75:0e:46:d9:a8:22:8d:d5:79:
         6b:64:ce:94:ab:47:36:a1:c4:32:ca:a9:1a:94:4c:93:38:56:
         1d:f8:ce:5b:97:b2:45:e4:cf:60:03:a2:6a:46:a1:5d:38:3c:
         24:2d:72:7e:b6:de:00:c4:51:36:f3:52:23:fc:d4:9f:31:ad:
         ff:d4:5f:39:3a:61:6c:6d:22:db:59:d9:7d:37:8f:8a:d1:72:
         de:0d:12:80:50:09:c3:56:5b:60:be:8a:56:1e:a7:23:ac:0c:
         e4:c1:e1:5e:dd:73:47:5f:e1:7e:38:1e:4d:fe:31:b6:d6:5e:
         97:ff:f2:06:e4:64:e7:0f:f5:19:91:0f:c5:5e:3c:79:48:45:
         e3:37:80:d1:1d:f1:f7:d0:ce:75:78:51:f2:e0:3c:af:06:b2:
         f8:cc:6c:c8:93:af:9a:c5:4e:75:ad:3c:e3:52:15:c2:62:c0:
         ee:1f:6e:76:71:a8:7c:b2:e6:03:42:3b:43:90:3c:ab:2e:17:
         e4:f8:69:76:bc:a8:c0:12:e6:a9:12:43:ad:e8:96:77:28:c7:
         99:49:f6:9e:0b:3c:1e:a3:62:b1:ee:6d:99:bf:35:aa:9b:ec:
         ca:af:15:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8ptaq0fDkMJDfh3W8RsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWMyODhjZjc3OGVkZGQ2MjFlMzM2NDViZjU1ZDdlN2E4
YTZlODAwHhcNMjYwOTI2MDkwMTIyWhcNMjYwOTI3MDkwMTIyWjAzMTEwLwYDVQQD
EyhhYmMxNTIwODU4MDhlZjIyZTVmMGEyMmQ2ZDU2MDg2MDliOGYyZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt3yyqpXyLrpLfzNF/K7MHwdXOTD
sA8KZB/rODqhDVdHwBZpE6A+QJOY2rDbGsQb/cB+KXJuHq1F8oye4HC9W4/27CRH
sLaobKrJVgQe5AfJCETlo+IozhfiK5AwsOJPgA5UA8TZO/uV8iZAg1/eFP9Z5qYB
zjnx9m6UzLQFJHYWFol2eZKLAz168mgahgcIAKl4OQDatkWxbI0oNqMtoPnaENbl
EOU4rRquhDK4P672szoALhaLyW99oJbWpvOeKqOmBBwdx5MXJNK+G/K3sU03WDZh
cFs/FzBSM8IVtPEwJsr0tfzFyXeUItvEGMyB9xWu40vcWclRXX4AWKjApQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvBUghYCO8i5fCiLW1WCGCbjy9TMB8GA1UdIwQY
MBaAFOqsKIz3eO3dYh4zZFv1XX56im6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYt
NzFiOTM4YWU0Y2NkLzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYtNzFiOTM4YWU0Y2Nk
LzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJL5JdGBP
CEn3WmP4Lqc9321WYEUDjO3GKoHYdQ5G2agijdV5a2TOlKtHNqHEMsqpGpRMkzhW
HfjOW5eyReTPYAOiakahXTg8JC1yfrbeAMRRNvNSI/zUnzGt/9RfOTphbG0i21nZ
fTePitFy3g0SgFAJw1ZbYL6KVh6nI6wM5MHhXt1zR1/hfjgeTf4xttZel//yBuRk
5w/1GZEPxV48eUhF4zeA0R3x99DOdXhR8uA8rway+MxsyJOvmsVOda0841IVwmLA
7h9udnGofLLmA0I7Q5A8qy4X5PhpdryowBLmqRJDreiWdyjHmUn2ngs8HqNise5t
mb81qpvsyq8Vbw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:49:14 2026 by rpki-client