Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
File:                     1Kje6labT0AYsLpuRDtVY663YiA.mft (raw, json)
Hash identifier:          avESOPLn6ab1TlwFOTYHpWgpRaBgTcRYNgmfUA3ObBs=
Subject key identifier:   E6:60:DD:57:6C:AF:8F:CD:59:B1:E8:91:70:61:1F:97:EB:B2:4B:B9
Authority key identifier: D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
Certificate issuer:       /CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Certificate serial:       01A0E1751DBEF2094C753A138431634ACDE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
Manifest number:          F1
Signing time:             Sun 27 Sep 2026 06:02:23 +0000
Manifest this update:     Sun 27 Sep 2026 06:02:23 +0000
Manifest next update:     Mon 28 Sep 2026 06:02:23 +0000
Files and hashes:         1: 1Kje6labT0AYsLpuRDtVY663YiA.crl (hash: ejCLlV9YMOFU5TDd43+3/vpjPAjCoYyY16zWk1QYLSw=)
                          2: puE6u0HKBVhoiNbcuu-ULYY8Kk8.roa (hash: Nsy+BGKO8DFH8hsL6UVbzQQ8Z1YVvGEGRofMSsrpZ4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:75:1d:be:f2:09:4c:75:3a:13:84:31:63:4a:cd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
        Validity
            Not Before: Sep 27 06:02:23 2026 GMT
            Not After : Sep 28 06:02:23 2026 GMT
        Subject: CN=e660dd576caf8fcd59b1e89170611f97ebb24bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:e6:e1:3a:04:c3:a0:b5:2a:f2:54:d4:66:
                    02:9d:2f:b8:cb:84:6a:79:e5:07:be:df:27:69:f4:
                    dc:e5:47:47:19:27:6b:b3:2c:e3:da:14:df:d0:9b:
                    7e:37:e5:b6:b7:d4:55:5f:d5:2b:bc:88:a1:2d:64:
                    c7:77:83:b6:5e:12:92:71:25:b5:be:36:56:22:d6:
                    28:19:58:92:ca:d0:49:cd:b5:88:a2:ad:1a:04:b6:
                    29:f2:2c:1d:ba:ee:e5:b9:b5:a3:41:ad:8a:0b:9f:
                    7d:85:45:24:28:ae:fb:01:70:99:23:df:2a:32:17:
                    8d:1e:e4:3e:01:e4:6e:39:54:9d:6f:bd:dd:cc:30:
                    b0:e8:e4:e1:b8:d9:06:94:0e:d9:48:cb:b8:bc:14:
                    9e:a2:f6:37:15:5f:83:c8:87:5d:3f:1a:43:df:11:
                    77:e9:97:13:9b:c9:8f:6b:c5:98:2a:47:3b:47:9e:
                    19:88:43:20:be:2f:ce:32:0d:fd:cf:3e:28:f2:18:
                    26:42:d3:d5:3a:76:34:2b:0c:72:bc:3a:74:8c:ea:
                    6a:5d:80:b1:62:ef:e0:dd:c0:01:e1:3e:c2:cb:b2:
                    69:2d:a9:0d:e6:83:c2:3d:c4:7a:3d:79:93:4a:79:
                    2a:49:9e:49:97:b6:fe:07:cb:47:5c:f0:39:39:d5:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:60:DD:57:6C:AF:8F:CD:59:B1:E8:91:70:61:1F:97:EB:B2:4B:B9
            X509v3 Authority Key Identifier:
                keyid:D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:77:a6:6b:7a:c1:ff:5e:b2:63:44:22:9c:a6:35:7f:c3:5c:
         d7:d4:f7:a1:85:a6:14:51:81:07:8c:3d:da:06:49:80:0b:25:
         2d:69:2e:f2:e4:c7:2c:30:2d:5f:7b:d9:c8:c4:b7:ef:66:2b:
         35:a3:bd:17:e2:f4:4a:f9:13:b4:8b:05:d0:a7:c2:87:e0:f3:
         c4:e1:5e:7f:8b:36:1c:32:8f:7a:3a:3f:b9:6f:a5:62:64:ad:
         a3:0d:2d:7c:7e:e2:ab:4c:68:28:04:6d:ff:93:72:80:39:ec:
         1f:a2:3e:b5:3c:e2:10:6e:92:8b:02:35:44:62:70:f3:1d:20:
         bc:34:8a:49:b4:d4:57:c0:07:b6:40:7b:44:d9:5c:c8:41:44:
         ca:80:9a:a7:c4:91:d2:02:8e:b6:f9:37:d4:c0:88:95:d2:58:
         c4:a8:46:4f:1b:c8:86:b5:f8:2a:58:77:32:71:54:e7:b0:71:
         fe:fd:27:33:5a:3a:94:87:11:77:78:fd:38:4b:81:52:ac:8e:
         50:86:fa:d2:76:50:c7:9c:93:5d:6c:b8:9f:08:ba:66:c7:1b:
         54:51:c2:d2:13:02:64:63:64:54:6c:3f:72:02:2d:1d:83:41:
         4d:e7:66:47:82:bb:72:9d:07:0a:15:38:6c:a6:4b:5b:5c:ad:
         81:71:78:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdR2+8glMdToThDFjSs3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YThkZWVhNTY5YjRmNDAxOGIwYmE2ZTQ0M2I1NTYzYWVi
NzYyMjAwHhcNMjYwOTI3MDYwMjIzWhcNMjYwOTI4MDYwMjIzWjAzMTEwLwYDVQQD
EyhlNjYwZGQ1NzZjYWY4ZmNkNTliMWU4OTE3MDYxMWY5N2ViYjI0YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lbm4ToEw6C1KvJU1GYCnS+4y4Rq
eeUHvt8nafTc5UdHGSdrsyzj2hTf0Jt+N+W2t9RVX9UrvIihLWTHd4O2XhKScSW1
vjZWItYoGViSytBJzbWIoq0aBLYp8iwduu7lubWjQa2KC599hUUkKK77AXCZI98q
MheNHuQ+AeRuOVSdb73dzDCw6OThuNkGlA7ZSMu4vBSeovY3FV+DyIddPxpD3xF3
6ZcTm8mPa8WYKkc7R54ZiEMgvi/OMg39zz4o8hgmQtPVOnY0KwxyvDp0jOpqXYCx
Yu/g3cAB4T7Cy7JpLakN5oPCPcR6PXmTSnkqSZ5Jl7b+B8tHXPA5OdXbMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZg3Vdsr4/NWbHokXBhH5frsku5MB8GA1UdIwQY
MBaAFNSo3upWm09AGLC6bkQ7VWOut2IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2It
MTYwMmQ2YWQxNDFhLzEvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2ItMTYwMmQ2YWQxNDFh
LzEvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXema3rB
/16yY0QinKY1f8Nc19T3oYWmFFGBB4w92gZJgAslLWku8uTHLDAtX3vZyMS372Yr
NaO9F+L0SvkTtIsF0KfCh+DzxOFef4s2HDKPejo/uW+lYmStow0tfH7iq0xoKARt
/5NygDnsH6I+tTziEG6SiwI1RGJw8x0gvDSKSbTUV8AHtkB7RNlcyEFEyoCap8SR
0gKOtvk31MCIldJYxKhGTxvIhrX4Klh3MnFU57Bx/v0nM1o6lIcRd3j9OEuBUqyO
UIb60nZQx5yTXWy4nwi6ZscbVFHC0hMCZGNkVGw/cgItHYNBTedmR4K7cp0HChU4
bKZLW1ytgXF4vQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:30:28 2026 by rpki-client