Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
File:                     brmgpz47pWk4Hd2m1kcNx8hzyVk.mft (raw, json)
Hash identifier:          seUs1cCqW9qQd9Kt2DEEsVy/UhxhNapZjb5INg3smq8=
Subject key identifier:   03:C0:FF:79:C0:C1:11:67:D8:DF:67:19:EF:23:CD:EF:7E:93:98:A4
Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
Certificate issuer:       /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Certificate serial:       01A0D45DEA239D6C040BDBC6A900BE0150AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 17:01:59 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:59 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:59 +0000
Files and hashes:         1: Pwvl_Zcat1KTzpuXYTtavIgP748.roa (hash: iLZ+jEw20ZEVrfeL0bdjMhqCq56ZpvLuivOan0qgqsE=)
                          2: brmgpz47pWk4Hd2m1kcNx8hzyVk.crl (hash: mCiW6tsc9IjwVsm/ZKLT9hwMLxpBJUVVupV0tBOOO/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:ea:23:9d:6c:04:0b:db:c6:a9:00:be:01:50:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
        Validity
            Not Before: Sep 24 17:01:59 2026 GMT
            Not After : Sep 25 17:01:59 2026 GMT
        Subject: CN=03c0ff79c0c11167d8df6719ef23cdef7e9398a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:65:55:db:e0:24:11:cc:36:84:84:46:7d:
                    b1:9c:dd:5b:58:99:63:05:c7:af:7e:db:a6:a7:f1:
                    29:72:f9:84:11:fb:f3:66:e6:85:c3:22:d8:59:92:
                    e6:c8:4e:ee:f3:b0:47:24:0f:7f:82:13:dd:22:12:
                    29:0d:26:de:2a:bc:75:65:b2:9b:34:50:f7:db:e3:
                    3f:af:c4:7e:c1:f9:6a:62:89:e4:39:c3:2f:1a:b7:
                    23:4c:82:90:b4:9e:8b:bd:07:81:14:1d:ff:b7:ff:
                    29:0f:86:a0:dd:1d:c5:a6:84:ff:5c:81:b1:5e:c9:
                    08:93:1d:5f:96:53:6e:a1:62:46:aa:fa:42:ac:7f:
                    37:31:4e:11:8d:92:ec:d3:4b:a2:7e:9c:96:7b:c7:
                    3c:05:20:c6:30:ab:17:7a:87:3a:41:1c:17:18:dd:
                    f5:ea:20:bc:b6:dc:94:31:2f:29:17:0b:30:b8:43:
                    b0:4f:7a:5a:b3:c1:09:0d:06:d2:6c:82:b1:93:6c:
                    41:c1:f6:2e:14:73:88:b9:ce:5d:a2:7b:bb:f3:b0:
                    16:c3:20:17:38:d5:56:25:31:7a:3d:17:1a:8d:6c:
                    00:60:a1:5a:38:0d:84:94:7f:06:db:f5:ef:08:87:
                    46:6b:38:51:ce:6c:59:d1:06:3b:aa:cc:ca:a2:77:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:FF:79:C0:C1:11:67:D8:DF:67:19:EF:23:CD:EF:7E:93:98:A4
            X509v3 Authority Key Identifier:
                keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2d:d4:c4:4d:b4:47:f5:43:28:5e:b0:1c:0f:8e:b5:1c:f8:
         ec:aa:0d:6e:6c:ef:95:8f:ea:cb:55:6e:dc:86:f5:70:9d:40:
         f0:16:a0:7a:e7:dc:c8:61:a7:37:b6:cd:fc:84:65:fe:c2:4b:
         b8:22:9d:f7:d0:a9:58:95:af:9f:c3:70:43:b2:62:76:e7:d9:
         bb:eb:7e:ff:b6:55:5a:23:41:ef:e1:9f:c9:73:63:f2:f8:7a:
         25:44:48:be:8f:4a:3e:95:da:5e:03:f9:7c:d9:90:62:05:68:
         69:48:92:f9:bf:82:76:9c:83:5c:7a:75:cd:0f:39:a4:31:3b:
         13:59:ed:9f:8c:27:36:a1:da:06:45:8b:3e:92:56:5b:67:e5:
         48:99:27:45:e8:40:92:1f:85:58:c9:13:0e:ca:48:0a:c2:d1:
         d7:d5:3f:70:cd:44:5f:0c:03:aa:1e:cf:b9:e7:c8:e0:30:cb:
         72:70:d5:e9:16:b5:1e:51:42:4a:a2:72:5d:d2:a7:77:12:d2:
         f5:67:dc:f0:4c:bb:31:1e:79:ab:53:b3:61:b9:68:45:bf:b7:
         e1:a6:6c:60:26:a9:26:c8:77:75:62:50:c6:59:49:5c:d4:a2:
         a9:70:94:96:97:06:d9:f8:3a:15:e7:9a:a7:69:bb:44:43:b6:
         a8:37:25:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXeojnWwEC9vGqQC+AVCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjlhMGE3M2UzYmE1NjkzODFkZGRhNmQ2NDcwZGM3Yzg3
M2M5NTkwHhcNMjYwOTI0MTcwMTU5WhcNMjYwOTI1MTcwMTU5WjAzMTEwLwYDVQQD
EygwM2MwZmY3OWMwYzExMTY3ZDhkZjY3MTllZjIzY2RlZjdlOTM5OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJFlVdvgJBHMNoSERn2xnN1bWJlj
Bcevftump/EpcvmEEfvzZuaFwyLYWZLmyE7u87BHJA9/ghPdIhIpDSbeKrx1ZbKb
NFD32+M/r8R+wflqYonkOcMvGrcjTIKQtJ6LvQeBFB3/t/8pD4ag3R3FpoT/XIGx
XskIkx1fllNuoWJGqvpCrH83MU4RjZLs00uifpyWe8c8BSDGMKsXeoc6QRwXGN31
6iC8ttyUMS8pFwswuEOwT3pas8EJDQbSbIKxk2xBwfYuFHOIuc5donu787AWwyAX
ONVWJTF6PRcajWwAYKFaOA2ElH8G2/XvCIdGazhRzmxZ0QY7qszKonclqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPA/3nAwRFn2N9nGe8jze9+k5ikMB8GA1UdIwQY
MBaAFG65oKc+O6VpOB3dptZHDcfIc8lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJtZ3B6NDdwV2s0SGQybTFrY054OGh6eVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jYWE2OGUtN2E5ZS00Y2FlLThkMmEt
ZTkwMjE5YmM4ZmYxLzEvYnJtZ3B6NDdwV2s0SGQybTFrY054OGh6eVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jYWE2OGUtN2E5ZS00Y2FlLThkMmEtZTkwMjE5YmM4ZmYx
LzEvYnJtZ3B6NDdwV2s0SGQybTFrY054OGh6eVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmC3UxE20
R/VDKF6wHA+OtRz47KoNbmzvlY/qy1Vu3Ib1cJ1A8BageufcyGGnN7bN/IRl/sJL
uCKd99CpWJWvn8NwQ7JidufZu+t+/7ZVWiNB7+GfyXNj8vh6JURIvo9KPpXaXgP5
fNmQYgVoaUiS+b+CdpyDXHp1zQ85pDE7E1ntn4wnNqHaBkWLPpJWW2flSJknRehA
kh+FWMkTDspICsLR19U/cM1EXwwDqh7PuefI4DDLcnDV6Ra1HlFCSqJyXdKndxLS
9Wfc8Ey7MR55q1OzYbloRb+34aZsYCapJsh3dWJQxllJXNSiqXCUlpcG2fg6Feea
p2m7REO2qDclHA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:03:48 2026 by rpki-client