Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
File:                     6GtO0zF8kqNLdsj60prpcID5Hzs.mft (raw, json)
Hash identifier:          mJd9NofoLhXVTFMicm/+HEUeTUyEUpZK3ZVGet3I0dg=
Subject key identifier:   53:4A:CF:6E:8E:21:AD:9A:AD:FF:2B:B7:FC:58:39:C9:2A:17:B1:A0
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Certificate issuer:       /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial:       01A0CCDA4691D7C23DF6DEA6BEE0A810099A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
Manifest number:          1749
Signing time:             Wed 23 Sep 2026 06:00:51 +0000
Manifest this update:     Wed 23 Sep 2026 06:00:51 +0000
Manifest next update:     Thu 24 Sep 2026 06:00:51 +0000
Files and hashes:         1: 6GtO0zF8kqNLdsj60prpcID5Hzs.crl (hash: +u2uz7tKKkyVRTH+PV2LvjlO3mNdJdK3TLboQtMl8+Q=)
                          2: fCJFqaSmlEUaHeJe6Nl29f553VQ.roa (hash: DBZpQG6cNb9N4NIAzi7S93mTg5IouP9LV1gaJIWMDnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:da:46:91:d7:c2:3d:f6:de:a6:be:e0:a8:10:09:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
        Validity
            Not Before: Sep 23 06:00:51 2026 GMT
            Not After : Sep 24 06:00:51 2026 GMT
        Subject: CN=534acf6e8e21ad9aadff2bb7fc5839c92a17b1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c5:be:d0:a0:8c:22:e0:61:76:a8:cb:7d:fe:
                    1b:18:1f:96:b1:81:76:a5:cd:57:28:95:0f:4b:25:
                    f5:18:ea:30:3e:39:fc:96:7a:57:84:a8:9a:30:f3:
                    ce:d8:e1:1d:e4:9f:a3:84:cb:ba:5a:8b:59:9f:94:
                    4c:1b:73:31:10:d2:11:2b:27:5d:5d:08:cf:0d:ab:
                    68:4d:63:db:a6:40:1d:f3:47:8d:ae:3f:37:20:4d:
                    86:1b:b8:06:00:4e:51:34:a6:ef:64:dd:73:bb:72:
                    62:92:72:a6:16:f7:8a:13:4b:d9:95:ca:87:b8:14:
                    45:52:8c:af:76:be:db:a7:fa:73:10:f0:ec:48:01:
                    2f:70:3d:9c:36:b8:89:47:84:38:92:14:78:07:cd:
                    18:c7:28:e9:51:08:ad:64:86:99:6f:f3:85:0b:41:
                    28:cc:d0:71:38:d2:28:65:f7:5d:ee:55:5e:ed:6e:
                    86:38:c3:39:88:d1:02:c7:7e:3e:ad:17:f6:46:60:
                    54:9c:52:29:42:22:89:aa:cb:f3:0e:01:c4:fe:57:
                    59:ce:cc:44:a1:7c:4a:20:db:e6:f1:cc:1e:3b:e5:
                    bd:b6:32:42:4a:95:da:c9:53:0c:a0:e4:f7:b2:69:
                    a8:88:5e:be:e2:9b:f5:59:a4:74:b1:b8:51:6d:15:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4A:CF:6E:8E:21:AD:9A:AD:FF:2B:B7:FC:58:39:C9:2A:17:B1:A0
            X509v3 Authority Key Identifier:
                keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:cb:17:85:c4:75:4d:59:63:a6:27:3e:df:78:0a:97:97:
         bb:32:14:fc:47:06:0f:90:7e:8e:d3:4d:05:72:62:96:73:57:
         87:42:9d:8b:92:ac:41:b6:39:12:e9:8e:97:cf:f8:69:4b:54:
         0b:f8:11:af:b0:23:e9:3d:f7:4b:f1:b8:dd:0b:c7:9d:e8:0e:
         ff:4a:f2:2b:46:4a:8f:23:cf:d6:67:ff:4e:3e:e4:d8:f1:36:
         7f:a1:d9:2c:54:3e:15:0d:d4:ae:e2:d1:9d:92:7e:e3:88:c7:
         06:c0:55:e9:b6:69:cc:90:9f:0c:5e:41:59:88:aa:3a:b6:a0:
         70:be:00:ae:dc:02:46:28:e9:8a:ea:72:8d:d6:aa:35:12:3c:
         74:87:9f:b5:fc:4c:a7:1a:74:38:5c:1b:64:98:32:2a:b0:1d:
         2c:34:3e:7d:91:9c:1b:62:f5:66:a3:aa:a6:e9:37:4b:fa:a9:
         68:8b:0d:5c:22:ef:23:2a:19:dc:20:ef:83:04:78:1a:7a:b8:
         1f:6f:04:ef:91:d0:f7:b3:2a:c3:57:55:66:32:5d:02:64:e0:
         4c:ad:05:35:ad:ef:41:fd:f9:4e:35:a1:7e:8b:8c:30:7b:36:
         5a:b3:a4:ef:3e:a5:a0:71:3c:69:05:a3:1a:89:ed:78:f5:43:
         77:3f:48:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2kaR18I99t6mvuCoEAmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NmI0ZWQzMzE3YzkyYTM0Yjc2YzhmYWQyOWFlOTcwODBm
OTFmM2IwHhcNMjYwOTIzMDYwMDUxWhcNMjYwOTI0MDYwMDUxWjAzMTEwLwYDVQQD
Eyg1MzRhY2Y2ZThlMjFhZDlhYWRmZjJiYjdmYzU4MzljOTJhMTdiMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cW+0KCMIuBhdqjLff4bGB+WsYF2
pc1XKJUPSyX1GOowPjn8lnpXhKiaMPPO2OEd5J+jhMu6WotZn5RMG3MxENIRKydd
XQjPDatoTWPbpkAd80eNrj83IE2GG7gGAE5RNKbvZN1zu3JiknKmFveKE0vZlcqH
uBRFUoyvdr7bp/pzEPDsSAEvcD2cNriJR4Q4khR4B80YxyjpUQitZIaZb/OFC0Eo
zNBxONIoZfdd7lVe7W6GOMM5iNECx34+rRf2RmBUnFIpQiKJqsvzDgHE/ldZzsxE
oXxKINvm8cweO+W9tjJCSpXayVMMoOT3smmoiF6+4pv1WaR0sbhRbRWOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNKz26OIa2arf8rt/xYOckqF7GgMB8GA1UdIwQY
MBaAFOhrTtMxfJKjS3bI+tKa6XCA+R87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEt
MzI1YWFkZDczM2MzLzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEtMzI1YWFkZDczM2Mz
LzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5bLF4XE
dU1ZY6YnPt94CpeXuzIU/EcGD5B+jtNNBXJilnNXh0Kdi5KsQbY5EumOl8/4aUtU
C/gRr7Aj6T33S/G43QvHnegO/0ryK0ZKjyPP1mf/Tj7k2PE2f6HZLFQ+FQ3UruLR
nZJ+44jHBsBV6bZpzJCfDF5BWYiqOragcL4ArtwCRijpiupyjdaqNRI8dIeftfxM
pxp0OFwbZJgyKrAdLDQ+fZGcG2L1ZqOqpuk3S/qpaIsNXCLvIyoZ3CDvgwR4Gnq4
H28E75HQ97Mqw1dVZjJdAmTgTK0FNa3vQf35TjWhfouMMHs2WrOk7z6loHE8aQWj
GontePVDdz9IEg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:46:16 2026 by rpki-client