Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
File:                     w6uBXAlcSeUjkHwrRhKXcJemuFg.mft (raw, json)
Hash identifier:          oI2upfRDI/1syfMem/0X8dA/+iiqm+DludxrIZPrd/o=
Subject key identifier:   CB:AE:F5:7D:61:F6:0E:23:55:21:87:19:F1:0D:BD:E7:D5:63:A9:F5
Authority key identifier: C3:AB:81:5C:09:5C:49:E5:23:90:7C:2B:46:12:97:70:97:A6:B8:58
Certificate issuer:       /CN=c3ab815c095c49e523907c2b4612977097a6b858
Certificate serial:       01A115987736437519EDEA60D8C80345C5FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
Manifest number:          0109
Signing time:             Wed 07 Oct 2026 09:01:15 +0000
Manifest this update:     Wed 07 Oct 2026 09:01:15 +0000
Manifest next update:     Thu 08 Oct 2026 09:01:15 +0000
Files and hashes:         1: cF65Y72OTkUIe_PM4Wd1M3sisbs.roa (hash: oVz1TLgu7Q2K4UrameIrD6zZiFY59GSx7iKcM+J23ds=)
                          2: w6uBXAlcSeUjkHwrRhKXcJemuFg.crl (hash: ECEO8uPMQbuBWty7fw4A0wegDCAtZhGS+o0VjsNwxNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:98:77:36:43:75:19:ed:ea:60:d8:c8:03:45:c5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ab815c095c49e523907c2b4612977097a6b858
        Validity
            Not Before: Oct  7 09:01:15 2026 GMT
            Not After : Oct  8 09:01:15 2026 GMT
        Subject: CN=cbaef57d61f60e2355218719f10dbde7d563a9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:d3:2e:1f:1e:5e:33:d6:47:1e:22:7b:74:
                    bf:1c:cd:9c:94:3f:a2:29:ca:91:7b:d4:fe:65:5b:
                    87:ec:83:4f:0a:35:f0:32:9f:db:38:cc:4d:36:8c:
                    87:06:0c:98:42:42:26:23:19:7c:db:cf:7d:ec:7c:
                    88:31:bf:70:69:30:5d:c5:46:79:68:1b:65:e2:dd:
                    f3:a5:4a:6f:47:cf:9f:8a:ff:96:ea:bf:a3:24:a7:
                    d4:b4:46:62:49:7c:9d:b3:78:44:09:6b:83:13:6c:
                    bd:ae:3c:86:5b:0c:19:c7:b8:b3:e3:a1:2c:35:43:
                    c6:ac:cf:3a:51:fd:64:35:83:f0:a1:7f:f6:ad:f7:
                    ce:e6:eb:33:e4:14:29:5e:f8:2e:be:2c:ac:f8:96:
                    8c:d6:a2:82:81:b1:ee:d7:d7:d3:0c:e3:bd:69:35:
                    e6:7b:12:b1:1e:34:60:06:90:82:8f:3b:c6:ec:1e:
                    34:21:5b:4e:7d:97:b3:3c:23:88:df:91:3e:88:67:
                    2d:3e:c7:22:f2:19:85:63:d1:9a:a8:f9:17:b9:5f:
                    15:97:fd:3f:4d:35:af:ed:84:aa:4e:48:ac:90:1b:
                    27:9b:ec:a1:fc:d9:ae:0c:e5:d7:01:a7:9e:2c:23:
                    72:1c:45:2d:10:76:42:f1:47:be:13:c4:6b:f1:ff:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AE:F5:7D:61:F6:0E:23:55:21:87:19:F1:0D:BD:E7:D5:63:A9:F5
            X509v3 Authority Key Identifier:
                keyid:C3:AB:81:5C:09:5C:49:E5:23:90:7C:2B:46:12:97:70:97:A6:B8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uBXAlcSeUjkHwrRhKXcJemuFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/w6uBXAlcSeUjkHwrRhKXcJemuFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:cb:d1:b0:48:84:9a:29:57:9b:47:62:42:b4:dd:32:e1:
         78:45:8c:67:14:12:cd:53:11:f9:b3:6f:dc:b5:8f:46:a0:61:
         49:f2:29:dd:19:fb:e2:76:50:ec:fc:d6:d5:e6:fb:cd:9a:ca:
         51:4d:8d:10:12:23:3a:b8:c8:57:34:37:74:4d:a2:29:42:3a:
         51:71:2d:32:d0:c4:38:86:d6:fd:78:ae:0b:d6:ed:66:1c:1e:
         46:f9:ca:1d:d8:43:32:4c:23:3e:5b:01:a1:e4:ef:23:b1:64:
         2b:74:6b:e3:58:45:28:83:c8:8e:24:58:45:42:39:9d:a4:d9:
         06:d1:ee:9c:e2:6e:fb:02:58:12:dd:f3:79:d6:53:ba:67:14:
         d3:8a:0d:a4:07:a1:b9:de:c3:e5:fa:1f:28:b2:4f:16:28:35:
         90:7f:8a:01:40:14:5a:21:e0:04:61:35:49:66:78:6e:c5:18:
         2d:72:ee:59:f8:06:b0:e7:a1:ee:0c:98:b3:44:20:96:90:c4:
         98:3e:07:3d:46:ed:fa:4d:95:f0:9a:46:a4:10:30:30:8a:52:
         9a:98:34:e4:4a:7b:b2:b9:01:1f:4b:70:47:7d:ba:82:0e:fb:
         d9:16:23:c8:78:7e:6b:3d:1b:ea:62:17:75:cc:a4:7a:e5:51:
         5a:04:17:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEVmHc2Q3UZ7epg2MgDRcX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYWI4MTVjMDk1YzQ5ZTUyMzkwN2MyYjQ2MTI5NzcwOTdh
NmI4NTgwHhcNMjYxMDA3MDkwMTE1WhcNMjYxMDA4MDkwMTE1WjAzMTEwLwYDVQQD
EyhjYmFlZjU3ZDYxZjYwZTIzNTUyMTg3MTlmMTBkYmRlN2Q1NjNhOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiHTLh8eXjPWRx4ie3S/HM2clD+i
KcqRe9T+ZVuH7INPCjXwMp/bOMxNNoyHBgyYQkImIxl828997HyIMb9waTBdxUZ5
aBtl4t3zpUpvR8+fiv+W6r+jJKfUtEZiSXyds3hECWuDE2y9rjyGWwwZx7iz46Es
NUPGrM86Uf1kNYPwoX/2rffO5usz5BQpXvguviys+JaM1qKCgbHu19fTDOO9aTXm
exKxHjRgBpCCjzvG7B40IVtOfZezPCOI35E+iGctPsci8hmFY9GaqPkXuV8Vl/0/
TTWv7YSqTkiskBsnm+yh/NmuDOXXAaeeLCNyHEUtEHZC8Ue+E8Rr8f8xZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuu9X1h9g4jVSGHGfENvefVY6n1MB8GA1UdIwQY
MBaAFMOrgVwJXEnlI5B8K0YSl3CXprhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZ1QlhBbGNTZVVqa0h3clJoS1hjSmVtdUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAt
NGRjOWJmNjQyZGQyLzEvdzZ1QlhBbGNTZVVqa0h3clJoS1hjSmVtdUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAtNGRjOWJmNjQyZGQy
LzEvdzZ1QlhBbGNTZVVqa0h3clJoS1hjSmVtdUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATv/L0bBI
hJopV5tHYkK03TLheEWMZxQSzVMR+bNv3LWPRqBhSfIp3Rn74nZQ7PzW1eb7zZrK
UU2NEBIjOrjIVzQ3dE2iKUI6UXEtMtDEOIbW/XiuC9btZhweRvnKHdhDMkwjPlsB
oeTvI7FkK3Rr41hFKIPIjiRYRUI5naTZBtHunOJu+wJYEt3zedZTumcU04oNpAeh
ud7D5fofKLJPFig1kH+KAUAUWiHgBGE1SWZ4bsUYLXLuWfgGsOeh7gyYs0QglpDE
mD4HPUbt+k2V8JpGpBAwMIpSmpg05Ep7srkBH0twR326gg772RYjyHh+az0b6mIX
dcykeuVRWgQXdw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 12:36:08 2026 by rpki-client