Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
File:                     6CLYReFTmSp46PRFIyZNJhSxe50.mft (raw, json)
Hash identifier:          WinclB+DTkApWO7MynevLYq8Om4V7LpGpsg1SAYZ1vM=
Subject key identifier:   74:C0:63:2A:49:AF:A8:E1:80:08:C2:E1:16:42:42:BA:F8:E1:71:C7
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Certificate issuer:       /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial:       01A0CA46C31D1F6C5CE5BE264F1F5461EE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
Manifest number:          09FE
Signing time:             Tue 22 Sep 2026 18:00:29 +0000
Manifest this update:     Tue 22 Sep 2026 18:00:29 +0000
Manifest next update:     Wed 23 Sep 2026 18:00:29 +0000
Files and hashes:         1: 6CLYReFTmSp46PRFIyZNJhSxe50.crl (hash: TwOnfkgc4StZRyvFSnUwVYURLfZ/gFUHnsapCiLJ/i0=)
                          2: 8sph1Iilwcy44cyBDGIOiNcciZc.roa (hash: DAz6Ppsy/dUr6FC8qgrSiRy5YAj9fXyStl0yZkiYgzQ=)
                          3: UL1TM9Ku_1pFMPJup9TtTTluHCY.roa (hash: r5zkiq+Hlx8k6L5HudvPP84rfmCiM2+7yiyNp6m+sMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:46:c3:1d:1f:6c:5c:e5:be:26:4f:1f:54:61:ee:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
        Validity
            Not Before: Sep 22 18:00:29 2026 GMT
            Not After : Sep 23 18:00:29 2026 GMT
        Subject: CN=74c0632a49afa8e18008c2e1164242baf8e171c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:d2:14:ee:02:59:2e:5f:c0:b1:2c:5e:54:
                    13:b2:1d:89:7e:91:ed:62:9e:74:66:e9:c7:22:21:
                    a4:33:bb:e2:85:96:e2:fb:fe:31:7a:65:41:ba:5b:
                    af:e6:2f:6c:9a:34:81:fc:ef:10:bb:7e:f5:c9:d5:
                    8f:b7:0e:ac:dc:f1:37:02:2d:bd:8c:0a:55:20:fc:
                    e4:e9:99:a9:33:03:63:09:25:1b:91:c0:bd:5b:cd:
                    aa:e7:89:25:3c:b3:c8:46:b4:a9:de:d0:4d:9f:c3:
                    05:ac:f3:7b:fb:75:c8:48:46:e7:fd:d9:79:e2:50:
                    4c:95:ce:dd:c4:87:49:4c:37:34:8d:d6:4f:51:ba:
                    9a:c1:ed:13:5c:ff:37:bd:8f:fc:03:ac:ee:fb:0c:
                    6d:7b:6f:71:ce:38:14:eb:e4:30:60:d6:5d:7b:83:
                    fa:ca:58:06:ab:43:fa:84:61:9d:42:03:4d:7f:2b:
                    11:3b:53:7c:8c:c8:67:0a:d4:a1:1a:b6:c0:6a:7e:
                    8d:f2:99:74:ca:a8:c5:bf:78:7e:95:12:9d:8a:a2:
                    62:fe:c3:21:29:e8:00:fe:64:f4:9e:e5:e3:75:46:
                    b4:cc:09:ec:18:7f:92:b0:d1:f7:17:6d:ee:e8:a5:
                    e3:f7:a8:77:f1:2c:5e:64:d2:aa:bf:46:ce:27:23:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C0:63:2A:49:AF:A8:E1:80:08:C2:E1:16:42:42:BA:F8:E1:71:C7
            X509v3 Authority Key Identifier:
                keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:48:86:9e:81:c7:79:c5:d9:12:56:ab:4a:da:ba:64:21:7b:
         04:dc:d4:86:02:a0:a9:80:54:f1:77:56:c9:07:5e:7e:b2:36:
         2f:49:cb:ac:6f:c4:b7:3d:91:9b:de:dd:5d:3d:c6:6b:86:fe:
         fa:4b:9d:1e:f4:42:30:ad:65:ad:af:f4:9c:91:49:71:1b:a1:
         bb:c9:54:a7:b8:83:8c:90:04:d9:7a:e2:10:dd:54:1f:e0:b5:
         fa:45:81:b8:4e:5f:3d:62:ae:2a:df:ca:10:f4:68:82:9f:23:
         3e:a4:14:da:f1:99:98:c0:97:43:ec:ab:34:fa:fc:a7:38:c1:
         bc:32:e2:83:e7:01:90:04:0d:39:10:b9:9e:5e:6f:8c:bb:dd:
         89:b0:49:a2:12:73:5d:da:21:89:9c:5a:14:34:46:df:24:0a:
         3c:73:c8:b8:1c:1b:69:74:84:e2:c5:7d:24:42:06:18:8a:d7:
         42:10:b6:aa:6f:72:bb:36:06:8e:4e:64:e9:02:dd:b9:0d:32:
         c0:81:28:6d:20:19:16:56:ca:75:4f:30:08:97:58:e0:7c:3d:
         b3:5b:de:1e:ea:94:0b:a4:32:60:24:05:9b:79:6d:0e:7a:de:
         b7:13:10:22:c9:68:73:5b:8c:18:50:3c:2f:f9:61:95:0f:d4:
         db:0c:fd:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRsMdH2xc5b4mTx9UYe59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjJkODQ1ZTE1Mzk5MmE3OGU4ZjQ0NTIzMjY0ZDI2MTRi
MTdiOWQwHhcNMjYwOTIyMTgwMDI5WhcNMjYwOTIzMTgwMDI5WjAzMTEwLwYDVQQD
Eyg3NGMwNjMyYTQ5YWZhOGUxODAwOGMyZTExNjQyNDJiYWY4ZTE3MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ7SFO4CWS5fwLEsXlQTsh2JfpHt
Yp50ZunHIiGkM7vihZbi+/4xemVBuluv5i9smjSB/O8Qu371ydWPtw6s3PE3Ai29
jApVIPzk6ZmpMwNjCSUbkcC9W82q54klPLPIRrSp3tBNn8MFrPN7+3XISEbn/dl5
4lBMlc7dxIdJTDc0jdZPUbqawe0TXP83vY/8A6zu+wxte29xzjgU6+QwYNZde4P6
ylgGq0P6hGGdQgNNfysRO1N8jMhnCtShGrbAan6N8pl0yqjFv3h+lRKdiqJi/sMh
KegA/mT0nuXjdUa0zAnsGH+SsNH3F23u6KXj96h38SxeZNKqv0bOJyOCQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTAYypJr6jhgAjC4RZCQrr44XHHMB8GA1UdIwQY
MBaAFOgi2EXhU5kqeOj0RSMmTSYUsXudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDIt
MWQ0MjQ2ZDdmMTU1LzEvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDItMWQ0MjQ2ZDdmMTU1
LzEvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAykiGnoHH
ecXZElarStq6ZCF7BNzUhgKgqYBU8XdWyQdefrI2L0nLrG/Etz2Rm97dXT3Ga4b+
+kudHvRCMK1lra/0nJFJcRuhu8lUp7iDjJAE2XriEN1UH+C1+kWBuE5fPWKuKt/K
EPRogp8jPqQU2vGZmMCXQ+yrNPr8pzjBvDLig+cBkAQNORC5nl5vjLvdibBJohJz
XdohiZxaFDRG3yQKPHPIuBwbaXSE4sV9JEIGGIrXQhC2qm9yuzYGjk5k6QLduQ0y
wIEobSAZFlbKdU8wCJdY4Hw9s1veHuqUC6QyYCQFm3ltDnretxMQIsloc1uMGFA8
L/lhlQ/U2wz9gw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:40 2026 by rpki-client