Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          /HnaoJNB/bDvG5y+e6hEossG6WOPolONZwM9YOIhvbM=
Subject key identifier:   B8:28:32:19:EF:F2:29:AA:CD:64:56:18:77:22:8A:D9:64:9C:FC:C6
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       01A0CF6D333F4C24B5F8D935D22253DC6A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          19FD
Signing time:             Wed 23 Sep 2026 18:00:35 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:35 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:35 +0000
Files and hashes:         1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
                          2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: FyxkPDuY07/sxH8aVpKOAklm9x2P6PbvqwI0yVeD49E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:33:3f:4c:24:b5:f8:d9:35:d2:22:53:dc:6a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: Sep 23 18:00:35 2026 GMT
            Not After : Sep 24 18:00:35 2026 GMT
        Subject: CN=b8283219eff229aacd64561877228ad9649cfcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:63:94:04:2b:a5:85:6b:df:e3:9d:28:e5:
                    7c:ee:22:51:1c:33:2b:d0:b8:9f:d3:e2:42:e2:5f:
                    6a:6e:42:69:50:12:c0:fa:c7:c8:2a:bf:19:7c:0e:
                    5b:16:30:79:1b:74:9d:70:83:12:c9:91:f9:ca:09:
                    e0:60:13:39:55:7c:1f:1d:f5:41:ad:62:3b:78:87:
                    cd:f1:c0:4f:36:45:f8:83:6e:60:10:0f:bb:c7:d8:
                    0b:16:17:6f:3b:6a:de:3f:42:26:10:ed:4f:1c:c3:
                    1b:28:42:27:48:89:2b:eb:56:1e:5d:ba:e3:05:5b:
                    48:30:26:44:78:1e:0f:2a:6d:e4:d2:0c:1c:7e:11:
                    13:59:cb:bb:31:29:54:fa:7e:30:dd:cb:ae:78:ad:
                    47:b2:22:37:34:ee:ec:bf:11:d9:b1:ca:06:3c:b7:
                    eb:2f:cc:14:49:9d:52:75:c7:8d:f7:b7:29:fe:70:
                    7f:6e:77:13:5b:ad:89:9a:7c:9e:5e:6c:7f:9e:38:
                    2e:b0:6a:71:00:fa:2e:55:ab:fe:14:04:fe:48:ae:
                    d1:80:2d:0e:cd:56:c8:b7:f9:43:26:2c:7b:ab:ea:
                    69:fb:2a:4e:d3:e0:68:5c:68:e7:a4:d4:ca:90:2f:
                    d0:21:65:6c:c8:48:5a:c4:fd:6e:69:88:88:19:c9:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:28:32:19:EF:F2:29:AA:CD:64:56:18:77:22:8A:D9:64:9C:FC:C6
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:83:0d:b0:83:27:94:91:13:40:2c:bb:6c:97:11:c8:1c:d7:
         38:41:64:24:d6:43:ec:1f:84:93:f3:b8:3c:f0:b2:7d:94:9c:
         f0:e6:2d:d4:27:ec:ba:9a:a3:c5:78:0d:59:20:6d:58:11:58:
         ff:2f:7c:e3:60:2e:bb:7f:de:82:22:7e:15:96:56:3d:59:da:
         e2:a2:fb:86:96:69:8c:bc:ae:e8:af:b2:19:38:59:a8:03:c4:
         2d:04:71:dc:7d:31:4f:9e:09:5c:a5:ef:f2:96:71:9a:da:d4:
         68:34:f4:07:df:ef:7f:18:aa:af:fa:6e:c6:6b:21:53:cb:c2:
         c7:74:40:ea:a5:ad:d5:1a:cf:51:ac:fe:69:4e:ad:4f:5d:56:
         eb:50:c6:dc:f4:a2:6c:20:04:4c:76:7a:f2:a6:45:70:5a:12:
         cc:b8:01:2f:e5:75:3e:87:8a:7b:b3:ac:56:a5:ea:4f:64:83:
         26:b4:82:54:44:8b:db:03:2f:23:d4:59:57:83:e3:9d:23:84:
         5f:7c:d1:bc:72:f8:89:9a:35:e3:ef:e3:d7:2e:7d:81:e1:64:
         67:eb:7b:1c:7c:45:f5:bf:d2:f4:a1:1e:37:24:9a:2e:b9:12:
         ea:47:51:f3:9e:d0:8f:c7:bd:3f:02:81:6c:96:da:3e:69:b4:
         a1:bc:32:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbTM/TCS1+Nk10iJT3GoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmM0ZWE3OWRkYjdiMDAzZGUwMWYxZDA1ZjZkYmY3MTZi
MTEzMzYwHhcNMjYwOTIzMTgwMDM1WhcNMjYwOTI0MTgwMDM1WjAzMTEwLwYDVQQD
EyhiODI4MzIxOWVmZjIyOWFhY2Q2NDU2MTg3NzIyOGFkOTY0OWNmY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstljlAQrpYVr3+OdKOV87iJRHDMr
0Lif0+JC4l9qbkJpUBLA+sfIKr8ZfA5bFjB5G3SdcIMSyZH5ygngYBM5VXwfHfVB
rWI7eIfN8cBPNkX4g25gEA+7x9gLFhdvO2reP0ImEO1PHMMbKEInSIkr61YeXbrj
BVtIMCZEeB4PKm3k0gwcfhETWcu7MSlU+n4w3cuueK1HsiI3NO7svxHZscoGPLfr
L8wUSZ1SdceN97cp/nB/bncTW62JmnyeXmx/njgusGpxAPouVav+FAT+SK7RgC0O
zVbIt/lDJix7q+pp+ypO0+BoXGjnpNTKkC/QIWVsyEhaxP1uaYiIGclo9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgoMhnv8imqzWRWGHciitlknPzGMB8GA1UdIwQY
MBaAFOosTqed23sAPeAfHQX22/cWsRM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMt
MzlmMTNlNzZhZmEzLzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMtMzlmMTNlNzZhZmEz
LzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4MNsIMn
lJETQCy7bJcRyBzXOEFkJNZD7B+Ek/O4PPCyfZSc8OYt1CfsupqjxXgNWSBtWBFY
/y9842Auu3/egiJ+FZZWPVna4qL7hpZpjLyu6K+yGThZqAPELQRx3H0xT54JXKXv
8pZxmtrUaDT0B9/vfxiqr/puxmshU8vCx3RA6qWt1RrPUaz+aU6tT11W61DG3PSi
bCAETHZ68qZFcFoSzLgBL+V1PoeKe7OsVqXqT2SDJrSCVESL2wMvI9RZV4PjnSOE
X3zRvHL4iZo14+/j1y59geFkZ+t7HHxF9b/S9KEeNySaLrkS6kdR857Qj8e9PwKB
bJbaPmm0obwydA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:13:40 2026 by rpki-client