Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
File:                     6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json)
Hash identifier:          Mu/kPvi7NnccvsMVniF2CBLdczGByP53TS1iQvBOqRM=
Subject key identifier:   D4:65:1E:8D:5F:A0:39:1A:2F:B4:24:A0:3A:DD:F1:F8:8D:66:F1:BA
Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D
Certificate issuer:       /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
Certificate serial:       01A1DDCBE6E674DD62DEA011BF399769CCA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
Manifest number:          0F04
Signing time:             Sun 15 Nov 2026 06:01:29 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:29 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:29 +0000
Files and hashes:         1: 3T7apsoCLIRRuPziIRlUEsN-PHk.roa (hash: l4cLFttiGyOfAyk+8L0CJMAKg8dhT7SWDGcyXhUyR1Y=)
                          2: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: i1kFykUiYY9oAco/ZgMH9Wu49TiBpj5u9HIxH/mBmsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:e6:e6:74:dd:62:de:a0:11:bf:39:97:69:cc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
        Validity
            Not Before: Nov 15 06:01:29 2026 GMT
            Not After : Nov 16 06:01:29 2026 GMT
        Subject: CN=d4651e8d5fa0391a2fb424a03addf1f88d66f1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:6f:ce:4a:0f:a9:94:b8:d7:93:c7:cb:08:
                    d9:de:3c:79:65:99:65:f9:47:0b:cb:36:f1:aa:3b:
                    41:2f:76:7c:61:a0:16:a1:ee:94:49:4c:40:74:39:
                    41:9a:26:1e:23:f9:a4:e0:29:2f:77:77:b5:21:e9:
                    32:f9:77:60:ec:1c:da:76:17:54:31:46:02:e1:6a:
                    01:b4:8c:4d:94:e7:41:a1:43:51:50:b8:7a:b3:fc:
                    69:50:c5:c1:89:f2:bf:b6:f5:f1:78:62:73:88:03:
                    f2:d5:f6:03:71:cc:64:3a:16:34:b4:a7:ce:53:29:
                    3c:fb:62:77:85:c0:65:8d:6f:3f:a5:3c:44:ca:2a:
                    d5:47:75:e4:ad:9c:69:ab:99:0d:79:d9:1f:35:58:
                    ca:18:ad:2b:b1:ce:27:3d:94:de:93:d5:df:64:45:
                    e2:c7:dc:03:21:ed:35:7e:6e:4a:16:96:07:b5:9b:
                    2e:dd:6c:82:8d:0c:b5:a1:05:6d:90:5d:fe:dd:d6:
                    8e:16:ba:f0:95:ad:3a:f5:0a:44:a1:77:18:bf:f1:
                    99:84:d2:7e:26:71:fd:31:7c:88:06:1a:2a:18:75:
                    2d:0f:8b:86:d8:4f:94:e3:ca:9c:e9:b0:d2:47:a1:
                    cb:d2:bd:07:ee:0b:1e:47:f1:e8:28:11:d6:5a:1d:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:65:1E:8D:5F:A0:39:1A:2F:B4:24:A0:3A:DD:F1:F8:8D:66:F1:BA
            X509v3 Authority Key Identifier:
                keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:22:53:51:9f:98:07:23:24:34:e1:05:74:f8:cc:ba:af:84:
         50:fa:9f:c4:d2:53:9f:44:67:3b:82:6f:93:4b:33:c1:36:4e:
         d6:d4:03:9f:dd:f0:45:ae:4b:ef:3c:71:11:e9:57:85:60:97:
         9d:df:bc:ab:0d:00:1b:36:c6:28:1c:b9:a9:0a:22:94:52:43:
         be:c9:d3:56:2a:ed:ce:7a:20:e4:6a:60:d8:0c:0c:20:ab:1b:
         11:d6:4f:0c:1b:d9:1d:c7:44:9e:61:c9:fb:53:05:4e:b8:05:
         aa:b0:44:17:65:cc:b9:84:fd:bb:2e:d9:6f:01:03:59:26:7a:
         50:dc:37:fd:16:0b:e8:c0:03:07:8f:e1:f2:fa:b6:ec:17:20:
         e2:5d:6b:6b:22:ec:52:0e:f6:92:c9:65:db:7e:eb:cd:7a:bc:
         94:ac:cb:1b:ff:8c:bd:b1:2d:a4:39:2f:bc:eb:38:26:ce:db:
         e3:2b:19:c3:60:4b:cd:dc:9a:5a:95:3a:63:b4:5f:c0:03:ad:
         d3:0c:ae:ef:67:31:92:61:18:5a:70:02:2a:11:3c:33:99:72:
         95:39:78:5f:dc:b2:ad:29:5e:30:a9:44:ac:ff:0e:be:ef:d6:
         3c:d7:35:23:81:ad:73:50:28:01:45:8c:b0:9a:19:91:d8:fc:
         3e:44:d9:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdy+bmdN1i3qARvzmXacymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MmUxNDZhMWU5ZTgzYjM3NTZmMDQ4YjZjMWIzMWUwZmM3
ZDIwN2QwHhcNMjYxMTE1MDYwMTI5WhcNMjYxMTE2MDYwMTI5WjAzMTEwLwYDVQQD
EyhkNDY1MWU4ZDVmYTAzOTFhMmZiNDI0YTAzYWRkZjFmODhkNjZmMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1BvzkoPqZS415PHywjZ3jx5ZZll
+UcLyzbxqjtBL3Z8YaAWoe6USUxAdDlBmiYeI/mk4Ckvd3e1Ieky+Xdg7BzadhdU
MUYC4WoBtIxNlOdBoUNRULh6s/xpUMXBifK/tvXxeGJziAPy1fYDccxkOhY0tKfO
Uyk8+2J3hcBljW8/pTxEyirVR3XkrZxpq5kNedkfNVjKGK0rsc4nPZTek9XfZEXi
x9wDIe01fm5KFpYHtZsu3WyCjQy1oQVtkF3+3daOFrrwla069QpEoXcYv/GZhNJ+
JnH9MXyIBhoqGHUtD4uG2E+U48qc6bDSR6HL0r0H7gseR/HoKBHWWh1JhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRlHo1foDkaL7QkoDrd8fiNZvG6MB8GA1UdIwQY
MBaAFOkuFGoenoOzdW8Ei2wbMeD8fSB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmIt
NzRhMzk1YWE1NjA2LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmItNzRhMzk1YWE1NjA2
LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyJTUZ+Y
ByMkNOEFdPjMuq+EUPqfxNJTn0RnO4Jvk0szwTZO1tQDn93wRa5L7zxxEelXhWCX
nd+8qw0AGzbGKBy5qQoilFJDvsnTVirtznog5Gpg2AwMIKsbEdZPDBvZHcdEnmHJ
+1MFTrgFqrBEF2XMuYT9uy7ZbwEDWSZ6UNw3/RYL6MADB4/h8vq27Bcg4l1rayLs
Ug72ksll237rzXq8lKzLG/+MvbEtpDkvvOs4Js7b4ysZw2BLzdyaWpU6Y7RfwAOt
0wyu72cxkmEYWnACKhE8M5lylTl4X9yyrSleMKlErP8Ovu/WPNc1I4Gtc1AoAUWM
sJoZkdj8PkTZNQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:33:42 2026 by rpki-client