Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
File:                     733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json)
Hash identifier:          Gy8Ldqen2kPtfbJLEuhGI3muCBbaFOlPFj9vbJK3C2U=
Subject key identifier:   6B:13:00:0B:2F:42:10:23:7F:7C:34:8B:D3:59:40:A7:2C:4C:B8:EE
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Certificate issuer:       /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial:       01A0CE5AB99456E60ED95CDD24D8FD64292D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
Manifest number:          1934
Signing time:             Wed 23 Sep 2026 13:00:47 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:47 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:47 +0000
Files and hashes:         1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: Pv/deVqHHNfEPEkwQfNlO/eCUiYXrp+Sl9fbhQwD9A4=)
                          2: hTPnnRRGk0sclr6F2QfCiyXduQE.roa (hash: d3PjDDBu0PgL89VzwcTP4ys2SUqflMlRPDBwwnwxvfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:b9:94:56:e6:0e:d9:5c:dd:24:d8:fd:64:29:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
        Validity
            Not Before: Sep 23 13:00:47 2026 GMT
            Not After : Sep 24 13:00:47 2026 GMT
        Subject: CN=6b13000b2f4210237f7c348bd35940a72c4cb8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:04:31:50:2e:fa:6a:97:4a:b9:67:e1:c4:
                    82:31:77:39:b0:f3:32:d9:70:1d:4a:d3:01:de:61:
                    b0:b0:96:36:c7:67:6c:63:d6:53:64:9c:43:14:aa:
                    a6:b6:4b:ec:5e:42:53:cf:a5:e3:ca:f3:f4:2f:3a:
                    43:82:31:93:ed:ef:57:89:c0:c0:e9:db:99:29:b1:
                    e8:2d:1e:05:72:6d:d1:f9:39:49:02:c2:a6:c5:36:
                    09:ba:b4:e1:31:e5:14:f9:d3:6a:95:0e:c3:ac:dc:
                    68:c8:9d:27:94:06:9d:82:6d:e1:9c:88:97:e8:2b:
                    cb:e0:6a:ec:7e:7a:0b:cf:38:a5:b4:47:ac:1d:be:
                    00:05:2a:8d:ad:d3:fc:09:c9:5e:55:37:4b:89:14:
                    3f:de:e6:b9:43:37:04:36:44:49:9d:d0:8a:f3:dc:
                    f3:58:98:a6:e1:fb:56:31:7c:a4:4d:60:c3:de:1c:
                    72:43:90:f9:aa:5a:92:11:b2:88:85:a6:4d:7c:ea:
                    ba:ba:fd:d5:4e:04:fa:9d:a1:04:8d:00:0a:9a:5d:
                    d3:57:3f:75:23:3d:41:f2:d4:18:e1:ec:e8:e9:f6:
                    77:f5:37:95:cf:d3:c7:26:97:48:01:80:80:da:c9:
                    a3:56:fe:17:51:d5:57:66:7d:73:2a:2a:01:03:13:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:13:00:0B:2F:42:10:23:7F:7C:34:8B:D3:59:40:A7:2C:4C:B8:EE
            X509v3 Authority Key Identifier:
                keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:60:77:e1:6a:be:73:a6:eb:ad:55:8e:32:dd:4e:b1:a8:bf:
         ba:b8:5a:2a:8c:91:c8:43:84:f7:b5:76:ed:ea:30:81:5f:ae:
         8d:ba:d3:a9:9d:a6:34:15:ef:67:db:eb:4e:c8:fd:df:28:de:
         03:2b:e1:4b:28:b0:e5:0e:0c:e9:2a:c1:33:89:c3:37:ac:c5:
         e4:f6:a1:97:0f:5e:66:57:21:26:e8:86:f1:13:0c:04:09:e2:
         a3:e5:e2:6d:41:7e:11:6b:e9:1d:c7:35:61:0d:71:96:21:5b:
         cc:35:95:cf:39:7c:2a:4b:87:3c:1a:cc:40:3c:a0:5b:b9:b0:
         ce:30:3e:53:91:73:f3:97:99:fb:6f:c7:a3:22:8a:c9:a4:a8:
         5f:ae:24:b9:b3:72:88:5a:42:0b:20:63:3f:76:f6:9f:59:8e:
         c1:d9:a3:32:0a:95:bc:29:5d:a1:6d:37:2c:c1:0e:b0:39:58:
         e9:6e:18:c3:0d:f1:72:40:a5:ee:be:f8:68:e2:4c:f7:00:45:
         72:0b:c2:73:fd:e0:76:d2:a6:c0:e3:a3:10:53:1b:0e:7b:eb:
         b6:80:8a:69:a4:91:e4:bd:3e:c2:2d:c5:f6:a6:d1:db:94:2c:
         a0:7c:06:91:ed:21:46:b6:46:02:95:0c:c0:23:59:76:b2:7b:
         5d:19:bb:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWrmUVuYO2VzdJNj9ZCktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2RkMWViZWU1MTNmZmEzMThjZGM4OGI4MWFjMThjZmU3
MjZiMzAwHhcNMjYwOTIzMTMwMDQ3WhcNMjYwOTI0MTMwMDQ3WjAzMTEwLwYDVQQD
Eyg2YjEzMDAwYjJmNDIxMDIzN2Y3YzM0OGJkMzU5NDBhNzJjNGNiOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7EEMVAu+mqXSrln4cSCMXc5sPMy
2XAdStMB3mGwsJY2x2dsY9ZTZJxDFKqmtkvsXkJTz6XjyvP0LzpDgjGT7e9XicDA
6duZKbHoLR4Fcm3R+TlJAsKmxTYJurThMeUU+dNqlQ7DrNxoyJ0nlAadgm3hnIiX
6CvL4GrsfnoLzziltEesHb4ABSqNrdP8CcleVTdLiRQ/3ua5QzcENkRJndCK89zz
WJim4ftWMXykTWDD3hxyQ5D5qlqSEbKIhaZNfOq6uv3VTgT6naEEjQAKml3TVz91
Iz1B8tQY4ezo6fZ39TeVz9PHJpdIAYCA2smjVv4XUdVXZn1zKioBAxNTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsTAAsvQhAjf3w0i9NZQKcsTLjuMB8GA1UdIwQY
MBaAFO990evuUT/6MYzciLgawYz+cmswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWVlNmQtNzY0MC00ZTNkLTliNDUt
ZTU2ZmVjYTYxMmU3LzEvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOWVlNmQtNzY0MC00ZTNkLTliNDUtZTU2ZmVjYTYxMmU3
LzEvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmB34Wq+
c6brrVWOMt1Osai/urhaKoyRyEOE97V27eowgV+ujbrTqZ2mNBXvZ9vrTsj93yje
AyvhSyiw5Q4M6SrBM4nDN6zF5Pahlw9eZlchJuiG8RMMBAnio+XibUF+EWvpHcc1
YQ1xliFbzDWVzzl8KkuHPBrMQDygW7mwzjA+U5Fz85eZ+2/HoyKKyaSoX64kubNy
iFpCCyBjP3b2n1mOwdmjMgqVvCldoW03LMEOsDlY6W4Yww3xckCl7r74aOJM9wBF
cgvCc/3gdtKmwOOjEFMbDnvrtoCKaaSR5L0+wi3F9qbR25QsoHwGke0hRrZGApUM
wCNZdrJ7XRm7bA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:07:16 2026 by rpki-client