Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File:                     6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier:          8fjhn0F3MxI+ZwH6EcvbqUNHKMuumNcCh9tAc4SfTDQ=
Subject key identifier:   B7:62:C6:ED:F0:CD:56:B4:B6:25:F6:02:0A:40:6F:58:25:49:DC:67
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer:       /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial:       01A100FEF165F5A18C5AA2A5A8CC2F918472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number:          0DDC
Signing time:             Sat 03 Oct 2026 09:01:10 +0000
Manifest this update:     Sat 03 Oct 2026 09:01:10 +0000
Manifest next update:     Sun 04 Oct 2026 09:01:10 +0000
Files and hashes:         1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: m1HNu2t7Hv1RWfWPGTkvqkwg5jQHyyrl9EtA18PiWyU=)
                          2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
                          3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:fe:f1:65:f5:a1:8c:5a:a2:a5:a8:cc:2f:91:84:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
        Validity
            Not Before: Oct  3 09:01:10 2026 GMT
            Not After : Oct  4 09:01:10 2026 GMT
        Subject: CN=b762c6edf0cd56b4b625f6020a406f582549dc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:7a:d6:61:45:72:3f:13:e0:77:1b:0b:6d:
                    10:d2:73:d8:fe:53:84:af:f8:14:8d:1f:57:3f:4b:
                    5b:0a:af:a6:4e:df:b2:cc:99:94:16:b2:32:86:31:
                    db:c9:fc:f4:42:f9:32:35:6e:bb:6b:c4:c6:8a:60:
                    2a:5c:f8:6a:68:38:33:7b:b9:bf:71:e4:9d:1f:0e:
                    83:68:ca:82:08:44:97:cd:cb:09:d8:5f:3c:44:86:
                    1c:df:c6:4b:02:ed:ae:e0:c2:a6:c8:7f:01:69:9c:
                    b2:a7:cc:b8:0f:b2:7b:94:be:e6:af:fe:0b:1b:25:
                    1e:be:54:a0:2f:c3:75:ed:a6:ef:ed:28:fb:1a:c2:
                    f8:3a:64:e7:4b:e2:97:a3:b0:6d:f7:5d:ee:e3:1f:
                    a9:c3:28:02:df:c7:a6:a1:85:20:1a:e0:36:03:52:
                    f1:01:6b:75:69:39:75:6a:03:a0:18:39:f5:db:e2:
                    a2:9c:11:02:43:53:93:da:91:62:54:ac:ac:25:e5:
                    ed:ac:0b:b8:c9:8b:de:53:19:b5:da:df:9d:98:6b:
                    ac:55:b3:a3:1e:92:df:fa:40:c4:d1:3e:e6:02:a7:
                    ff:e3:a0:31:54:02:71:e4:7b:fe:42:bb:37:02:83:
                    07:09:92:98:42:fc:a0:45:7d:9b:8a:03:13:f3:e0:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:62:C6:ED:F0:CD:56:B4:B6:25:F6:02:0A:40:6F:58:25:49:DC:67
            X509v3 Authority Key Identifier:
                keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2e:d4:49:15:b6:2c:91:03:33:ad:2f:ca:36:d6:36:3c:8b:
         e3:18:46:7c:ef:f1:f3:51:f1:7e:8b:f8:e2:99:77:45:61:b0:
         45:c2:77:71:1f:14:16:10:9f:1f:e0:c5:5f:1f:4c:5c:d1:31:
         b2:ec:88:27:3c:af:c2:49:88:6d:d6:8c:72:2f:ba:e7:d7:12:
         da:c6:c3:3a:53:f9:91:51:57:dc:80:74:87:19:64:d2:87:d4:
         80:3c:dd:35:a0:48:87:15:1d:6d:27:08:db:1b:1d:b7:f5:8a:
         b4:d0:91:ca:3b:70:14:c0:c9:6e:f6:ef:53:74:cd:13:75:5c:
         b5:54:75:b4:5c:f2:4a:8d:b6:f8:03:35:da:9b:2c:c9:34:bd:
         c8:b4:be:16:ad:33:2e:46:6c:65:78:4d:19:46:87:4d:58:d8:
         b4:93:05:13:03:90:20:d4:1b:46:26:5b:88:b8:c1:f3:5c:7f:
         c6:1b:0b:bf:48:64:48:b4:83:f3:fd:70:93:8f:37:60:2f:d6:
         1b:2d:c3:c7:4b:de:ef:1b:68:a5:d8:40:8f:7b:2f:5f:02:d0:
         4c:29:48:14:6e:a6:41:89:c9:f5:bc:fd:b7:14:b9:3c:92:6e:
         7c:28:d2:a1:7c:76:6e:d5:81:16:e9:e1:0f:dd:aa:7e:83:c7:
         1b:7d:6f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEA/vFl9aGMWqKlqMwvkYRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTQwNWVlOGY1ZDhlNzY0ZTkwYmQ2NmJkZDFlODlhYzEy
ODA5ZTgwHhcNMjYxMDAzMDkwMTEwWhcNMjYxMDA0MDkwMTEwWjAzMTEwLwYDVQQD
EyhiNzYyYzZlZGYwY2Q1NmI0YjYyNWY2MDIwYTQwNmY1ODI1NDlkYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk961mFFcj8T4HcbC20Q0nPY/lOE
r/gUjR9XP0tbCq+mTt+yzJmUFrIyhjHbyfz0QvkyNW67a8TGimAqXPhqaDgze7m/
ceSdHw6DaMqCCESXzcsJ2F88RIYc38ZLAu2u4MKmyH8BaZyyp8y4D7J7lL7mr/4L
GyUevlSgL8N17abv7Sj7GsL4OmTnS+KXo7Bt913u4x+pwygC38emoYUgGuA2A1Lx
AWt1aTl1agOgGDn12+KinBECQ1OT2pFiVKysJeXtrAu4yYveUxm12t+dmGusVbOj
HpLf+kDE0T7mAqf/46AxVAJx5Hv+Qrs3AoMHCZKYQvygRX2bigMT8+C0EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdixu3wzVa0tiX2AgpAb1glSdxnMB8GA1UdIwQY
MBaAFOmUBe6PXY52TpC9Zr3R6JrBKAnoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEt
ZWIxMWI0OTU0ZjMzLzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEtZWIxMWI0OTU0ZjMz
LzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS7USRW2
LJEDM60vyjbWNjyL4xhGfO/x81Hxfov44pl3RWGwRcJ3cR8UFhCfH+DFXx9MXNEx
suyIJzyvwkmIbdaMci+659cS2sbDOlP5kVFX3IB0hxlk0ofUgDzdNaBIhxUdbScI
2xsdt/WKtNCRyjtwFMDJbvbvU3TNE3VctVR1tFzySo22+AM12pssyTS9yLS+Fq0z
LkZsZXhNGUaHTVjYtJMFEwOQINQbRiZbiLjB81x/xhsLv0hkSLSD8/1wk483YC/W
Gy3Dx0ve7xtopdhAj3svXwLQTClIFG6mQYnJ9bz9txS5PJJufCjSoXx2btWBFunh
D92qfoPHG31vig==
-----END CERTIFICATE-----
Generated at Sat Oct 3 16:05:52 2026 by rpki-client