Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File:                     K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier:          69+c9xN4eqkENO6g/djJS+887pFc9a5jqyGYpvu4eOw=
Subject key identifier:   68:31:4B:2D:16:EC:11:67:E4:3E:5E:99:7D:85:D2:D3:60:B4:9E:0F
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer:       /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial:       01A0DBE073B15D36194AE8E9C2CE7CABAA93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number:          1908
Signing time:             Sat 26 Sep 2026 04:01:55 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:55 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:55 +0000
Files and hashes:         1: 1llWNK65NedtiWi8qyia848ELaA.roa (hash: 0oTSLbXlh3Ln2/Z2bu7ijN1NRwtM3qIsyO0kzqAkxPw=)
                          2: 8SP8wrXr1dy02TJk430AwSvMFTE.roa (hash: /PIJ3E7I+I9m0ncOt8+A4jxLk/g73oMVaRRE/eZXcGo=)
                          3: Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa (hash: G5PDsg/wG8I5/QaFUvVe7A5FW81hq3JrSXknwZ7dvi0=)
                          4: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: 7jp/jYHm7mdJwOCBRk30oHJ/28llSSWtz9eQSkeBPXI=)
                          5: lWNFxd1Gj0MT4veUOTu-eVVA-80.roa (hash: 85lL7kKUinH67VqupmaYwZZaBJjLm6Q1ocKj+e+bV0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:e0:73:b1:5d:36:19:4a:e8:e9:c2:ce:7c:ab:aa:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
        Validity
            Not Before: Sep 26 04:01:55 2026 GMT
            Not After : Sep 27 04:01:55 2026 GMT
        Subject: CN=68314b2d16ec1167e43e5e997d85d2d360b49e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:6b:42:4b:d9:6c:74:8a:ab:5b:7d:e4:6d:
                    9a:b7:72:f0:07:d7:b9:85:7d:6f:ff:66:ff:c6:2c:
                    94:8c:da:f6:06:3c:65:70:73:eb:e7:05:ba:99:b8:
                    fa:d3:5e:73:30:1c:68:c6:a1:4f:a2:c2:90:ed:ca:
                    5d:46:59:75:c5:4d:25:d5:6b:e7:94:4c:23:3b:b3:
                    11:e8:84:65:dd:14:9a:32:6f:60:45:2b:5c:46:18:
                    57:d5:0c:00:5c:dd:eb:0c:c0:40:23:d8:80:8a:23:
                    8d:6c:e9:f5:66:85:3e:0f:52:8a:af:1b:dc:fe:cf:
                    5f:29:46:75:d1:4b:f2:42:b7:00:8a:34:48:ac:e3:
                    3e:da:bb:ff:4c:e8:f0:30:d1:a0:ce:47:fb:d7:15:
                    d7:e9:5b:a4:b2:1f:00:4a:9d:13:ed:1c:d1:98:ab:
                    42:f9:b7:c1:60:c5:85:36:21:9a:a3:8c:7b:8c:78:
                    1f:00:09:67:df:b7:8d:3f:fe:b3:23:7f:1f:8e:1a:
                    ee:60:e5:e1:11:b9:60:64:e2:c2:7d:e6:b2:33:dd:
                    ab:7a:3d:03:5e:56:2a:59:b3:49:a2:e4:2a:3a:a7:
                    fa:95:b7:fe:07:dd:72:13:97:51:9b:ec:b5:21:41:
                    e4:9b:46:a8:4b:02:3a:a0:6d:e4:db:fe:c3:05:c0:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:31:4B:2D:16:EC:11:67:E4:3E:5E:99:7D:85:D2:D3:60:B4:9E:0F
            X509v3 Authority Key Identifier:
                keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:98:c9:9b:49:be:4f:f4:bd:30:31:25:a1:33:2c:7a:ac:
         e6:7f:12:fe:fb:6b:8b:23:25:a7:cc:7c:12:f8:30:43:d9:ad:
         53:e5:83:99:3a:06:d0:ef:39:53:df:07:5e:dc:b1:4c:6a:04:
         df:1f:ad:51:f0:c5:13:43:e0:97:d0:3a:ba:18:60:5f:b6:b3:
         e6:b3:aa:74:31:8c:89:83:2b:07:1c:8a:c1:d6:db:c6:62:da:
         bf:04:5f:ea:5a:bb:6f:37:28:59:41:ff:23:67:2e:34:11:69:
         34:53:bf:2c:d9:86:ea:ea:a5:2e:9b:91:bb:62:d3:af:9b:ed:
         29:b3:66:e0:92:68:e5:cb:2e:f0:ef:d4:0f:2a:24:d5:fd:df:
         db:f5:b5:62:60:9c:9c:7b:47:2a:d5:0d:5d:cb:a4:23:d7:1b:
         d0:18:65:8d:4a:74:c8:68:de:13:b0:12:3b:8d:25:da:5e:5c:
         68:fd:07:a0:47:26:a0:d4:86:b6:eb:77:56:ef:ee:2f:69:5d:
         8f:e2:21:92:93:96:77:09:65:59:b0:92:28:be:3c:ce:eb:c6:
         27:a5:5a:33:e6:ea:42:b1:eb:31:14:88:da:15:07:0e:11:cf:
         cd:bd:32:96:18:9b:f3:4d:6e:46:54:05:cc:bc:73:88:a9:95:
         35:47:87:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb4HOxXTYZSujpws58q6qTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2
YmU2NDIwHhcNMjYwOTI2MDQwMTU1WhcNMjYwOTI3MDQwMTU1WjAzMTEwLwYDVQQD
Eyg2ODMxNGIyZDE2ZWMxMTY3ZTQzZTVlOTk3ZDg1ZDJkMzYwYjQ5ZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix9rQkvZbHSKq1t95G2at3LwB9e5
hX1v/2b/xiyUjNr2BjxlcHPr5wW6mbj6015zMBxoxqFPosKQ7cpdRll1xU0l1Wvn
lEwjO7MR6IRl3RSaMm9gRStcRhhX1QwAXN3rDMBAI9iAiiONbOn1ZoU+D1KKrxvc
/s9fKUZ10UvyQrcAijRIrOM+2rv/TOjwMNGgzkf71xXX6Vuksh8ASp0T7RzRmKtC
+bfBYMWFNiGao4x7jHgfAAln37eNP/6zI38fjhruYOXhEblgZOLCfeayM92rej0D
XlYqWbNJouQqOqf6lbf+B91yE5dRm+y1IUHkm0aoSwI6oG3k2/7DBcAuQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgxSy0W7BFn5D5emX2F0tNgtJ4PMB8GA1UdIwQY
MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt
NTc4OWRlNDI0YTQyLzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy
LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKCYyZtJ
vk/0vTAxJaEzLHqs5n8S/vtriyMlp8x8EvgwQ9mtU+WDmToG0O85U98HXtyxTGoE
3x+tUfDFE0Pgl9A6uhhgX7az5rOqdDGMiYMrBxyKwdbbxmLavwRf6lq7bzcoWUH/
I2cuNBFpNFO/LNmG6uqlLpuRu2LTr5vtKbNm4JJo5csu8O/UDyok1f3f2/W1YmCc
nHtHKtUNXcukI9cb0BhljUp0yGjeE7ASO40l2l5caP0HoEcmoNSGtut3Vu/uL2ld
j+IhkpOWdwllWbCSKL48zuvGJ6VaM+bqQrHrMRSI2hUHDhHPzb0ylhib801uRlQF
zLxziKmVNUeHlg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:14:42 2026 by rpki-client