Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File:                     6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier:          p28sukML+0TM/r3jRhF8+Rqwlb97ymPkqHqBdPR/LDc=
Subject key identifier:   5B:E6:DC:C8:F1:A1:C2:93:F1:F2:41:01:B8:93:95:52:63:71:FC:48
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer:       /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial:       01A0CE5A97BCF7F7C2A92AEF1B5416B2C124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number:          15A6
Signing time:             Wed 23 Sep 2026 13:00:38 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:38 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:38 +0000
Files and hashes:         1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: XtMU3OvGWWszSWA9mf7CIyNMxaNrbY+AsNVC5xLRoSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:97:bc:f7:f7:c2:a9:2a:ef:1b:54:16:b2:c1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
        Validity
            Not Before: Sep 23 13:00:38 2026 GMT
            Not After : Sep 24 13:00:38 2026 GMT
        Subject: CN=5be6dcc8f1a1c293f1f24101b89395526371fc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:95:31:06:33:d1:3c:2f:2e:f9:e0:8c:27:2a:
                    da:af:45:52:17:4d:f4:f2:b7:49:16:9e:ac:5b:6b:
                    e8:c4:03:ee:c2:00:70:e4:b8:bd:66:8c:67:41:92:
                    24:64:98:53:75:d9:18:40:d5:f6:00:ed:f2:42:1b:
                    bf:1c:0d:a2:7d:42:d5:c1:5b:0d:74:61:5d:a0:f6:
                    bd:f2:06:1f:15:c8:28:9b:c5:3b:3c:bb:39:4f:e2:
                    38:d2:85:e6:7d:ff:bf:08:8a:1f:16:09:7c:93:3a:
                    55:18:1f:99:bc:42:5c:86:56:7e:be:cf:28:8e:52:
                    9d:56:5b:f6:84:f4:7d:66:dc:e2:f4:82:f8:6a:07:
                    9f:66:ac:bc:cf:af:69:6a:c0:d7:41:cb:85:9a:0d:
                    1b:9a:af:e5:26:ad:32:28:59:76:33:57:96:ba:34:
                    a1:da:2e:ae:00:e9:3d:08:09:ca:f6:ae:c2:64:54:
                    14:4c:2f:9f:71:55:12:b7:97:6e:fa:1a:bb:d1:29:
                    f1:42:37:06:bf:dd:39:d3:0b:0d:59:02:00:75:49:
                    b2:91:98:92:57:3e:a7:c0:2f:90:51:0e:dc:7c:7b:
                    5b:85:3f:a3:2f:b9:03:e8:78:78:69:5a:02:8e:63:
                    89:7d:5a:67:a0:8f:81:07:ed:6f:a5:1d:a6:50:99:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E6:DC:C8:F1:A1:C2:93:F1:F2:41:01:B8:93:95:52:63:71:FC:48
            X509v3 Authority Key Identifier:
                keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:95:69:1e:b4:da:45:57:4f:b0:94:2b:46:c9:43:78:94:07:
         2e:89:9c:28:b0:23:8f:9d:89:9c:a3:eb:50:18:1a:ce:fe:f9:
         a9:2b:cc:cc:3e:ba:a1:39:1f:75:32:bf:4c:99:b3:80:f3:5d:
         3c:4e:80:16:6e:7b:3a:18:05:3b:9f:4a:c6:d1:cd:68:23:7b:
         bb:78:24:0c:8e:e1:2f:ec:6c:08:a0:8c:44:ab:4a:d1:28:2b:
         0c:38:29:14:2e:fc:55:e8:7d:23:1e:9b:4c:8b:c0:e4:73:4c:
         78:c9:a0:2e:77:45:41:0d:19:38:fa:fe:5e:1b:be:ef:c2:75:
         aa:77:f7:15:3d:0b:c7:28:3d:52:21:92:ff:be:1d:49:33:3b:
         1b:76:cf:e3:a0:87:8c:be:72:c6:0e:f5:4c:a8:55:85:a8:a4:
         4f:1d:81:14:b3:83:42:df:fc:1e:fc:31:c6:8f:21:02:e9:59:
         80:10:61:bb:d7:c2:63:83:96:93:61:b0:a3:17:76:aa:65:47:
         91:67:a4:60:89:8e:e7:b2:67:7e:99:17:9d:70:b3:bb:4d:0d:
         9c:c7:ad:7b:b1:15:eb:63:17:c8:66:1a:04:d0:fe:d8:7d:52:
         1c:17:e4:63:d8:ce:af:b0:ad:37:55:11:35:4b:6a:e9:96:7e:
         3d:38:1e:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWpe89/fCqSrvG1QWssEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzQ4M2I3NWMyZGIxY2Y5ZmY0ZTk0YzdhMGZkZjBkYjAw
MDBmMDAwHhcNMjYwOTIzMTMwMDM4WhcNMjYwOTI0MTMwMDM4WjAzMTEwLwYDVQQD
Eyg1YmU2ZGNjOGYxYTFjMjkzZjFmMjQxMDFiODkzOTU1MjYzNzFmYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJUxBjPRPC8u+eCMJyrar0VSF030
8rdJFp6sW2voxAPuwgBw5Li9ZoxnQZIkZJhTddkYQNX2AO3yQhu/HA2ifULVwVsN
dGFdoPa98gYfFcgom8U7PLs5T+I40oXmff+/CIofFgl8kzpVGB+ZvEJchlZ+vs8o
jlKdVlv2hPR9Ztzi9IL4agefZqy8z69pasDXQcuFmg0bmq/lJq0yKFl2M1eWujSh
2i6uAOk9CAnK9q7CZFQUTC+fcVUSt5du+hq70SnxQjcGv9050wsNWQIAdUmykZiS
Vz6nwC+QUQ7cfHtbhT+jL7kD6Hh4aVoCjmOJfVpnoI+BB+1vpR2mUJnYiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvm3MjxocKT8fJBAbiTlVJjcfxIMB8GA1UdIwQY
MBaAFOjEg7dcLbHPn/TpTHoP3w2wAA8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTIt
ZWIzNWJmYTA2NWFkLzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTItZWIzNWJmYTA2NWFk
LzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5VpHrTa
RVdPsJQrRslDeJQHLomcKLAjj52JnKPrUBgazv75qSvMzD66oTkfdTK/TJmzgPNd
PE6AFm57OhgFO59KxtHNaCN7u3gkDI7hL+xsCKCMRKtK0SgrDDgpFC78Veh9Ix6b
TIvA5HNMeMmgLndFQQ0ZOPr+Xhu+78J1qnf3FT0Lxyg9UiGS/74dSTM7G3bP46CH
jL5yxg71TKhVhaikTx2BFLODQt/8Hvwxxo8hAulZgBBhu9fCY4OWk2Gwoxd2qmVH
kWekYImO57JnfpkXnXCzu00NnMete7EV62MXyGYaBND+2H1SHBfkY9jOr7CtN1UR
NUtq6ZZ+PTge9g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:36:22 2026 by rpki-client