Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File:                     sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier:          knrwEQjGB8wwECQ1SH+JeVkQI7cM1w0EvrKcTeWUw4k=
Subject key identifier:   11:68:4F:0F:00:EA:E6:55:D7:79:CE:2F:28:A7:03:4E:3C:46:F3:AF
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer:       /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial:       01A0E13D87EFD6934CDB166FD6D7BC22E718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number:          1A06
Signing time:             Sun 27 Sep 2026 05:01:41 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:41 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:41 +0000
Files and hashes:         1: IRpFGeK75W2NCoLOiJ_s8Xp5yew.roa (hash: BhIo7ljP7ZgEPGbs9sKTB4qik1eSNnRy76SvPdzQrR4=)
                          2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: ex3LCaKJ+xf/kFf7+QvJL4lHKJOqk/67Y9lO2eq4mts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3d:87:ef:d6:93:4c:db:16:6f:d6:d7:bc:22:e7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
        Validity
            Not Before: Sep 27 05:01:41 2026 GMT
            Not After : Sep 28 05:01:41 2026 GMT
        Subject: CN=11684f0f00eae655d779ce2f28a7034e3c46f3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0a:56:b3:1b:de:71:18:3c:04:5b:3f:5b:c6:
                    db:c3:d4:74:dc:7a:f3:4f:0d:99:dc:28:c4:d5:e1:
                    be:3f:49:0e:d6:eb:a8:24:63:b8:f3:82:db:56:66:
                    65:55:f0:02:ff:f8:91:89:e6:92:c9:00:07:70:f0:
                    5a:15:75:60:a1:5f:30:1f:0e:f3:bf:a6:d7:73:70:
                    96:bb:cc:82:85:e6:4b:f6:cf:ba:a4:71:2a:d5:d4:
                    c8:e3:2d:92:f6:fa:69:88:7d:58:a1:48:a8:1a:a9:
                    e3:4e:c3:02:40:ca:e6:be:ca:14:e7:34:60:9d:51:
                    65:17:fe:80:97:21:58:c5:72:e6:4e:0f:5f:61:a0:
                    e1:0f:fd:8d:af:c0:d6:22:e1:a6:e1:6c:78:3f:d8:
                    8a:d4:3f:fb:c4:3a:5c:f1:2f:2a:14:7c:03:de:19:
                    25:98:c4:61:e2:0e:21:e4:14:0a:c1:01:83:a3:67:
                    48:21:ba:c4:18:49:4f:ea:eb:7f:74:7f:e5:0c:f4:
                    aa:a9:5c:d7:0a:c1:96:85:01:32:3e:87:8e:e0:87:
                    ba:0c:d7:06:b0:48:36:9e:bb:fd:3a:3b:21:eb:ef:
                    57:04:9d:7b:66:96:79:75:6a:2b:c9:6f:15:b8:9f:
                    08:e3:65:f8:ef:85:8e:a9:26:f8:b1:fd:71:29:85:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:4F:0F:00:EA:E6:55:D7:79:CE:2F:28:A7:03:4E:3C:46:F3:AF
            X509v3 Authority Key Identifier:
                keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:9d:96:72:6a:63:f5:32:a0:7f:a7:87:8e:03:ef:32:fa:db:
         49:4c:6d:c7:ce:24:cb:1e:d1:df:61:cd:8a:d5:50:05:f3:9f:
         8b:21:d6:b0:93:ec:99:64:9d:3e:45:72:78:98:9a:ca:3d:37:
         b1:a1:16:0c:c7:71:f5:2a:39:a1:7a:96:19:8c:39:7b:4a:0c:
         a7:0d:a5:e8:01:0d:f1:c5:ed:ec:18:cc:4b:16:a6:87:9c:bc:
         a0:20:e0:44:d0:8a:8a:36:11:38:ba:0c:f6:c8:b0:c7:a9:0a:
         40:31:84:e4:4f:86:19:95:77:1f:ae:17:6c:b5:54:1f:38:38:
         0b:14:d1:42:0d:7c:7c:23:5b:3a:d3:64:42:ed:3d:3c:be:b9:
         3d:ee:9a:f7:11:fb:83:c6:b2:04:ea:f0:07:cf:17:b0:70:dd:
         f4:4b:dd:07:19:94:e1:eb:d7:95:bf:9a:15:0c:e7:b2:07:8b:
         ee:f7:06:a9:9e:a8:e5:10:64:54:9a:96:91:95:9f:1f:5c:5f:
         d3:78:86:e6:d6:8a:6c:79:28:7d:9e:44:d5:cc:3b:61:d3:55:
         4e:46:cd:0e:49:83:a0:36:f0:96:9b:2a:8b:3e:f1:fc:2b:7d:
         3a:50:06:66:77:3c:93:15:09:cb:1b:4f:08:4a:8a:c7:8f:7e:
         a1:e3:61:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhPYfv1pNM2xZv1te8IucYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDc4MGRmMzZiNWI5NDJmNjYwZTQwM2EyZmU2MDhhNzVl
NGU1N2QwHhcNMjYwOTI3MDUwMTQxWhcNMjYwOTI4MDUwMTQxWjAzMTEwLwYDVQQD
EygxMTY4NGYwZjAwZWFlNjU1ZDc3OWNlMmYyOGE3MDM0ZTNjNDZmM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ApWsxvecRg8BFs/W8bbw9R03Hrz
Tw2Z3CjE1eG+P0kO1uuoJGO484LbVmZlVfAC//iRieaSyQAHcPBaFXVgoV8wHw7z
v6bXc3CWu8yCheZL9s+6pHEq1dTI4y2S9vppiH1YoUioGqnjTsMCQMrmvsoU5zRg
nVFlF/6AlyFYxXLmTg9fYaDhD/2Nr8DWIuGm4Wx4P9iK1D/7xDpc8S8qFHwD3hkl
mMRh4g4h5BQKwQGDo2dIIbrEGElP6ut/dH/lDPSqqVzXCsGWhQEyPoeO4Ie6DNcG
sEg2nrv9Ojsh6+9XBJ17ZpZ5dWoryW8VuJ8I42X474WOqSb4sf1xKYWzrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFoTw8A6uZV13nOLyinA048RvOvMB8GA1UdIwQY
MBaAFLEHgN82tblC9mDkA6L+YIp15OV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAt
YTBhZGVjZmQ1ZmE5LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAtYTBhZGVjZmQ1ZmE5
LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtp2Wcmpj
9TKgf6eHjgPvMvrbSUxtx84kyx7R32HNitVQBfOfiyHWsJPsmWSdPkVyeJiayj03
saEWDMdx9So5oXqWGYw5e0oMpw2l6AEN8cXt7BjMSxamh5y8oCDgRNCKijYROLoM
9siwx6kKQDGE5E+GGZV3H64XbLVUHzg4CxTRQg18fCNbOtNkQu09PL65Pe6a9xH7
g8ayBOrwB88XsHDd9EvdBxmU4evXlb+aFQznsgeL7vcGqZ6o5RBkVJqWkZWfH1xf
03iG5taKbHkofZ5E1cw7YdNVTkbNDkmDoDbwlpsqiz7x/Ct9OlAGZnc8kxUJyxtP
CEqKx49+oeNhyQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:49 2026 by rpki-client