Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          cEe2Pfj37XyKQxFEPkpL+4lfWUGpZHhWGHUwkMWY3mY=
Subject key identifier:   22:D9:77:26:9E:79:2C:9C:4A:E5:68:0F:51:FD:7C:04:0D:5E:2F:6E
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       01A0CBFE07F946C8D1EDD7FCC227CA20C26F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 02:00:18 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:18 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:18 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: h5KyKrRzNfxF7+JSAEhv1MesHGywXq6JD54tVRYC/FY=)
                          2: 6x5ILUSvgOTagvvtbHogSJvWkOQ.roa (hash: 3keZkVBi5zBSOFwHxOvIQC7c9jGWchJViw/DIikVTLE=)
                          3: DE55FjmHnYMUufPcVQkSgEdNQF0.roa (hash: sZ+5mTZ98nXRCWaNrvUzsUkg+0v1Fty74PKR7nx8ZI0=)
                          4: _ksG3kvAnj4QER34bGf9CzKZfqA.roa (hash: hZjpPAvNf63FW5do/xOQrnx1Z9N5hBMWnbPukfeUVvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:07:f9:46:c8:d1:ed:d7:fc:c2:27:ca:20:c2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Sep 23 02:00:18 2026 GMT
            Not After : Sep 24 02:00:18 2026 GMT
        Subject: CN=22d977269e792c9c4ae5680f51fd7c040d5e2f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:39:ac:70:7e:a1:f5:5f:f9:a7:e4:3e:77:78:
                    c1:8a:6c:66:19:f1:5d:29:a7:76:8b:3c:fd:b3:25:
                    4b:f7:d5:3b:a8:80:d4:b6:86:47:0e:e3:1c:81:29:
                    ab:10:eb:87:05:06:b9:f2:e3:37:71:fe:e7:bb:fe:
                    36:4d:cb:88:32:20:f7:39:0f:ec:20:e7:1d:e9:04:
                    61:46:8a:45:12:ed:ae:78:b9:2e:29:bc:a8:2c:7c:
                    ee:12:11:48:4d:7b:ef:d0:56:85:1e:47:4a:54:0c:
                    32:2d:d5:c0:96:51:da:4b:63:1c:a4:16:5b:35:71:
                    59:85:f9:ba:5f:0b:44:eb:9d:52:61:91:76:99:4d:
                    d3:0b:d1:9f:cd:0a:94:2d:7f:37:22:5a:d9:a0:d4:
                    6e:f3:e0:0f:e9:e2:1d:81:9d:fe:55:f2:6a:1c:b3:
                    78:33:33:39:ee:1b:2e:ee:d8:5c:3d:1b:b5:00:49:
                    10:81:15:f5:a8:64:61:58:2a:ac:fd:dd:b4:a5:be:
                    f4:dd:0c:e9:6a:d9:c9:71:f3:1c:31:d0:40:98:7e:
                    ec:83:b8:56:c2:4f:0c:f5:c6:76:42:45:aa:e9:cd:
                    ac:dd:0c:f1:a2:a7:8e:44:2b:dd:3d:13:d3:b4:b6:
                    ca:42:31:70:cc:af:d7:c6:43:f2:63:1f:eb:33:82:
                    b1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D9:77:26:9E:79:2C:9C:4A:E5:68:0F:51:FD:7C:04:0D:5E:2F:6E
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a9:db:7c:ce:e2:3d:d7:e9:b1:4b:ac:e7:1c:8c:c5:e2:72:
         99:a5:ab:a8:2e:f7:e0:4c:e2:8a:4d:64:71:24:6c:b0:57:f8:
         f3:6c:ba:70:ea:86:8e:90:c2:f0:54:cf:eb:4e:48:81:13:ae:
         99:bd:c9:62:5f:93:4a:06:6e:76:bf:66:eb:19:46:b3:e9:ed:
         29:c4:a8:62:d7:14:03:17:31:ca:00:5f:65:fb:54:b5:ed:b5:
         4a:7c:e0:07:6e:94:39:9e:7f:1d:fb:7a:a9:25:37:6a:1a:f4:
         cd:5b:4b:60:34:6b:63:b6:40:5c:42:c9:d6:52:d3:1c:69:de:
         3e:30:27:e7:67:b7:f7:0f:a4:d0:7f:0c:96:65:48:ec:83:36:
         d1:c7:ee:28:55:de:50:da:3f:52:bd:d9:30:86:44:b0:10:ba:
         58:91:f2:4a:59:5b:8a:ac:2d:e4:35:ac:e6:32:5d:fc:e8:31:
         1a:ea:03:ba:67:82:d5:f6:cf:78:7e:b5:6a:9f:22:ee:8e:41:
         96:ea:cc:1c:90:43:58:28:fa:42:9a:47:20:7e:a4:1f:fb:54:
         1c:ba:c3:bd:ec:86:64:52:b4:58:95:e3:82:f1:6c:68:c2:46:
         0a:04:d1:45:d0:e0:69:0a:17:64:83:51:bc:7c:4c:d2:47:b6:
         d2:34:7c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/gf5RsjR7df8wifKIMJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjYwOTIzMDIwMDE4WhcNMjYwOTI0MDIwMDE4WjAzMTEwLwYDVQQD
EygyMmQ5NzcyNjllNzkyYzljNGFlNTY4MGY1MWZkN2MwNDBkNWUyZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jmscH6h9V/5p+Q+d3jBimxmGfFd
Kad2izz9syVL99U7qIDUtoZHDuMcgSmrEOuHBQa58uM3cf7nu/42TcuIMiD3OQ/s
IOcd6QRhRopFEu2ueLkuKbyoLHzuEhFITXvv0FaFHkdKVAwyLdXAllHaS2McpBZb
NXFZhfm6XwtE651SYZF2mU3TC9GfzQqULX83IlrZoNRu8+AP6eIdgZ3+VfJqHLN4
MzM57hsu7thcPRu1AEkQgRX1qGRhWCqs/d20pb703QzpatnJcfMcMdBAmH7sg7hW
wk8M9cZ2QkWq6c2s3QzxoqeORCvdPRPTtLbKQjFwzK/XxkPyYx/rM4KxrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLZdyaeeSycSuVoD1H9fAQNXi9uMB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqnbfM7i
PdfpsUus5xyMxeJymaWrqC734Eziik1kcSRssFf482y6cOqGjpDC8FTP605IgROu
mb3JYl+TSgZudr9m6xlGs+ntKcSoYtcUAxcxygBfZftUte21SnzgB26UOZ5/Hft6
qSU3ahr0zVtLYDRrY7ZAXELJ1lLTHGnePjAn52e39w+k0H8MlmVI7IM20cfuKFXe
UNo/Ur3ZMIZEsBC6WJHySllbiqwt5DWs5jJd/OgxGuoDumeC1fbPeH61ap8i7o5B
lurMHJBDWCj6QppHIH6kH/tUHLrDveyGZFK0WJXjgvFsaMJGCgTRRdDgaQoXZINR
vHxM0ke20jR80A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:47:34 2026 by rpki-client