Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          071IgFra3gcKCOG7ySeIXr0VnOPObqdj54JpbV99AS4=
Subject key identifier:   8D:50:75:8B:36:0C:EC:57:75:07:91:13:B5:09:95:60:AC:F2:8A:F4
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       01A0C9347C611707AA3E9B3BB7299A07CD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          1A6B
Signing time:             Tue 22 Sep 2026 13:00:55 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:55 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:55 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: 8cN9B3r5o0OAekzMiy5FlccuGavbYQIe201l81an7z4=)
                          2: NmgUP7e3LyCZ01solEPz1wLS4js.roa (hash: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:7c:61:17:07:aa:3e:9b:3b:b7:29:9a:07:cd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Sep 22 13:00:55 2026 GMT
            Not After : Sep 23 13:00:55 2026 GMT
        Subject: CN=8d50758b360cec5775079113b5099560acf28af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:30:1f:af:22:fe:a4:75:00:da:03:a5:0e:
                    c5:e3:32:fb:e2:1a:d8:bd:6e:ae:49:e6:60:8f:4a:
                    32:3d:a2:4e:75:ec:63:40:5f:bb:39:6a:dc:7c:72:
                    61:3b:bd:4d:0a:f9:c9:13:1b:8b:2b:fe:71:98:e2:
                    05:c2:ef:b6:26:60:92:17:a1:3f:71:81:9c:f1:35:
                    05:31:57:1c:0a:30:de:38:fe:5b:fc:92:fd:03:3d:
                    d2:36:e4:3f:f7:5c:4e:94:53:27:b7:c7:ad:fa:a1:
                    72:15:99:26:e0:69:08:3d:9d:54:fd:2b:47:60:ef:
                    36:44:16:9c:63:d8:d6:6e:0c:bc:f3:b6:72:7f:8f:
                    c7:cd:8b:42:ef:36:5a:5d:52:cc:18:da:91:c8:0e:
                    4c:16:ce:1e:b9:cd:d8:95:6a:be:52:ce:ea:00:32:
                    44:92:bc:6f:11:b9:7e:44:f8:d4:3f:b2:f4:50:e3:
                    e1:bc:4b:b3:3e:27:68:de:c6:09:9c:31:94:82:12:
                    0e:44:75:a7:c2:cb:3e:2a:c4:ac:28:2e:7f:48:ca:
                    03:ab:e5:94:1d:22:6e:7d:94:f4:44:84:42:c2:4e:
                    3a:77:c5:e3:d0:9e:cb:5a:62:07:42:30:06:87:5a:
                    93:f3:d0:e8:20:24:34:4a:50:9d:97:3d:31:58:77:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:50:75:8B:36:0C:EC:57:75:07:91:13:B5:09:95:60:AC:F2:8A:F4
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:cb:12:c9:bf:91:17:80:01:43:d1:a3:50:0b:7b:75:2e:
         4f:e0:fd:f2:8f:47:b0:0a:64:80:4f:35:fb:64:c8:25:59:a3:
         e1:70:d6:93:c9:ad:ea:58:b9:6f:bd:2b:92:98:07:4d:42:17:
         08:2f:04:48:b7:dc:2b:ff:41:bb:08:f9:07:67:f2:9e:58:18:
         33:39:7c:e0:56:23:84:6c:10:75:da:bb:15:79:f0:06:d3:4a:
         95:ad:71:f9:c1:11:0e:40:ad:4e:2a:61:a4:25:46:bb:6a:78:
         d4:2b:c1:dc:3a:ce:da:b6:72:46:97:85:14:94:50:cc:8c:b6:
         df:55:ba:d2:61:54:e4:bd:13:cc:43:1b:b2:5c:86:8f:2e:fc:
         62:11:30:26:88:e3:9f:e5:b5:8f:91:61:88:f3:05:c7:54:58:
         72:dc:cd:85:b4:5d:9f:79:c2:cb:1c:3d:0e:e6:39:be:61:58:
         f7:c6:06:44:a4:70:5c:3f:d1:25:0d:a3:0f:71:bd:d9:a9:ac:
         9f:e4:37:08:cb:b5:b2:e7:81:cd:46:03:9d:bb:69:90:dc:5b:
         ed:11:84:50:b3:4e:d4:df:f8:df:1b:e2:f4:78:ac:29:fa:9f:
         94:67:52:79:05:b2:ea:66:41:3e:15:8d:f7:84:9c:8e:54:45:
         50:e6:23:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNHxhFweqPps7tymaB806MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWRjMDBmZDJjMWUzZWFhZmNlY2NjMWI0YmExZjhmZDBh
NGE5OGMwHhcNMjYwOTIyMTMwMDU1WhcNMjYwOTIzMTMwMDU1WjAzMTEwLwYDVQQD
Eyg4ZDUwNzU4YjM2MGNlYzU3NzUwNzkxMTNiNTA5OTU2MGFjZjI4YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+8wH68i/qR1ANoDpQ7F4zL74hrY
vW6uSeZgj0oyPaJOdexjQF+7OWrcfHJhO71NCvnJExuLK/5xmOIFwu+2JmCSF6E/
cYGc8TUFMVccCjDeOP5b/JL9Az3SNuQ/91xOlFMnt8et+qFyFZkm4GkIPZ1U/StH
YO82RBacY9jWbgy887Zyf4/HzYtC7zZaXVLMGNqRyA5MFs4euc3YlWq+Us7qADJE
krxvEbl+RPjUP7L0UOPhvEuzPido3sYJnDGUghIORHWnwss+KsSsKC5/SMoDq+WU
HSJufZT0RIRCwk46d8Xj0J7LWmIHQjAGh1qT89DoICQ0SlCdlz0xWHfx/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1QdYs2DOxXdQeRE7UJlWCs8or0MB8GA1UdIwQY
MBaAFOsdwA/SwePqr87MwbS6H4/QpKmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgt
OTBlMjFkZjAxZTkxLzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgtOTBlMjFkZjAxZTkx
LzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3rLEsm/
kReAAUPRo1ALe3UuT+D98o9HsApkgE81+2TIJVmj4XDWk8mt6li5b70rkpgHTUIX
CC8ESLfcK/9Buwj5B2fynlgYMzl84FYjhGwQddq7FXnwBtNKla1x+cERDkCtTiph
pCVGu2p41CvB3DrO2rZyRpeFFJRQzIy231W60mFU5L0TzEMbslyGjy78YhEwJojj
n+W1j5FhiPMFx1RYctzNhbRdn3nCyxw9DuY5vmFY98YGRKRwXD/RJQ2jD3G92ams
n+Q3CMu1sueBzUYDnbtpkNxb7RGEULNO1N/43xvi9HisKfqflGdSeQWy6mZBPhWN
94ScjlRFUOYj4Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:48:14 2026 by rpki-client