Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
File:                     6--V-MTFVIJt6POK1rup-3SAKCQ.mft (raw, json)
Hash identifier:          QTwsullM3ms4i36FbgYyEqE2YMYI8hqgsu7KfJixWBs=
Subject key identifier:   59:9F:32:AC:A4:7E:3A:22:C5:BB:06:A5:09:72:C4:DD:63:CD:2C:12
Authority key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
Certificate issuer:       /CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Certificate serial:       01A102EDCB81EE1B6331C41AD7431626497B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
Manifest number:          1A90
Signing time:             Sat 03 Oct 2026 18:01:40 +0000
Manifest this update:     Sat 03 Oct 2026 18:01:40 +0000
Manifest next update:     Sun 04 Oct 2026 18:01:40 +0000
Files and hashes:         1: 6--V-MTFVIJt6POK1rup-3SAKCQ.crl (hash: ZPYGOlBfrCNiL1h96phJbu4BR7/Is8eLU6ooserNpFw=)
                          2: Hx4ZFK_A19H-rixHWmeNmsblWVY.roa (hash: qhTKdMQP/19emw8OGCQnS3QPmahlE+I8qBJjNpuJP+M=)
                          3: uT4y_V8winuaaXijcNOme3PTmDU.roa (hash: 7SHOwPXr5hyjGghaBLoLGSxSBuNfqpBCsKfMH3TroC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:ed:cb:81:ee:1b:63:31:c4:1a:d7:43:16:26:49:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
        Validity
            Not Before: Oct  3 18:01:40 2026 GMT
            Not After : Oct  4 18:01:40 2026 GMT
        Subject: CN=599f32aca47e3a22c5bb06a50972c4dd63cd2c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:be:38:88:cb:72:e8:41:ed:7f:34:d2:04:
                    7c:ff:5a:91:ab:67:43:81:94:e3:18:76:db:66:9d:
                    0d:11:6c:38:a8:61:89:4a:2d:35:08:e6:05:28:e5:
                    6d:91:69:62:ef:59:69:f4:10:ce:59:50:83:6a:c1:
                    13:75:18:97:6e:2d:65:8f:97:f1:1e:d7:d1:97:49:
                    03:39:f9:e5:9c:03:aa:d1:53:6b:72:98:24:5d:35:
                    50:91:5e:85:ac:de:06:12:db:62:25:13:f0:92:21:
                    88:b6:71:27:8a:f7:45:57:ad:9b:59:ca:1e:e7:3d:
                    c6:75:8f:11:02:5f:f2:54:01:69:5a:40:f3:dd:95:
                    63:31:d7:58:73:c1:90:d7:b8:65:a6:95:4d:c5:a4:
                    01:d8:bc:14:b6:69:0b:f1:6c:8b:2a:10:55:a4:40:
                    a8:16:90:f2:4c:e6:c6:79:91:19:1d:8d:2d:90:5c:
                    2d:b5:aa:3b:86:38:fa:6a:9a:cc:6e:75:41:c4:29:
                    f6:6e:3e:b6:66:04:2c:41:f5:76:f0:1a:0b:c9:5f:
                    0a:bd:42:a4:ad:9b:cf:cb:55:5c:47:8a:9d:21:55:
                    8e:f5:e0:41:5a:ce:00:db:d0:c9:49:af:b7:18:75:
                    85:3f:92:de:3d:86:8f:1b:cb:5c:88:8a:82:0e:5c:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9F:32:AC:A4:7E:3A:22:C5:BB:06:A5:09:72:C4:DD:63:CD:2C:12
            X509v3 Authority Key Identifier:
                keyid:EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:93:b0:34:6d:4c:3b:0d:02:d2:55:fe:69:79:da:0d:cb:a3:
         cf:32:64:de:a1:26:37:66:0f:95:b1:54:1a:74:63:ad:53:44:
         89:79:1a:3d:59:ee:4d:2a:01:73:e4:d7:8f:8e:d4:29:b6:e3:
         a3:05:a0:4d:4f:e7:43:f6:ea:8b:11:77:93:09:43:0f:f8:d5:
         bc:8b:ef:ca:85:3e:9e:dc:7f:4c:d6:b3:b7:d9:2c:50:3a:49:
         90:d9:4c:f0:f8:8f:28:d2:2c:d9:ef:85:52:61:1e:c9:b7:d3:
         d6:48:ec:b6:36:3e:e9:0c:83:77:9f:90:34:1e:7f:a0:46:d6:
         0b:4a:c5:06:a4:7e:fd:19:0a:c1:f4:9b:19:09:77:7a:be:d8:
         fc:4b:ea:8d:86:b3:f7:e3:01:a2:7f:2b:76:91:4b:fc:6b:a7:
         d2:ec:53:f3:7c:46:f4:a2:39:82:62:b6:2c:b6:a2:d2:56:8d:
         05:d9:37:25:33:e8:6a:c2:aa:d4:30:d2:4e:00:2c:b7:fb:f4:
         55:d4:0b:d1:40:9d:3a:5b:98:78:40:da:65:44:94:2f:6c:d3:
         69:91:20:01:c7:82:b3:1d:9a:b1:d6:3d:60:05:3c:c8:03:17:
         b1:c2:db:66:68:19:57:ef:82:3d:42:72:ad:fa:da:f5:ad:19:
         08:83:eb:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEC7cuB7htjMcQa10MWJkl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWY5NWY4YzRjNTU0ODI2ZGU4ZjM4YWQ2YmJhOWZiNzQ4
MDI4MjQwHhcNMjYxMDAzMTgwMTQwWhcNMjYxMDA0MTgwMTQwWjAzMTEwLwYDVQQD
Eyg1OTlmMzJhY2E0N2UzYTIyYzViYjA2YTUwOTcyYzRkZDYzY2QyYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMa+OIjLcuhB7X800gR8/1qRq2dD
gZTjGHbbZp0NEWw4qGGJSi01COYFKOVtkWli71lp9BDOWVCDasETdRiXbi1lj5fx
HtfRl0kDOfnlnAOq0VNrcpgkXTVQkV6FrN4GEttiJRPwkiGItnEnivdFV62bWcoe
5z3GdY8RAl/yVAFpWkDz3ZVjMddYc8GQ17hlppVNxaQB2LwUtmkL8WyLKhBVpECo
FpDyTObGeZEZHY0tkFwttao7hjj6aprMbnVBxCn2bj62ZgQsQfV28BoLyV8KvUKk
rZvPy1VcR4qdIVWO9eBBWs4A29DJSa+3GHWFP5LePYaPG8tciIqCDlx0KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmfMqykfjoixbsGpQlyxN1jzSwSMB8GA1UdIwQY
MBaAFOvvlfjExVSCbejzita7qft0gCgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi0tVi1NVEZWSUp0NlBPSzFydXAtM1NBS0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mMTQ1N2YtNjIxZi00Nzk2LTg2MGUt
OWEzNTBmZDFhNGFkLzEvNi0tVi1NVEZWSUp0NlBPSzFydXAtM1NBS0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mMTQ1N2YtNjIxZi00Nzk2LTg2MGUtOWEzNTBmZDFhNGFk
LzEvNi0tVi1NVEZWSUp0NlBPSzFydXAtM1NBS0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpOwNG1M
Ow0C0lX+aXnaDcujzzJk3qEmN2YPlbFUGnRjrVNEiXkaPVnuTSoBc+TXj47UKbbj
owWgTU/nQ/bqixF3kwlDD/jVvIvvyoU+ntx/TNazt9ksUDpJkNlM8PiPKNIs2e+F
UmEeybfT1kjstjY+6QyDd5+QNB5/oEbWC0rFBqR+/RkKwfSbGQl3er7Y/EvqjYaz
9+MBon8rdpFL/Gun0uxT83xG9KI5gmK2LLai0laNBdk3JTPoasKq1DDSTgAst/v0
VdQL0UCdOluYeEDaZUSUL2zTaZEgAceCsx2asdY9YAU8yAMXscLbZmgZV++CPUJy
rfra9a0ZCIPrqQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 21:55:53 2026 by rpki-client