Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File:                     1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier:          m+6lylzMwK/GeiIiE7FJ4bRGzOgMN1HFvGeF1F5oVOM=
Subject key identifier:   3F:59:EF:79:81:44:F1:94:3C:D3:D0:9C:5E:6C:C7:2F:09:B1:8F:B1
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer:       /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial:       01A0D01212B1F0033EE09858E386E03832B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number:          1346
Signing time:             Wed 23 Sep 2026 21:00:40 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:40 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:40 +0000
Files and hashes:         1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: kMQmieQ95okmNg8lt1V/OaDl2KO5xhJH4Bd+1+aGEjU=)
                          2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:12:b1:f0:03:3e:e0:98:58:e3:86:e0:38:32:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
        Validity
            Not Before: Sep 23 21:00:40 2026 GMT
            Not After : Sep 24 21:00:40 2026 GMT
        Subject: CN=3f59ef798144f1943cd3d09c5e6cc72f09b18fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:08:12:cd:d0:be:af:cf:6e:c7:1c:74:07:
                    18:b9:cf:84:5a:a9:64:7e:ba:cd:77:8c:50:29:78:
                    0e:3f:b3:30:76:08:2b:31:3d:8a:24:e0:a3:d2:26:
                    91:35:57:c0:39:72:c0:0d:5b:69:a3:66:16:0f:5f:
                    22:ee:c9:2b:0e:bb:54:f6:bd:e2:e3:fd:7c:83:81:
                    af:f1:d1:31:19:5c:93:64:66:80:64:84:33:52:d4:
                    e2:d1:31:3d:c8:a5:e3:d8:9b:08:92:36:85:a6:88:
                    fa:d2:e0:5f:63:6e:81:e8:69:ae:2d:c0:f0:ba:77:
                    b7:20:df:1b:8b:6b:6b:1d:cc:fc:f2:f4:fb:e6:f9:
                    a0:e1:48:75:ea:78:98:b7:63:87:37:fc:43:88:00:
                    9e:60:6c:06:18:dc:d3:fe:fd:7c:64:a4:4e:13:1b:
                    a1:5f:8f:16:81:03:b4:a1:74:bc:a5:83:42:5a:20:
                    50:e8:8a:8c:6c:cd:96:e5:d4:15:71:28:15:e1:ab:
                    c8:2a:98:8b:eb:46:5d:90:7a:29:9e:66:b9:3c:1a:
                    ef:98:f7:4e:cc:2f:1b:14:5c:4c:2b:74:7f:0f:ab:
                    22:41:76:8d:4f:d8:f4:7d:ac:ec:e1:dc:d8:de:a7:
                    c2:6f:db:7d:19:88:63:0d:32:88:f1:a6:84:66:8b:
                    bc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:59:EF:79:81:44:F1:94:3C:D3:D0:9C:5E:6C:C7:2F:09:B1:8F:B1
            X509v3 Authority Key Identifier:
                keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:94:2d:21:78:a5:bb:24:e1:5f:d9:eb:75:ba:9a:8c:81:0e:
         39:06:39:90:40:98:d3:93:e4:9e:cc:78:88:38:6a:51:6c:bc:
         49:fd:16:fa:03:3e:79:a5:cc:34:31:63:fe:ed:0f:c6:da:0a:
         3c:9c:c5:b8:7d:5c:5d:ad:91:13:10:a1:60:77:1d:83:0e:cf:
         55:29:81:4b:b1:a4:fc:fe:e3:65:e8:e8:86:2e:50:12:90:fd:
         f9:0d:c5:e8:55:60:13:b7:49:83:f0:a0:fc:a8:b2:67:90:68:
         6c:c4:f1:be:1c:2b:e6:bd:0d:e5:08:df:8c:30:d5:7d:1a:41:
         4e:6a:6f:a7:ec:a5:03:19:d8:b8:da:9b:c1:23:85:ce:71:49:
         80:74:29:04:4e:b4:71:dd:c5:be:16:81:fa:a9:74:7f:80:18:
         28:18:96:f5:f0:58:8c:94:b3:15:e6:36:95:43:a9:5b:69:c0:
         ab:7b:21:8a:31:f7:e9:14:84:f3:9e:1f:11:a8:ef:b2:47:dd:
         76:3e:1c:94:22:55:b6:81:51:0e:8b:8b:7d:50:ed:f2:6c:4f:
         d8:bd:15:0a:78:da:93:23:c3:a6:d9:5c:8f:3c:a3:72:96:bc:
         48:41:ca:c0:a0:36:9a:ca:f7:bf:73:96:97:63:02:6d:23:8a:
         a9:7e:96:12
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDQEhKx8AM+4JhY44bgODK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0
OWRiZGQwHhcNMjYwOTIzMjEwMDQwWhcNMjYwOTI0MjEwMDQwWjAzMTEwLwYDVQQD
EygzZjU5ZWY3OTgxNDRmMTk0M2NkM2QwOWM1ZTZjYzcyZjA5YjE4ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1gIEs3Qvq/PbsccdAcYuc+EWqlk
frrNd4xQKXgOP7MwdggrMT2KJOCj0iaRNVfAOXLADVtpo2YWD18i7skrDrtU9r3i
4/18g4Gv8dExGVyTZGaAZIQzUtTi0TE9yKXj2JsIkjaFpoj60uBfY26B6GmuLcDw
une3IN8bi2trHcz88vT75vmg4Uh16niYt2OHN/xDiACeYGwGGNzT/v18ZKROExuh
X48WgQO0oXS8pYNCWiBQ6IqMbM2W5dQVcSgV4avIKpiL60ZdkHopnma5PBrvmPdO
zC8bFFxMK3R/D6siQXaNT9j0fazs4dzY3qfCb9t9GYhjDTKI8aaEZou8awIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD9Z73mBRPGUPNPQnF5sxy8JsY+xMB8GA1UdIwQY
MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm
LWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1L2ZkNjk3Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQz
YzMvMS8xLTZDdzhmM1dRQlRsQlh1RWlobWlPZWhKMjkwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJQt
IXiluyThX9nrdbqajIEOOQY5kECY05Pknsx4iDhqUWy8Sf0W+gM+eaXMNDFj/u0P
xtoKPJzFuH1cXa2RExChYHcdgw7PVSmBS7Gk/P7jZejohi5QEpD9+Q3F6FVgE7dJ
g/Cg/KiyZ5BobMTxvhwr5r0N5QjfjDDVfRpBTmpvp+ylAxnYuNqbwSOFznFJgHQp
BE60cd3FvhaB+ql0f4AYKBiW9fBYjJSzFeY2lUOpW2nAq3shijH36RSE854fEajv
skfddj4clCJVtoFRDouLfVDt8mxP2L0VCnjakyPDptlcjzyjcpa8SEHKwKA2msr3
v3OWl2MCbSOKqX6WEg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:58:28 2026 by rpki-client