Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
File:                     6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json)
Hash identifier:          54reoq1UPt1saNvBws4Kk0PgTGCuk/j1NfXerPq+9tg=
Subject key identifier:   BA:08:7B:D0:2B:A0:16:EF:4A:DA:CC:12:61:F4:B0:DA:F1:5A:B5:FF
Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
Certificate issuer:       /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Certificate serial:       01A0D5704AE089CD566B6C312FEAC2212DF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
Manifest number:          04FC
Signing time:             Thu 24 Sep 2026 22:01:41 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:41 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:41 +0000
Files and hashes:         1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: qDsphGP5Jpc4SEHi6o2GihmshXtsbV4WaTVKAx7ic38=)
                          2: e2Nx3MWYEW91glMqV5TLbQ1S5j4.roa (hash: 1d9GQqvCFQjgc9W5ZDcmpkqgj4oWJ7r7FTu64+cmQXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:4a:e0:89:cd:56:6b:6c:31:2f:ea:c2:21:2d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
        Validity
            Not Before: Sep 24 22:01:41 2026 GMT
            Not After : Sep 25 22:01:41 2026 GMT
        Subject: CN=ba087bd02ba016ef4adacc1261f4b0daf15ab5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:cb:f0:c7:53:0a:05:5b:28:5b:b4:75:ff:
                    a3:42:a1:41:ec:0a:f0:41:7c:f6:38:55:89:20:91:
                    1d:79:f8:64:20:72:86:69:7b:ad:c0:bb:31:46:45:
                    6f:dd:de:e0:45:6e:a0:f3:86:28:89:e5:1b:a3:ef:
                    7e:ed:5d:68:18:aa:f1:12:0b:00:31:ec:9c:9b:c5:
                    c9:08:14:1f:fe:51:40:4f:8e:a2:41:09:a3:0c:e0:
                    91:4d:79:2e:f2:a4:a3:2d:d5:c4:9b:d2:d8:99:e6:
                    48:76:b1:99:c7:28:c1:10:27:9b:12:8e:c7:35:fd:
                    d3:f5:0e:93:06:2e:e4:f3:de:4c:27:8d:11:5b:23:
                    ca:6d:62:7a:17:4f:4c:51:7b:e7:d3:38:cb:8b:a4:
                    3e:44:41:df:0b:55:fe:ad:ae:7c:d6:c2:67:a5:3d:
                    41:78:82:17:4b:2d:d4:15:d0:0c:46:34:d6:c0:1c:
                    6c:fd:88:a2:48:6e:fe:19:c2:ec:b4:07:58:9e:fc:
                    9a:61:a9:6d:d3:c7:db:bb:32:b4:b6:b6:bc:e5:8e:
                    fe:73:f5:58:51:73:4d:86:fb:de:dd:c5:0f:22:7d:
                    7b:b2:d8:c5:21:f3:e0:f8:e3:05:e3:b1:20:c9:58:
                    ae:e9:16:3e:66:6f:36:fc:23:13:b2:6d:94:66:35:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:08:7B:D0:2B:A0:16:EF:4A:DA:CC:12:61:F4:B0:DA:F1:5A:B5:FF
            X509v3 Authority Key Identifier:
                keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:85:32:c9:c7:eb:ef:f8:dc:fc:4b:8f:ad:d1:ab:65:a3:08:
         c9:a1:24:76:f1:9a:24:4d:12:b1:c2:cb:b0:ca:f5:10:95:b2:
         2e:4a:9b:bb:6f:44:3e:ac:3c:0b:dc:30:1d:80:c1:a1:f6:20:
         6f:c8:4b:36:a5:f3:e7:26:f3:dc:4b:a3:d1:90:3c:f2:a9:56:
         15:d4:87:aa:8a:7e:a5:c8:a3:59:da:f3:b2:9d:7e:db:31:39:
         d9:7c:cf:ec:b6:25:61:48:8a:0c:49:f6:5f:d3:75:7f:04:1a:
         46:14:0d:67:73:7c:15:e9:1c:cb:b6:e1:32:97:fc:a6:7f:90:
         35:9f:74:20:da:06:b1:a6:3b:d4:06:da:db:30:c1:6e:f1:be:
         ad:b4:79:16:3c:9a:8f:76:2f:c8:1b:13:8d:88:da:88:82:f8:
         d8:2d:db:91:aa:21:3e:28:9d:5b:6e:57:85:7a:54:76:ed:d8:
         95:d7:03:14:7a:f1:ba:5f:9e:07:2c:74:68:be:04:83:90:32:
         b9:be:59:cf:a0:9d:cd:d2:95:64:29:80:0d:1e:57:05:7e:46:
         4a:62:50:76:99:db:78:c7:2b:84:59:d2:4e:90:58:0c:dc:4a:
         a0:01:f2:c7:a2:14:d2:1e:d8:47:0a:09:b5:82:6e:cc:3c:63:
         87:aa:4a:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcErgic1Wa2wxL+rCIS35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2ZlNWIzM2VlNDQzZmRlOTJiZDQyMTE4ODgxY2E2ZTgy
NjNhNDkwHhcNMjYwOTI0MjIwMTQxWhcNMjYwOTI1MjIwMTQxWjAzMTEwLwYDVQQD
EyhiYTA4N2JkMDJiYTAxNmVmNGFkYWNjMTI2MWY0YjBkYWYxNWFiNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OPL8MdTCgVbKFu0df+jQqFB7Arw
QXz2OFWJIJEdefhkIHKGaXutwLsxRkVv3d7gRW6g84YoieUbo+9+7V1oGKrxEgsA
Meycm8XJCBQf/lFAT46iQQmjDOCRTXku8qSjLdXEm9LYmeZIdrGZxyjBECebEo7H
Nf3T9Q6TBi7k895MJ40RWyPKbWJ6F09MUXvn0zjLi6Q+REHfC1X+ra581sJnpT1B
eIIXSy3UFdAMRjTWwBxs/YiiSG7+GcLstAdYnvyaYalt08fbuzK0tra85Y7+c/VY
UXNNhvve3cUPIn17stjFIfPg+OMF47EgyViu6RY+Zm82/CMTsm2UZjV6XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoIe9AroBbvStrMEmH0sNrxWrX/MB8GA1UdIwQY
MBaAFOjP5bM+5EP96SvUIRiIHKboJjpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNDM1NmMtOGQxNC00YjFjLWE1NWIt
NzBjMmU3Njg2ZTZiLzEvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hNDM1NmMtOGQxNC00YjFjLWE1NWItNzBjMmU3Njg2ZTZi
LzEvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYUyycfr
7/jc/EuPrdGrZaMIyaEkdvGaJE0SscLLsMr1EJWyLkqbu29EPqw8C9wwHYDBofYg
b8hLNqXz5ybz3Euj0ZA88qlWFdSHqop+pcijWdrzsp1+2zE52XzP7LYlYUiKDEn2
X9N1fwQaRhQNZ3N8Fekcy7bhMpf8pn+QNZ90INoGsaY71Aba2zDBbvG+rbR5Fjya
j3YvyBsTjYjaiIL42C3bkaohPiidW25XhXpUdu3YldcDFHrxul+eByx0aL4Eg5Ay
ub5Zz6CdzdKVZCmADR5XBX5GSmJQdpnbeMcrhFnSTpBYDNxKoAHyx6IU0h7YRwoJ
tYJuzDxjh6pK5g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:50:31 2026 by rpki-client