Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
File:                     6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json)
Hash identifier:          rQ4jrpArR1vlRpvE8Hv6nmZpbQlYpNQN9CJBFIvu9oE=
Subject key identifier:   CA:F3:B8:03:EF:90:6B:4A:61:CA:22:FE:7F:20:56:DD:FC:74:57:BE
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Certificate issuer:       /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial:       01A0DCBB8C545E2AE31BBA80E292AF55F776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
Manifest number:          0FCD
Signing time:             Sat 26 Sep 2026 08:01:13 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:13 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:13 +0000
Files and hashes:         1: 5s94JKAXDJrQpueM4W0HRuRUXqQ.roa (hash: CzNnEJOva2qyeDIKL4O8DARiGLjA2TNz7kBujtqjE84=)
                          2: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: aQHTMb2qTXXbOsPiQGETxsE0lmF2Dds6D17G6evNkvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bb:8c:54:5e:2a:e3:1b:ba:80:e2:92:af:55:f7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
        Validity
            Not Before: Sep 26 08:01:13 2026 GMT
            Not After : Sep 27 08:01:13 2026 GMT
        Subject: CN=caf3b803ef906b4a61ca22fe7f2056ddfc7457be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:46:90:4f:65:88:1f:7e:0c:de:f7:1b:35:
                    8d:3e:6f:dc:1d:fb:3e:62:67:69:7d:2e:f6:f3:b2:
                    2c:ee:79:16:0b:d5:f0:25:f9:52:7e:12:fd:7d:41:
                    6b:59:9a:44:4c:c8:95:d5:33:7b:83:17:31:f2:2a:
                    b6:ce:99:fe:47:c9:8e:0d:f2:19:e1:5b:55:e6:ad:
                    e1:d6:d1:98:7e:83:41:bf:0c:d6:33:a6:55:95:8a:
                    61:ee:ef:94:ed:1d:29:77:b8:ee:2c:fd:75:51:30:
                    db:7f:20:4c:f7:2b:d9:8a:08:c9:51:2e:71:04:9c:
                    39:38:e3:dc:bd:51:ca:b2:f6:90:8b:9a:f1:f1:ac:
                    09:45:0f:2e:d6:3c:97:7c:8d:06:72:05:84:aa:8d:
                    6b:0d:16:00:dc:4d:c1:68:9d:ff:b3:af:e5:72:13:
                    83:41:2d:57:b9:4c:c9:7b:52:72:37:4f:83:e5:f2:
                    ad:f4:58:96:89:da:97:9a:a1:92:97:1a:21:79:02:
                    ba:77:c6:0a:db:c6:57:1e:11:34:2a:c7:35:91:8e:
                    78:4f:76:65:33:df:7a:d5:7c:db:90:92:cf:14:b2:
                    4d:c5:22:98:da:1b:fe:ac:55:d5:4e:56:54:22:54:
                    fd:a1:7a:db:0f:f8:f0:ce:87:68:66:b0:69:c1:4f:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F3:B8:03:EF:90:6B:4A:61:CA:22:FE:7F:20:56:DD:FC:74:57:BE
            X509v3 Authority Key Identifier:
                keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:47:b4:85:11:ce:fc:db:cc:cf:ac:a8:62:aa:52:16:8f:0d:
         7f:8f:79:6d:50:8e:bb:9f:a8:b7:e5:88:51:dc:6d:df:bd:54:
         9a:98:6a:09:54:6d:d0:5d:8f:9a:83:d6:53:b9:6b:99:38:3f:
         0a:e4:f4:75:4e:d8:11:e7:75:ac:fd:5f:6c:66:02:8a:ef:51:
         42:f6:dd:d1:94:80:20:95:99:09:35:1a:94:06:a3:60:7f:31:
         91:eb:7b:21:1e:47:3f:a5:5a:f8:f9:4f:f1:71:8b:47:ee:5f:
         0b:d8:a0:f8:f4:3f:bc:04:68:f1:34:1b:4c:83:5b:49:b8:e1:
         a1:80:38:a6:c2:06:1a:31:fd:fb:b8:de:f9:fd:11:ca:77:de:
         39:57:ff:31:da:54:43:40:31:b0:01:1a:a9:f3:a1:eb:01:39:
         8b:cb:29:ac:1b:df:aa:60:7d:ed:b0:8d:81:d3:d3:87:69:18:
         88:b4:13:f7:d3:dc:e6:c6:82:de:7a:23:cc:e3:9c:8d:b6:21:
         95:7e:71:8a:ad:02:2b:23:72:b7:b8:0e:ab:7b:bb:68:81:7a:
         c5:b8:22:66:80:d1:45:6a:c8:85:4f:fa:fc:91:58:dd:47:d9:
         a6:e8:e1:f3:cf:be:54:5e:bd:86:50:e5:18:eb:ba:8e:d3:0b:
         5d:97:a2:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcu4xUXirjG7qA4pKvVfd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JkNGMyMzA2MmQ2OTUzN2ZiMmU4YThhY2NiZmIwMjdm
MmI1MjUwHhcNMjYwOTI2MDgwMTEzWhcNMjYwOTI3MDgwMTEzWjAzMTEwLwYDVQQD
EyhjYWYzYjgwM2VmOTA2YjRhNjFjYTIyZmU3ZjIwNTZkZGZjNzQ1N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jpGkE9liB9+DN73GzWNPm/cHfs+
YmdpfS7287Is7nkWC9XwJflSfhL9fUFrWZpETMiV1TN7gxcx8iq2zpn+R8mODfIZ
4VtV5q3h1tGYfoNBvwzWM6ZVlYph7u+U7R0pd7juLP11UTDbfyBM9yvZigjJUS5x
BJw5OOPcvVHKsvaQi5rx8awJRQ8u1jyXfI0GcgWEqo1rDRYA3E3BaJ3/s6/lchOD
QS1XuUzJe1JyN0+D5fKt9FiWidqXmqGSlxoheQK6d8YK28ZXHhE0Ksc1kY54T3Zl
M9961XzbkJLPFLJNxSKY2hv+rFXVTlZUIlT9oXrbD/jwzodoZrBpwU8nhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrzuAPvkGtKYcoi/n8gVt38dFe+MB8GA1UdIwQY
MBaAFOjL1MIwYtaVN/suiorMv7An8rUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYt
NzgyM2JjY2E1OTcwLzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYtNzgyM2JjY2E1OTcw
LzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0e0hRHO
/NvMz6yoYqpSFo8Nf495bVCOu5+ot+WIUdxt371UmphqCVRt0F2PmoPWU7lrmTg/
CuT0dU7YEed1rP1fbGYCiu9RQvbd0ZSAIJWZCTUalAajYH8xket7IR5HP6Va+PlP
8XGLR+5fC9ig+PQ/vARo8TQbTINbSbjhoYA4psIGGjH9+7je+f0RynfeOVf/MdpU
Q0AxsAEaqfOh6wE5i8sprBvfqmB97bCNgdPTh2kYiLQT99Pc5saC3nojzOOcjbYh
lX5xiq0CKyNyt7gOq3u7aIF6xbgiZoDRRWrIhU/6/JFY3UfZpujh88++VF69hlDl
GOu6jtMLXZeiNA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:41:32 2026 by rpki-client