Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File:                     S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier:          65oDA+7p5zU4qLFkRIhytu95AOwLXnN202+9Dqkl230=
Subject key identifier:   D3:6A:07:07:8E:73:0F:98:02:7A:32:2B:8F:11:A7:73:39:CF:92:6C
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer:       /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial:       01A0D3B82C24ED45038965538EBA6676FA4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number:          11A6
Signing time:             Thu 24 Sep 2026 14:00:57 +0000
Manifest this update:     Thu 24 Sep 2026 14:00:57 +0000
Manifest next update:     Fri 25 Sep 2026 14:00:57 +0000
Files and hashes:         1: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: Xp3VkZo/gVqfWzmdxtGFpB32KavNU4jrQWG3Knkkg4A=)
                          2: tzRdx4BT786qNcQZeRMNg_SKiRI.roa (hash: T/qoi141JqlXpa6Bw1J2VzP/DVBAdA7o+aP6DP3caPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:2c:24:ed:45:03:89:65:53:8e:ba:66:76:fa:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
        Validity
            Not Before: Sep 24 14:00:57 2026 GMT
            Not After : Sep 25 14:00:57 2026 GMT
        Subject: CN=d36a07078e730f98027a322b8f11a77339cf926c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:dc:14:91:06:82:02:95:1b:71:a1:cf:fd:
                    59:e8:46:64:c7:c4:c0:a3:1c:e1:d8:74:2a:6f:bf:
                    60:67:18:38:8f:24:90:76:ba:29:f6:72:90:4d:9f:
                    67:71:29:78:bb:65:48:09:fb:58:d5:ec:26:8f:ba:
                    21:97:fd:66:d7:a4:33:51:0b:2d:bc:9f:89:43:c2:
                    bb:b6:22:f9:dd:78:8e:cc:b1:ba:f0:67:d0:01:d5:
                    b4:c9:72:51:c1:79:1c:a9:00:da:38:aa:04:fb:00:
                    c5:12:26:47:b4:ee:46:61:4f:bb:88:e1:16:a7:ad:
                    8b:89:d6:05:78:74:7f:aa:22:72:6e:2f:16:42:22:
                    eb:13:81:25:4d:23:d6:b3:74:df:6d:22:f2:37:0e:
                    56:da:52:7d:a1:0a:19:5a:b4:ac:b0:16:d3:59:e9:
                    3f:2c:c7:05:01:70:d1:ca:6b:be:43:f7:af:1e:14:
                    d8:e9:b4:9a:94:e7:e8:8b:1d:15:af:93:9b:6b:28:
                    0d:45:ff:e2:44:99:9a:f9:8b:f2:74:b2:78:55:93:
                    f7:a8:e5:12:1a:ab:f2:42:c7:18:79:a2:f1:ec:9e:
                    84:1f:0f:69:56:72:25:f4:d4:25:60:1c:14:c9:0c:
                    35:9b:b7:69:b6:76:d1:b7:f4:cb:98:eb:80:28:02:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6A:07:07:8E:73:0F:98:02:7A:32:2B:8F:11:A7:73:39:CF:92:6C
            X509v3 Authority Key Identifier:
                keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:5d:31:3c:4c:7a:48:48:59:1c:86:d4:27:a6:68:5a:07:60:
         4b:1c:a4:1f:00:3b:a5:4b:fb:78:ce:c8:8e:74:69:86:08:73:
         10:4f:a0:f8:8a:3c:f1:3d:fe:08:d2:76:a7:8e:71:3d:9d:bc:
         c0:24:d5:3c:60:e3:fb:85:87:b4:06:97:be:a4:11:b1:d3:e0:
         8d:7a:d3:14:0c:b2:c7:d1:10:86:2e:c4:23:07:00:40:1a:40:
         ea:24:84:12:f0:9a:6c:36:5d:d5:6c:fc:55:14:69:59:5c:f2:
         4f:e8:fa:ef:a9:25:f1:74:63:28:d7:23:80:81:13:18:bd:2a:
         51:a4:5d:ff:1e:b9:96:df:59:a3:2d:d4:8a:a9:7b:a6:a7:27:
         c5:b1:57:d4:e0:98:38:cd:23:f8:86:d3:30:0b:5b:d6:97:18:
         4e:c5:83:f6:0a:57:2e:c1:2f:1e:4a:8f:82:7e:92:4f:5a:c5:
         7c:4e:b0:19:9f:ad:4f:0f:f2:7a:40:00:37:3d:5e:f9:b4:6b:
         75:6d:8e:b7:86:ce:c1:06:74:d0:2a:7f:50:ed:ec:2f:f0:3b:
         ed:f8:3d:fc:01:c9:c1:64:cc:fb:7f:2b:0c:ab:d8:af:52:de:
         65:d6:99:7b:7b:14:60:f7:49:78:c5:53:76:cc:81:7a:cc:e7:
         5e:73:8c:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuCwk7UUDiWVTjrpmdvpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjYwOTI0MTQwMDU3WhcNMjYwOTI1MTQwMDU3WjAzMTEwLwYDVQQD
EyhkMzZhMDcwNzhlNzMwZjk4MDI3YTMyMmI4ZjExYTc3MzM5Y2Y5MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7TcFJEGggKVG3Ghz/1Z6EZkx8TA
oxzh2HQqb79gZxg4jySQdrop9nKQTZ9ncSl4u2VICftY1ewmj7ohl/1m16QzUQst
vJ+JQ8K7tiL53XiOzLG68GfQAdW0yXJRwXkcqQDaOKoE+wDFEiZHtO5GYU+7iOEW
p62LidYFeHR/qiJybi8WQiLrE4ElTSPWs3TfbSLyNw5W2lJ9oQoZWrSssBbTWek/
LMcFAXDRymu+Q/evHhTY6bSalOfoix0Vr5ObaygNRf/iRJma+YvydLJ4VZP3qOUS
GqvyQscYeaLx7J6EHw9pVnIl9NQlYBwUyQw1m7dptnbRt/TLmOuAKAKtMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNqBweOcw+YAnoyK48Rp3M5z5JsMB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxl0xPEx6
SEhZHIbUJ6ZoWgdgSxykHwA7pUv7eM7IjnRphghzEE+g+Io88T3+CNJ2p45xPZ28
wCTVPGDj+4WHtAaXvqQRsdPgjXrTFAyyx9EQhi7EIwcAQBpA6iSEEvCabDZd1Wz8
VRRpWVzyT+j676kl8XRjKNcjgIETGL0qUaRd/x65lt9Zoy3Uiql7pqcnxbFX1OCY
OM0j+IbTMAtb1pcYTsWD9gpXLsEvHkqPgn6ST1rFfE6wGZ+tTw/yekAANz1e+bRr
dW2Ot4bOwQZ00Cp/UO3sL/A77fg9/AHJwWTM+38rDKvYr1LeZdaZe3sUYPdJeMVT
dsyBesznXnOMrg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:29:18 2026 by rpki-client