Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
File:                     6quXbuOZaLcCcSdvbSLluRyOFuM.mft (raw, json)
Hash identifier:          RTa70IlCXWt8GwSLAM3jUnaDme5aPWndY2zuMCpmlcE=
Subject key identifier:   B3:C8:7B:32:BA:A8:23:D7:7C:3A:FE:D1:54:B1:1E:EA:96:E2:C2:15
Authority key identifier: EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3
Certificate issuer:       /CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
Certificate serial:       01A1C2F8E4F5FFF23875B864EBE371D325DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
Manifest number:          0A1F
Signing time:             Tue 10 Nov 2026 01:00:53 +0000
Manifest this update:     Tue 10 Nov 2026 01:00:53 +0000
Manifest next update:     Wed 11 Nov 2026 01:00:53 +0000
Files and hashes:         1: 6quXbuOZaLcCcSdvbSLluRyOFuM.crl (hash: G9lIeE0eeNJEOmCXQ9kWWw+YQYmkhRDnh1WYipb7Zbk=)
                          2: FItufD4g6Rpcfi-qLOSG6QP5iyk.roa (hash: cSv77SjU93dXwHwYySLduzYXIphHn8RI61zSwh009sw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 22:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c2:f8:e4:f5:ff:f2:38:75:b8:64:eb:e3:71:d3:25:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
        Validity
            Not Before: Nov 10 01:00:53 2026 GMT
            Not After : Nov 11 01:00:53 2026 GMT
        Subject: CN=b3c87b32baa823d77c3afed154b11eea96e2c215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:97:0b:ca:3a:5f:35:79:6e:60:66:d7:e8:
                    10:9b:0e:f5:b9:86:08:58:6f:6e:62:de:3f:c5:a2:
                    09:33:c9:58:08:d3:f9:00:6f:87:53:20:29:a6:fb:
                    2f:53:8f:a9:0f:c3:02:e7:59:24:93:56:29:cf:e2:
                    44:64:8a:92:bc:78:e2:cd:e6:91:22:e0:6f:dd:6d:
                    d1:92:e3:48:0e:d5:83:34:c0:9d:f4:a4:77:3c:63:
                    8c:2b:4f:2f:20:5d:d1:a5:c5:6b:34:6a:44:bd:c8:
                    e1:7c:d2:20:26:67:6c:14:06:6c:6c:00:f6:d1:c9:
                    c1:0f:7f:0d:28:9f:23:4d:8d:75:7d:68:75:fe:d2:
                    a0:a0:6d:42:3a:90:9f:31:8f:a1:af:2a:03:f5:02:
                    3a:88:34:33:bc:20:27:9d:9d:a5:08:82:4d:a7:20:
                    d0:e8:86:8d:9c:9a:47:ac:28:fb:ed:43:d1:47:1e:
                    fa:fe:2f:63:6a:e0:26:74:c5:ec:71:e5:da:ed:c1:
                    40:a5:61:af:64:5a:32:8e:2d:31:75:f3:cd:9f:39:
                    97:1b:34:f6:97:b6:e8:d6:52:cd:90:ca:e7:52:fe:
                    2f:1f:36:7c:0f:67:9d:31:b9:eb:e7:69:90:f0:1b:
                    44:38:5c:6c:eb:f9:77:2b:27:61:af:85:cd:67:2d:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C8:7B:32:BA:A8:23:D7:7C:3A:FE:D1:54:B1:1E:EA:96:E2:C2:15
            X509v3 Authority Key Identifier:
                keyid:EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:39:f8:27:ef:f4:53:17:4d:a5:98:30:10:08:a1:0e:eb:
         80:ca:ce:15:7a:9d:d5:fb:21:9e:c7:36:85:46:ca:aa:da:da:
         cc:51:90:e9:ca:b0:20:b9:76:44:5d:b7:72:b2:6e:d1:54:87:
         74:e3:c2:5c:ea:46:66:d6:6b:97:1c:2d:0a:e6:06:77:f9:69:
         59:fb:66:af:fc:53:9d:fd:f8:16:e6:4d:68:45:72:6d:d4:ce:
         3d:be:7d:01:d7:f7:86:3e:25:79:6b:82:65:79:d9:84:11:1e:
         5c:d8:c4:ee:38:5a:04:b9:8d:b0:f6:b3:e4:a1:b3:da:9e:08:
         9e:db:ec:97:1c:8e:94:c2:25:1b:4d:95:4f:bc:f3:23:a3:4d:
         51:1b:f0:50:7a:d5:c8:4d:51:1d:71:3c:a8:40:e9:61:69:1c:
         64:65:3a:17:be:9f:e9:35:cf:97:9d:20:40:cd:b5:48:9c:56:
         88:4b:6d:9b:0e:c8:f3:6e:7d:ac:65:ab:18:70:39:78:c3:f4:
         0d:5d:89:3c:35:9d:11:ea:f4:5e:07:5a:1f:6f:05:a0:ca:29:
         fd:f4:0c:f1:79:ef:a6:3c:c7:4a:19:2e:d1:c9:17:03:45:3e:
         92:e0:2b:70:c6:3b:9f:91:85:e4:f8:8d:6d:6d:f8:04:c7:45:
         8b:50:26:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHC+OT1//I4dbhk6+Nx0yXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWI5NzZlZTM5OTY4YjcwMjcxMjc2ZjZkMjJlNWI5MWM4
ZTE2ZTMwHhcNMjYxMTEwMDEwMDUzWhcNMjYxMTExMDEwMDUzWjAzMTEwLwYDVQQD
EyhiM2M4N2IzMmJhYTgyM2Q3N2MzYWZlZDE1NGIxMWVlYTk2ZTJjMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlseXC8o6XzV5bmBm1+gQmw71uYYI
WG9uYt4/xaIJM8lYCNP5AG+HUyAppvsvU4+pD8MC51kkk1Ypz+JEZIqSvHjizeaR
IuBv3W3RkuNIDtWDNMCd9KR3PGOMK08vIF3RpcVrNGpEvcjhfNIgJmdsFAZsbAD2
0cnBD38NKJ8jTY11fWh1/tKgoG1COpCfMY+hryoD9QI6iDQzvCAnnZ2lCIJNpyDQ
6IaNnJpHrCj77UPRRx76/i9jauAmdMXsceXa7cFApWGvZFoyji0xdfPNnzmXGzT2
l7bo1lLNkMrnUv4vHzZ8D2edMbnr52mQ8BtEOFxs6/l3Kydhr4XNZy1T1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPIezK6qCPXfDr+0VSxHuqW4sIVMB8GA1UdIwQY
MBaAFOqrl27jmWi3AnEnb20i5bkcjhbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnF1WGJ1T1phTGNDY1NkdmJTTGx1UnlPRnVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMDNiZDQtZmFlNi00ZDlkLTlhYjMt
MDIzMWFiOWVlN2MyLzEvNnF1WGJ1T1phTGNDY1NkdmJTTGx1UnlPRnVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lMDNiZDQtZmFlNi00ZDlkLTlhYjMtMDIzMWFiOWVlN2My
LzEvNnF1WGJ1T1phTGNDY1NkdmJTTGx1UnlPRnVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlg5+Cfv
9FMXTaWYMBAIoQ7rgMrOFXqd1fshnsc2hUbKqtrazFGQ6cqwILl2RF23crJu0VSH
dOPCXOpGZtZrlxwtCuYGd/lpWftmr/xTnf34FuZNaEVybdTOPb59Adf3hj4leWuC
ZXnZhBEeXNjE7jhaBLmNsPaz5KGz2p4IntvslxyOlMIlG02VT7zzI6NNURvwUHrV
yE1RHXE8qEDpYWkcZGU6F76f6TXPl50gQM21SJxWiEttmw7I8259rGWrGHA5eMP0
DV2JPDWdEer0XgdaH28FoMop/fQM8XnvpjzHShku0ckXA0U+kuArcMY7n5GF5PiN
bW34BMdFi1AmXw==
-----END CERTIFICATE-----
Generated at Tue Nov 10 07:40:19 2026 by rpki-client