Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File:                     ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier:          9SwZ+Msyvv4ZDluEqN+gDgYFNTBhl39esJNZ/JN8FE0=
Subject key identifier:   51:F7:61:12:E4:5A:18:32:94:80:3C:FF:41:C2:E0:55:C7:A0:21:41
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer:       /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial:       01A0C88F3247D4C63556EDFC13990DAD4B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number:          03E2
Signing time:             Tue 22 Sep 2026 10:00:22 +0000
Manifest this update:     Tue 22 Sep 2026 10:00:22 +0000
Manifest next update:     Wed 23 Sep 2026 10:00:22 +0000
Files and hashes:         1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
                          2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
                          3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: ON6xOeidH+vm8zMd4gRXlNvkllmODXInKcmyaDMbB1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:32:47:d4:c6:35:56:ed:fc:13:99:0d:ad:4b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
        Validity
            Not Before: Sep 22 10:00:22 2026 GMT
            Not After : Sep 23 10:00:22 2026 GMT
        Subject: CN=51f76112e45a183294803cff41c2e055c7a02141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:ee:0c:ea:a9:03:3c:32:5b:c7:1b:b9:b2:
                    98:22:9d:a4:bf:02:67:32:3e:40:b5:7a:62:e5:46:
                    6e:18:32:da:24:a5:c1:56:83:22:81:73:c7:a5:2d:
                    d0:14:b5:19:54:be:7f:09:ea:39:5a:f5:44:14:ff:
                    8f:2f:0f:06:00:bb:ba:2a:43:ac:53:08:8a:1c:d3:
                    e8:7e:a5:73:47:c5:91:ff:c9:ed:a5:b4:9d:81:9c:
                    33:b7:55:c1:ab:9d:9c:b4:a4:ab:f9:c6:46:9a:b9:
                    ef:cc:a7:9e:19:18:40:b2:30:77:48:e8:66:5d:aa:
                    3e:4b:5e:82:1a:38:c2:9a:0b:3c:e8:d0:a3:19:4a:
                    52:47:a8:54:d3:b2:dd:5f:7b:4b:35:bf:55:43:c8:
                    6c:27:81:18:e9:07:f6:c9:be:70:a3:8f:40:d9:15:
                    18:7d:2e:04:b2:b9:1d:d9:22:07:da:da:20:be:62:
                    1c:58:f4:96:b0:5b:88:c2:ee:e4:0b:9f:48:b3:74:
                    d1:a8:25:3b:cf:ae:d3:71:49:5e:9a:c2:34:c4:47:
                    f2:e9:21:74:88:b2:56:40:79:0e:56:32:51:04:8e:
                    77:c4:16:5c:fe:7b:a9:0b:ae:b8:1e:b4:35:3b:3c:
                    e4:c5:58:ff:dd:73:69:0a:a4:d7:21:a0:f5:5f:5a:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F7:61:12:E4:5A:18:32:94:80:3C:FF:41:C2:E0:55:C7:A0:21:41
            X509v3 Authority Key Identifier:
                keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:d2:07:d4:59:b7:99:71:fd:12:65:34:b6:d9:ba:ab:97:
         6f:65:f4:90:40:4b:da:03:a0:80:88:d8:9a:25:a0:a3:be:20:
         d0:91:3b:25:5b:f8:13:4a:bd:7b:c6:a5:9e:95:8b:55:23:81:
         90:d4:a5:8e:00:c9:4e:42:98:c1:f5:c1:81:27:9e:09:4f:90:
         95:14:cd:66:09:09:8c:e2:0e:f1:84:45:0e:f2:5c:9a:f1:3d:
         2b:2a:df:27:16:a1:6c:a4:02:50:b5:48:7b:cd:d7:50:f8:5d:
         3c:d4:45:7d:2b:58:41:7d:1e:ab:bc:d2:e8:e2:a9:86:92:21:
         b8:38:37:48:a0:49:51:aa:53:a6:35:fb:01:69:35:f0:c5:a1:
         f0:3f:62:d3:de:36:40:45:2e:e0:47:cc:9b:e8:9d:1f:75:c7:
         74:5a:bd:95:e6:0b:72:f3:21:c2:f5:3b:f6:69:47:91:01:bb:
         5b:c2:44:b2:18:a9:ea:0f:c9:36:1e:b9:ee:85:92:90:61:23:
         03:da:77:8b:74:45:71:07:63:bf:07:22:ac:ac:9a:5d:89:75:
         a8:74:8a:ce:16:56:68:47:1b:32:7f:1b:64:16:43:63:5f:d3:
         2a:b9:e4:3c:50:f6:9d:f3:e4:a2:e1:25:6a:cd:cc:42:33:86:
         29:82:75:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIjzJH1MY1Vu38E5kNrUsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNGVhNDE4NzhlZTkxMzdlN2M5M2Q2ZGNkMzFkMDIwZWMz
ZmU0NjEwHhcNMjYwOTIyMTAwMDIyWhcNMjYwOTIzMTAwMDIyWjAzMTEwLwYDVQQD
Eyg1MWY3NjExMmU0NWExODMyOTQ4MDNjZmY0MWMyZTA1NWM3YTAyMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPzuDOqpAzwyW8cbubKYIp2kvwJn
Mj5AtXpi5UZuGDLaJKXBVoMigXPHpS3QFLUZVL5/Ceo5WvVEFP+PLw8GALu6KkOs
UwiKHNPofqVzR8WR/8ntpbSdgZwzt1XBq52ctKSr+cZGmrnvzKeeGRhAsjB3SOhm
Xao+S16CGjjCmgs86NCjGUpSR6hU07LdX3tLNb9VQ8hsJ4EY6Qf2yb5wo49A2RUY
fS4Esrkd2SIH2togvmIcWPSWsFuIwu7kC59Is3TRqCU7z67TcUlemsI0xEfy6SF0
iLJWQHkOVjJRBI53xBZc/nupC664HrQ1OzzkxVj/3XNpCqTXIaD1X1pg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH3YRLkWhgylIA8/0HC4FXHoCFBMB8GA1UdIwQY
MBaAFHJOpBh47pE358k9bc0x0CDsP+RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAt
OGQzM2IyYTJmZGU4LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAtOGQzM2IyYTJmZGU4
LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKXSB9RZ
t5lx/RJlNLbZuquXb2X0kEBL2gOggIjYmiWgo74g0JE7JVv4E0q9e8alnpWLVSOB
kNSljgDJTkKYwfXBgSeeCU+QlRTNZgkJjOIO8YRFDvJcmvE9KyrfJxahbKQCULVI
e83XUPhdPNRFfStYQX0eq7zS6OKphpIhuDg3SKBJUapTpjX7AWk18MWh8D9i0942
QEUu4EfMm+idH3XHdFq9leYLcvMhwvU79mlHkQG7W8JEship6g/JNh657oWSkGEj
A9p3i3RFcQdjvwcirKyaXYl1qHSKzhZWaEcbMn8bZBZDY1/TKrnkPFD2nfPkouEl
as3MQjOGKYJ1lw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:28:02 2026 by rpki-client