Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File:                     6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier:          5OZSnH4gz9RIUpus0DgbxmkICK5w0hGlxW9MLQqskss=
Subject key identifier:   E2:50:43:83:E9:2B:F1:2E:CB:33:EE:4C:8D:18:EC:AE:11:A8:6D:7D
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer:       /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial:       01A12CC58B4E6364FD9729F141161F86DBE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number:          1A98
Signing time:             Sun 11 Oct 2026 21:01:45 +0000
Manifest this update:     Sun 11 Oct 2026 21:01:45 +0000
Manifest next update:     Mon 12 Oct 2026 21:01:45 +0000
Files and hashes:         1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: EyW8sAnRaMeczFbt7xAUcGcTZhlEoTTXhWzXPVMKABs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 21:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:c5:8b:4e:63:64:fd:97:29:f1:41:16:1f:86:db:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
        Validity
            Not Before: Oct 11 21:01:45 2026 GMT
            Not After : Oct 12 21:01:45 2026 GMT
        Subject: CN=e2504383e92bf12ecb33ee4c8d18ecae11a86d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:b1:86:9b:82:6a:40:90:ba:32:66:9b:a0:
                    58:26:69:19:46:30:ba:4b:fc:f3:9f:fe:b4:69:45:
                    b0:4d:c4:f2:8c:90:46:c4:0a:a6:c5:7c:46:bf:97:
                    b5:52:6e:78:77:f1:b9:1a:27:55:86:66:f8:8e:cd:
                    85:51:58:c4:ee:1a:c3:fc:ce:91:b4:08:cb:78:f7:
                    e1:7a:01:91:30:36:3c:39:1a:0b:40:ec:62:78:72:
                    a5:7f:fa:7d:4e:6b:d6:1e:43:5b:94:58:b8:a5:5b:
                    54:de:f3:99:75:fa:33:9e:70:a4:62:1b:ff:60:23:
                    ed:e0:a6:a5:9b:12:d7:a4:da:fe:91:bb:90:1c:a8:
                    33:69:52:3d:c1:4f:5a:4d:2d:c9:ba:0a:41:d5:f2:
                    b3:7c:7b:12:09:e4:32:ac:88:fa:6e:18:75:f8:c2:
                    7a:e9:d3:20:21:6a:e1:f9:97:e5:11:8c:3d:72:6a:
                    17:1b:f4:f5:5e:e6:89:3d:30:57:d2:58:ec:2f:55:
                    ec:1a:02:f3:5a:a7:60:12:d9:fb:b3:54:74:76:e2:
                    8c:c0:a9:78:85:b0:d4:ce:14:06:f0:2d:c5:40:26:
                    2f:f6:6a:86:61:9c:68:62:07:8c:00:a5:13:6a:36:
                    e4:5c:bf:5b:16:00:8a:fe:4f:d3:05:6b:62:11:8d:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:50:43:83:E9:2B:F1:2E:CB:33:EE:4C:8D:18:EC:AE:11:A8:6D:7D
            X509v3 Authority Key Identifier:
                keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6a:a6:bc:d7:78:8a:ef:ce:39:16:1c:39:62:aa:46:ee:d4:
         0a:da:c6:c8:2c:d9:4d:ad:ad:4f:78:12:25:77:64:9b:5a:41:
         a6:cf:aa:90:3d:70:02:82:ae:3e:20:5b:b6:23:ad:ee:a3:e1:
         3f:04:88:69:31:ef:d4:0b:82:c1:b3:cf:33:ea:9d:c7:26:b8:
         47:31:75:f8:20:b0:e6:99:e8:79:14:a9:a8:1a:ee:7c:21:a3:
         f8:c8:fa:c0:9d:d1:9c:a9:0a:5a:96:2b:1f:a4:7b:92:30:ba:
         d3:ae:67:12:51:9a:93:a8:7b:5b:a6:8d:cd:e0:0e:5c:75:a6:
         6b:95:93:7e:b9:93:d2:8d:d0:2c:15:e0:68:00:6f:07:bf:c2:
         d0:8a:e6:f2:1d:f6:b0:b2:f0:7b:bc:88:a7:3a:9f:0b:90:f4:
         55:3f:db:7a:46:fb:dd:d4:59:9e:9b:0f:47:a8:9b:e9:43:43:
         de:92:11:3c:18:1a:eb:fb:49:3a:4f:eb:14:78:70:ea:51:0c:
         2a:6c:d0:4f:63:0a:f6:a6:fc:36:1a:3e:04:32:cb:23:4f:f6:
         5f:ed:06:fb:5c:6c:14:24:30:03:3b:7f:b3:85:d2:86:a0:25:
         07:48:26:b1:91:ea:4c:5d:81:d3:0e:d8:53:ce:38:b1:86:ae:
         11:cd:0c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsxYtOY2T9lynxQRYfhtvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDNiM2E1YTcyODBhYTlmZTJiZmZhOTA2NWMyYjJhMDFh
NTc3Y2MwHhcNMjYxMDExMjEwMTQ1WhcNMjYxMDEyMjEwMTQ1WjAzMTEwLwYDVQQD
EyhlMjUwNDM4M2U5MmJmMTJlY2IzM2VlNGM4ZDE4ZWNhZTExYTg2ZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomexhpuCakCQujJmm6BYJmkZRjC6
S/zzn/60aUWwTcTyjJBGxAqmxXxGv5e1Um54d/G5GidVhmb4js2FUVjE7hrD/M6R
tAjLePfhegGRMDY8ORoLQOxieHKlf/p9TmvWHkNblFi4pVtU3vOZdfoznnCkYhv/
YCPt4KalmxLXpNr+kbuQHKgzaVI9wU9aTS3JugpB1fKzfHsSCeQyrIj6bhh1+MJ6
6dMgIWrh+ZflEYw9cmoXG/T1XuaJPTBX0ljsL1XsGgLzWqdgEtn7s1R0duKMwKl4
hbDUzhQG8C3FQCYv9mqGYZxoYgeMAKUTajbkXL9bFgCK/k/TBWtiEY3CLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJQQ4PpK/EuyzPuTI0Y7K4RqG19MB8GA1UdIwQY
MBaAFOkDs6WnKAqp/iv/qQZcKyoBpXfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUt
NGNlYzY5NjgzM2VkLzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUtNGNlYzY5NjgzM2Vk
LzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2qmvNd4
iu/OORYcOWKqRu7UCtrGyCzZTa2tT3gSJXdkm1pBps+qkD1wAoKuPiBbtiOt7qPh
PwSIaTHv1AuCwbPPM+qdxya4RzF1+CCw5pnoeRSpqBrufCGj+Mj6wJ3RnKkKWpYr
H6R7kjC6065nElGak6h7W6aNzeAOXHWma5WTfrmT0o3QLBXgaABvB7/C0Irm8h32
sLLwe7yIpzqfC5D0VT/bekb73dRZnpsPR6ib6UND3pIRPBga6/tJOk/rFHhw6lEM
KmzQT2MK9qb8Nho+BDLLI0/2X+0G+1xsFCQwAzt/s4XShqAlB0gmsZHqTF2B0w7Y
U844sYauEc0M1w==
-----END CERTIFICATE-----