Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File:                     6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier:          bpDmJtpYynkIn1C+YdclH+Z9583PUlinM7c4cqPpY1Q=
Subject key identifier:   A5:7A:B0:1F:12:22:60:5D:8A:4B:58:F1:E5:56:D2:AD:0B:EC:55:E4
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer:       /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial:       01A0C85881DC89ADFBC2F260059C62AFC7AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number:          115D
Signing time:             Tue 22 Sep 2026 09:00:38 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:38 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:38 +0000
Files and hashes:         1: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: f9Vytld9APDhxJ9zgk0Gal0rEKoUe1oUoZCZMvTtuZg=)
                          2: rnz0AGmhyjc03zeDgVmDHn1Nzi4.roa (hash: XRH72JOXK+p4Pq8ZDCdIn3aOnofnmhSgP4XUJzURHnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:81:dc:89:ad:fb:c2:f2:60:05:9c:62:af:c7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
        Validity
            Not Before: Sep 22 09:00:38 2026 GMT
            Not After : Sep 23 09:00:38 2026 GMT
        Subject: CN=a57ab01f1222605d8a4b58f1e556d2ad0bec55e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:57:3e:f6:9e:e5:5b:3a:bb:29:ad:2a:c7:
                    23:de:75:9b:ca:c5:89:7f:7f:55:ef:f5:34:2a:c1:
                    bb:76:f6:4a:b3:69:1e:e0:a4:b9:11:c5:90:34:60:
                    c1:4e:83:b6:d5:e6:58:49:52:be:b1:fe:50:14:8e:
                    19:43:d3:a1:69:5b:79:24:69:3d:ad:13:88:5d:f1:
                    e1:3c:3d:35:84:c3:d8:16:42:ca:49:fc:c4:35:05:
                    28:06:bf:17:d9:0e:1c:f9:d3:0d:51:17:26:be:68:
                    99:b4:23:01:40:1b:5e:03:16:41:74:da:e9:e9:be:
                    a5:44:f8:6e:c5:4d:13:3b:d0:06:8c:4b:af:70:48:
                    6b:2b:6f:d8:96:27:c2:85:68:0b:77:03:ef:3d:db:
                    3e:25:2b:87:2c:63:cf:ae:15:58:3f:58:26:44:61:
                    86:16:9b:d3:12:bc:f5:ee:0d:a1:2a:50:e9:7a:77:
                    1f:34:f7:a1:7a:73:51:88:47:c9:28:41:ef:ca:ef:
                    04:eb:10:53:02:bb:9c:04:b2:cb:b9:66:d9:8b:68:
                    8d:29:6c:a4:e7:c3:8d:65:5e:7d:7d:20:f9:6b:26:
                    fa:45:17:63:a6:52:74:5b:3b:e9:e7:a6:00:14:3d:
                    97:1d:df:52:97:42:8f:62:00:53:48:99:bd:5a:4d:
                    70:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7A:B0:1F:12:22:60:5D:8A:4B:58:F1:E5:56:D2:AD:0B:EC:55:E4
            X509v3 Authority Key Identifier:
                keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a4:d3:49:4e:d4:99:df:06:dc:f8:ee:47:14:a1:7f:f1:e2:
         33:46:3a:6d:89:72:0d:20:fa:19:d4:cd:1e:17:4f:09:26:cd:
         b8:a9:27:b8:86:a0:d1:99:e3:75:7e:3d:93:cc:8c:72:f6:b2:
         a3:22:de:a5:91:a5:82:f9:84:e1:c2:48:c3:b9:76:7a:90:b7:
         fb:89:35:39:3e:56:13:72:ae:ad:64:0f:f0:f3:db:e7:46:f9:
         64:40:2d:b8:d5:d7:73:fd:ea:b1:c8:71:0b:13:e4:61:a4:d6:
         17:c0:f3:6b:86:e8:2e:79:0c:87:b2:00:e0:9a:77:ee:f4:98:
         13:13:01:bf:fd:28:44:1f:ce:1a:28:0e:f5:f5:41:23:02:29:
         fa:44:10:3c:40:e1:b9:dc:83:39:b7:e7:c1:ff:8a:ad:30:97:
         80:7d:99:c1:96:0c:ed:5d:c8:c3:57:a0:cf:66:07:a9:c3:4f:
         9a:f6:b5:fd:56:ca:99:e2:46:6f:23:94:12:42:f0:b7:bd:0b:
         e5:88:4b:55:0c:f8:33:de:be:8b:71:ec:dd:31:e2:d7:54:6e:
         47:d0:e6:6f:61:ac:d1:5f:21:24:07:42:c1:67:a1:47:ed:c0:
         49:ff:06:50:15:06:eb:98:99:85:e5:ca:2d:9b:4f:21:95:f0:
         82:70:53:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWIHcia37wvJgBZxir8evMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzUwM2I4M2ZhMDlhNzViY2I5MTA3NTQwMGY4MzA3YTY2
N2I4ZWQwHhcNMjYwOTIyMDkwMDM4WhcNMjYwOTIzMDkwMDM4WjAzMTEwLwYDVQQD
EyhhNTdhYjAxZjEyMjI2MDVkOGE0YjU4ZjFlNTU2ZDJhZDBiZWM1NWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FpXPvae5Vs6uymtKscj3nWbysWJ
f39V7/U0KsG7dvZKs2ke4KS5EcWQNGDBToO21eZYSVK+sf5QFI4ZQ9OhaVt5JGk9
rROIXfHhPD01hMPYFkLKSfzENQUoBr8X2Q4c+dMNURcmvmiZtCMBQBteAxZBdNrp
6b6lRPhuxU0TO9AGjEuvcEhrK2/YlifChWgLdwPvPds+JSuHLGPPrhVYP1gmRGGG
FpvTErz17g2hKlDpencfNPehenNRiEfJKEHvyu8E6xBTArucBLLLuWbZi2iNKWyk
58ONZV59fSD5ayb6RRdjplJ0Wzvp56YAFD2XHd9Sl0KPYgBTSJm9Wk1wgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV6sB8SImBdiktY8eVW0q0L7FXkMB8GA1UdIwQY
MBaAFOp1A7g/oJp1vLkQdUAPgwemZ7jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjIt
NjIxNDBiMjAyZWI0LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjItNjIxNDBiMjAyZWI0
LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqTTSU7U
md8G3PjuRxShf/HiM0Y6bYlyDSD6GdTNHhdPCSbNuKknuIag0ZnjdX49k8yMcvay
oyLepZGlgvmE4cJIw7l2epC3+4k1OT5WE3KurWQP8PPb50b5ZEAtuNXXc/3qschx
CxPkYaTWF8Dza4boLnkMh7IA4Jp37vSYExMBv/0oRB/OGigO9fVBIwIp+kQQPEDh
udyDObfnwf+KrTCXgH2ZwZYM7V3Iw1egz2YHqcNPmva1/VbKmeJGbyOUEkLwt70L
5YhLVQz4M96+i3Hs3THi11RuR9Dmb2Gs0V8hJAdCwWehR+3ASf8GUBUG65iZheXK
LZtPIZXwgnBTdw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:45:40 2026 by rpki-client