Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.mft (raw, json)
Hash identifier:          dvMfk0YSdDD1T6rAjbminaU1if1ZmXU9Hc/TD5ADQ8k=
Subject key identifier:   2A:C6:A9:19:48:39:26:87:43:82:F2:F2:D7:69:FC:8C:AC:54:E2:93
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       01A0C8FD21C9CB75135902BA7F2915BD5ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
Manifest number:          1A67
Signing time:             Tue 22 Sep 2026 12:00:27 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:27 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:27 +0000
Files and hashes:         1: 6DoszpCD6MFaHTJc9IdnVZ-StiM.crl (hash: D6pwufxBzYBAXCmdpuIe0BoeYLuzyaNodg1AZd1ZzYg=)
                          2: CNXF2SSWNpo_l9RHcQj_nTeKVNQ.roa (hash: EDn78xn+p6oMFAEmlxUOHaCSYp4j7S763nhsCUw2Kv4=)
                          3: H9CdRCLLB89FGC_P99zvO9bw22M.roa (hash: /+D8bia7Or2I7xsqu4Z5whu7vt5QZWNJo6zSPqWl4CQ=)
                          4: ORyyWOYfH2nmHuG5PcDCFlq-wYQ.roa (hash: OirWDledNDa67ty/dKSFYukThzm9V2btotcDCbLF1o4=)
                          5: Y3zEjxsT9LK8bAHKxpRR2-UNW-A.roa (hash: gtJSWV6dJGPToJtFvmcUYQb8AcDhxr2Bne8t1GW0tKE=)
                          6: zcCiixqCklulb_B107CrpvzF08M.roa (hash: I58sikhQ3Ff9PunOEcBamQjNVvG5kDBAQWFHprNeKL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:21:c9:cb:75:13:59:02:ba:7f:29:15:bd:5a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Sep 22 12:00:27 2026 GMT
            Not After : Sep 23 12:00:27 2026 GMT
        Subject: CN=2ac6a919483926874382f2f2d769fc8cac54e293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:d5:6b:f3:ec:48:b1:cf:75:24:a1:9c:ac:
                    f9:ae:eb:39:bd:ca:6c:e9:db:19:54:20:1d:03:8f:
                    e5:39:b7:1a:38:b0:ef:7b:5f:56:9b:ae:63:af:71:
                    10:eb:09:72:c8:b5:ec:80:69:c0:43:fe:d4:a0:14:
                    b5:40:5b:6b:07:8e:c1:44:60:39:0f:68:b4:fe:0b:
                    da:2d:07:f4:55:68:cf:2b:7b:03:9d:f5:fa:73:4a:
                    4f:c3:62:b1:3d:b3:1a:94:fe:77:97:52:0c:42:b4:
                    3d:c6:e3:1d:7f:ce:22:68:79:c4:24:7e:3e:02:0d:
                    a5:13:75:93:de:fb:5d:ce:6a:ae:5b:f2:ff:1c:cd:
                    65:fa:bc:4c:85:99:7c:d8:97:07:4a:77:56:2f:b1:
                    0d:d0:0f:b1:de:84:9b:7d:d7:a7:01:5b:11:e9:dd:
                    0a:58:12:fa:ed:69:7c:42:31:65:0e:04:00:5e:f3:
                    1a:68:ee:93:03:cb:09:88:27:e2:3e:54:82:ac:de:
                    e1:8c:2a:fa:d2:25:11:35:de:83:05:a2:7d:4b:b1:
                    06:b9:91:e7:4c:be:dd:70:00:c4:be:10:34:67:e7:
                    63:76:c7:1a:a3:0b:d2:50:5a:b8:a9:f4:c7:e4:e0:
                    d1:50:cb:be:8c:fb:4d:21:17:22:51:d6:f5:2c:59:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C6:A9:19:48:39:26:87:43:82:F2:F2:D7:69:FC:8C:AC:54:E2:93
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:f4:51:eb:72:29:97:22:67:25:65:62:30:21:e1:95:63:
         ed:af:2d:24:c8:71:a3:2d:2a:3f:a1:7c:17:3b:c4:16:d9:37:
         54:f7:35:a4:23:b0:df:77:4e:5b:d3:a6:be:1c:90:21:49:44:
         39:c0:85:e4:c9:03:43:1d:d9:39:a9:b2:95:64:ca:6d:0a:a9:
         5c:46:27:c7:2a:37:4b:b2:a8:7c:11:c2:8b:00:4d:bc:a3:20:
         a8:a3:43:bc:d6:9d:80:e0:ff:73:51:2f:e7:77:98:24:55:75:
         35:51:bc:85:26:cc:e3:67:4f:3e:94:ac:23:95:2c:df:84:40:
         9a:aa:db:f3:73:04:d0:2f:9d:e8:02:ef:e4:6a:f1:9c:79:29:
         8e:8a:66:8a:83:67:1a:35:01:8f:04:4f:41:3f:a5:93:c9:98:
         63:d9:13:3a:e9:5c:d4:c4:4d:2a:1d:bf:71:a0:cf:31:57:7a:
         8f:0b:05:e6:13:e5:f8:c5:a1:a1:1c:63:63:3c:f8:ad:67:9d:
         53:39:53:18:61:0d:1c:c9:9d:5f:45:44:bb:4c:a2:ea:75:b4:
         c6:8f:16:0f:2c:df:d9:0f:ce:6b:b2:c5:75:9d:63:ec:5f:5c:
         32:30:7a:7c:a7:5e:dc:13:f8:fc:83:a4:32:02:a6:e0:6d:39:
         a1:af:4a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/SHJy3UTWQK6fykVvVq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4M2EyY2NlOTA4M2U4YzE1YTFkMzI1Y2Y0ODc2NzU1OWY5
MmI2MjMwHhcNMjYwOTIyMTIwMDI3WhcNMjYwOTIzMTIwMDI3WjAzMTEwLwYDVQQD
EygyYWM2YTkxOTQ4MzkyNjg3NDM4MmYyZjJkNzY5ZmM4Y2FjNTRlMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhrVa/PsSLHPdSShnKz5rus5vcps
6dsZVCAdA4/lObcaOLDve19Wm65jr3EQ6wlyyLXsgGnAQ/7UoBS1QFtrB47BRGA5
D2i0/gvaLQf0VWjPK3sDnfX6c0pPw2KxPbMalP53l1IMQrQ9xuMdf84iaHnEJH4+
Ag2lE3WT3vtdzmquW/L/HM1l+rxMhZl82JcHSndWL7EN0A+x3oSbfdenAVsR6d0K
WBL67Wl8QjFlDgQAXvMaaO6TA8sJiCfiPlSCrN7hjCr60iURNd6DBaJ9S7EGuZHn
TL7dcADEvhA0Z+djdscaowvSUFq4qfTH5ODRUMu+jPtNIRciUdb1LFnwsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrGqRlIOSaHQ4Ly8tdp/IysVOKTMB8GA1UdIwQY
MBaAFOg6LM6Qg+jBWh0yXPSHZ1WfkrYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkRvc3pwQ0Q2TUZhSFRKYzlJZG5WWi1TdGlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lYjQyMmItYzc5ZS00ZmJlLWFlOGYt
MzU2M2Y5NTQzNDg3LzEvNkRvc3pwQ0Q2TUZhSFRKYzlJZG5WWi1TdGlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lYjQyMmItYzc5ZS00ZmJlLWFlOGYtMzU2M2Y5NTQzNDg3
LzEvNkRvc3pwQ0Q2TUZhSFRKYzlJZG5WWi1TdGlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+b0Uety
KZciZyVlYjAh4ZVj7a8tJMhxoy0qP6F8FzvEFtk3VPc1pCOw33dOW9OmvhyQIUlE
OcCF5MkDQx3ZOamylWTKbQqpXEYnxyo3S7KofBHCiwBNvKMgqKNDvNadgOD/c1Ev
53eYJFV1NVG8hSbM42dPPpSsI5Us34RAmqrb83ME0C+d6ALv5GrxnHkpjopmioNn
GjUBjwRPQT+lk8mYY9kTOulc1MRNKh2/caDPMVd6jwsF5hPl+MWhoRxjYzz4rWed
UzlTGGENHMmdX0VEu0yi6nW0xo8WDyzf2Q/Oa7LFdZ1j7F9cMjB6fKde3BP4/IOk
MgKm4G05oa9KHg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:57:58 2026 by rpki-client