Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File:                     6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier:          p0UPXADxPyXrXWCKroJeG4QHFtUqQzKX833Q7zFv3ig=
Subject key identifier:   97:EF:B2:93:19:5E:F1:3F:0D:AB:78:D7:1E:36:5F:AF:CD:94:48:A4
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       01A0C63375E1B02A53980AC9712D1697D692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number:          14B5
Signing time:             Mon 21 Sep 2026 23:00:56 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:56 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:56 +0000
Files and hashes:         1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: YS4euz3ko62JzrHixY5iW5rpHA4ntdC28X+gHYxgW+o=)
                          2: VpbFmIH_t2IDnvNYTapdzjWFcyE.roa (hash: 9IQmiSUsGUEZsHUkFt7WwKB9UL9B6Sz69TEmpP9Pvqs=)
                          3: YFwbXAYbEeUxLStNYafLIFJsS38.roa (hash: sUmz+cW6Scb+RnqNk0SFjxB6/xFoGdQ3f2Qyme1WsKw=)
                          4: fVYSa0NF0rKJfH6lUMHroXq_h6I.roa (hash: LEn9pcZ1Tk/Gy+BsS9Rmr/QbWePO9YwcAnrS3Z8AYqs=)
                          5: kp_9DUhsk33ywFawYnPkFP584I8.roa (hash: RzOfnm+0AOUaUVxteYQHxfR18hPLFgs1Xun4HHqrE44=)
                          6: ugs2M1uh509Uqt85UEznBX3H5IE.roa (hash: SsFiVPzpCb6vKpY5OVRkgDrN06tsNk5q7un2OgWWteU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:75:e1:b0:2a:53:98:0a:c9:71:2d:16:97:d6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Sep 21 23:00:56 2026 GMT
            Not After : Sep 22 23:00:56 2026 GMT
        Subject: CN=97efb293195ef13f0dab78d71e365fafcd9448a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:5b:71:6e:16:db:8d:77:db:00:ef:1f:a2:
                    9f:d0:e1:3d:92:51:04:81:89:0b:a7:5d:a1:9f:ae:
                    80:5d:2b:33:d3:4b:2c:d0:53:71:ce:cc:ea:a3:b8:
                    18:ce:94:af:9d:52:ce:0e:21:51:34:10:1e:0d:c1:
                    3b:5a:bf:01:57:9c:df:e1:45:e7:6e:fc:8c:a8:95:
                    07:9c:5b:3f:8b:5f:2d:77:8f:44:23:a6:29:36:09:
                    9b:59:65:1c:b3:11:38:ff:f6:84:12:d6:70:09:84:
                    17:98:2e:2a:1a:24:c7:f9:b1:9b:61:6c:c1:c9:30:
                    7c:03:6e:83:55:76:2a:95:f5:41:0e:5a:34:50:8e:
                    06:b8:46:b9:46:4b:a6:30:f1:65:c4:5a:bd:1b:52:
                    45:c5:e5:53:51:f5:44:0f:85:a3:0d:b3:61:87:b8:
                    92:74:bb:35:df:15:da:86:cc:f7:25:0a:9f:3f:5e:
                    17:ce:28:88:f8:ba:d8:a3:f1:1d:0d:53:c0:89:d7:
                    5e:08:4f:3c:96:50:af:0e:93:1e:73:62:b8:dd:8b:
                    13:40:5c:b9:96:05:24:56:c0:98:a1:dd:09:2d:d1:
                    1b:ba:23:b0:3e:02:61:dc:7b:46:c3:34:3a:36:cd:
                    0d:e9:53:02:73:f9:92:5b:2c:7c:58:30:bb:b7:b4:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EF:B2:93:19:5E:F1:3F:0D:AB:78:D7:1E:36:5F:AF:CD:94:48:A4
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:ba:93:bc:d4:b4:1d:79:6e:3d:4c:af:17:f6:37:ae:2f:
         aa:74:5d:50:e9:ba:e4:09:fa:2d:67:d3:03:ae:c4:4e:db:37:
         b6:b6:b3:a8:61:22:93:c0:fe:3d:4d:8c:96:9d:40:28:ba:2c:
         c2:f6:6b:94:7e:c1:4e:d7:e3:85:ed:ca:d6:f2:5b:a4:7f:9d:
         a6:e0:6d:82:38:04:4b:53:0b:0a:92:55:49:51:0d:67:af:56:
         43:3a:e5:7e:5f:14:38:1f:d4:22:6d:2c:c1:64:44:fc:78:6d:
         c9:73:16:d2:6e:06:b9:98:4a:8a:99:87:d2:71:0f:9c:7a:7f:
         5d:63:ed:04:5e:dc:16:a5:9a:63:ce:e7:b9:4f:30:c2:98:ef:
         7d:6f:f4:4d:ee:ac:28:6c:de:bd:36:ee:b3:af:2e:75:c2:85:
         45:8e:c1:33:ae:d1:82:8d:05:86:dc:23:04:77:95:77:8d:e1:
         a1:0b:99:2c:34:b3:0f:a4:5e:03:1f:a7:43:15:dc:09:6a:03:
         09:40:fe:93:15:4f:ba:b5:bd:53:8a:84:db:8c:b4:34:87:61:
         e2:71:83:e8:1b:8f:25:08:c7:1b:8f:6f:b4:d2:6d:f8:f7:e4:
         28:d5:b7:e4:c4:a6:bb:17:15:c9:15:e0:41:1a:a8:d6:de:85:
         07:d9:75:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGM3XhsCpTmArJcS0Wl9aSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMWM5NTFkNjFiODdkYTE5NDM5Nzg0ZDIzNjY3YTg5Y2Iz
MjkwYTQwHhcNMjYwOTIxMjMwMDU2WhcNMjYwOTIyMjMwMDU2WjAzMTEwLwYDVQQD
Eyg5N2VmYjI5MzE5NWVmMTNmMGRhYjc4ZDcxZTM2NWZhZmNkOTQ0OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MNbcW4W24132wDvH6Kf0OE9klEE
gYkLp12hn66AXSsz00ss0FNxzszqo7gYzpSvnVLODiFRNBAeDcE7Wr8BV5zf4UXn
bvyMqJUHnFs/i18td49EI6YpNgmbWWUcsxE4//aEEtZwCYQXmC4qGiTH+bGbYWzB
yTB8A26DVXYqlfVBDlo0UI4GuEa5RkumMPFlxFq9G1JFxeVTUfVED4WjDbNhh7iS
dLs13xXahsz3JQqfP14XziiI+LrYo/EdDVPAiddeCE88llCvDpMec2K43YsTQFy5
lgUkVsCYod0JLdEbuiOwPgJh3HtGwzQ6Ns0N6VMCc/mSWyx8WDC7t7RIXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfvspMZXvE/Dat41x42X6/NlEikMB8GA1UdIwQY
MBaAFOoclR1huH2hlDl4TSNmeonLMpCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMt
NzI0YjFhMDIxMmQ0LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMtNzI0YjFhMDIxMmQ0
LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUX26k7zU
tB15bj1Mrxf2N64vqnRdUOm65An6LWfTA67ETts3trazqGEik8D+PU2Mlp1AKLos
wvZrlH7BTtfjhe3K1vJbpH+dpuBtgjgES1MLCpJVSVENZ69WQzrlfl8UOB/UIm0s
wWRE/HhtyXMW0m4GuZhKipmH0nEPnHp/XWPtBF7cFqWaY87nuU8wwpjvfW/0Te6s
KGzevTbus68udcKFRY7BM67Rgo0FhtwjBHeVd43hoQuZLDSzD6ReAx+nQxXcCWoD
CUD+kxVPurW9U4qE24y0NIdh4nGD6BuPJQjHG49vtNJt+PfkKNW35MSmuxcVyRXg
QRqo1t6FB9l1mw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:52:32 2026 by rpki-client