Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          wqTA+uKxdcgtynqJUsh7x7P+vnte3B3nCQWCNFCciAA=
Subject key identifier:   F2:70:C9:19:EC:60:FF:99:F8:A6:75:60:82:48:7B:9A:51:00:2F:1F
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       01A0C3D7042BF5D029735BCF434A7D78C36F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          19F7
Signing time:             Mon 21 Sep 2026 12:00:43 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:43 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:43 +0000
Files and hashes:         1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
                          2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: dCTWKL+B4hE2I2e9wgo4QqQeLuOBGz/fW8vYN/hnklo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d7:04:2b:f5:d0:29:73:5b:cf:43:4a:7d:78:c3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: Sep 21 12:00:43 2026 GMT
            Not After : Sep 22 12:00:43 2026 GMT
        Subject: CN=f270c919ec60ff99f8a6756082487b9a51002f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:6b:42:21:13:4d:25:5a:d2:b7:c5:a3:78:
                    f6:01:1b:da:45:96:9c:c0:d5:4a:82:24:43:5b:80:
                    fc:24:e8:94:65:a9:59:ff:e2:8e:ec:8f:e2:be:da:
                    25:dd:76:9a:a8:b1:f1:72:00:c7:60:d5:9b:1c:ae:
                    01:4b:9a:ff:00:1b:3d:40:2e:94:15:cd:a5:93:dd:
                    b2:33:14:ed:5f:bb:89:38:ca:42:fc:f2:56:54:33:
                    16:ca:cf:27:b8:e4:1d:d3:cb:5c:05:8b:cb:73:ea:
                    f5:5a:f4:85:f6:65:f3:bd:92:ab:6a:61:13:eb:94:
                    66:0c:7a:8b:eb:2b:e4:b8:6a:08:94:5e:fc:9e:8a:
                    4c:8c:89:0c:dc:61:ce:fa:fb:23:24:b8:c3:c2:22:
                    7d:4c:8b:87:df:dd:51:96:c5:d9:d7:af:c0:fc:65:
                    99:e3:be:4f:8a:1d:bd:82:13:dc:e5:7b:3c:e1:12:
                    a5:39:9e:b9:66:64:98:d9:62:11:21:7e:34:58:e5:
                    47:8a:12:33:91:d2:ee:1a:94:78:13:79:5d:41:bf:
                    fa:7f:22:e6:7c:49:76:aa:7b:b1:80:1c:70:c8:aa:
                    b8:53:d2:67:ff:91:be:e7:e6:63:28:c7:8b:25:3c:
                    2b:8c:e6:cc:da:0b:8b:d2:18:88:77:00:73:69:97:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:70:C9:19:EC:60:FF:99:F8:A6:75:60:82:48:7B:9A:51:00:2F:1F
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:46:1a:6b:db:fe:4a:bb:e5:de:8e:d1:e4:0f:a3:1c:c5:
         72:a8:da:6f:43:dd:61:c0:9b:36:c7:68:e7:66:c1:e4:f2:e5:
         4b:5f:10:ec:4f:44:59:6b:1d:17:d1:72:44:d8:78:8f:68:f4:
         65:60:d6:ea:dc:b8:67:b9:43:64:d9:58:b5:fe:88:3c:58:8e:
         df:50:97:b8:fb:d3:27:32:75:ad:7f:89:a7:b8:7d:3b:30:72:
         10:4b:1c:7c:5f:a3:02:83:c2:85:f7:66:0d:3a:28:dc:fc:db:
         5b:d6:b6:67:27:d1:5e:9b:c7:c9:56:cc:db:2f:5c:2b:d3:42:
         c1:69:16:64:40:20:13:4d:7f:83:59:6c:a3:fc:f5:ee:52:d1:
         c9:01:fe:34:98:0c:92:6e:ce:a4:9e:df:66:a8:a3:25:71:8a:
         19:a8:53:87:ad:ba:88:09:ab:e2:8c:8d:08:01:5b:79:4e:30:
         91:bf:5e:32:a4:2c:8a:58:9e:26:06:63:c8:41:47:5d:00:ad:
         27:56:87:b6:d5:9f:17:89:10:ef:39:d9:63:70:03:e0:35:ab:
         71:1b:c0:af:9b:a3:76:46:79:02:8c:e3:9b:b5:69:19:c1:78:
         dd:78:eb:b9:1d:3c:76:0e:fa:04:35:62:b0:56:db:a0:cc:3a:
         db:52:23:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1wQr9dApc1vPQ0p9eMNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmM0ZWE3OWRkYjdiMDAzZGUwMWYxZDA1ZjZkYmY3MTZi
MTEzMzYwHhcNMjYwOTIxMTIwMDQzWhcNMjYwOTIyMTIwMDQzWjAzMTEwLwYDVQQD
EyhmMjcwYzkxOWVjNjBmZjk5ZjhhNjc1NjA4MjQ4N2I5YTUxMDAyZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+JrQiETTSVa0rfFo3j2ARvaRZac
wNVKgiRDW4D8JOiUZalZ/+KO7I/ivtol3XaaqLHxcgDHYNWbHK4BS5r/ABs9QC6U
Fc2lk92yMxTtX7uJOMpC/PJWVDMWys8nuOQd08tcBYvLc+r1WvSF9mXzvZKramET
65RmDHqL6yvkuGoIlF78nopMjIkM3GHO+vsjJLjDwiJ9TIuH391RlsXZ16/A/GWZ
475Pih29ghPc5Xs84RKlOZ65ZmSY2WIRIX40WOVHihIzkdLuGpR4E3ldQb/6fyLm
fEl2qnuxgBxwyKq4U9Jn/5G+5+ZjKMeLJTwrjObM2guL0hiIdwBzaZcMawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJwyRnsYP+Z+KZ1YIJIe5pRAC8fMB8GA1UdIwQY
MBaAFOosTqed23sAPeAfHQX22/cWsRM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMt
MzlmMTNlNzZhZmEzLzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMtMzlmMTNlNzZhZmEz
LzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgP1GGmvb
/kq75d6O0eQPoxzFcqjab0PdYcCbNsdo52bB5PLlS18Q7E9EWWsdF9FyRNh4j2j0
ZWDW6ty4Z7lDZNlYtf6IPFiO31CXuPvTJzJ1rX+Jp7h9OzByEEscfF+jAoPChfdm
DToo3PzbW9a2ZyfRXpvHyVbM2y9cK9NCwWkWZEAgE01/g1lso/z17lLRyQH+NJgM
km7OpJ7fZqijJXGKGahTh626iAmr4oyNCAFbeU4wkb9eMqQsilieJgZjyEFHXQCt
J1aHttWfF4kQ7znZY3AD4DWrcRvAr5ujdkZ5Aozjm7VpGcF43XjruR08dg76BDVi
sFbboMw621IjJA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:43:42 2026 by rpki-client