Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File:                     6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier:          w7kyuxCb5UyLt2u15oq3RUH24vXcZsZyQA1+qsGARwI=
Subject key identifier:   0A:11:C3:D7:B4:89:2B:B9:1A:7B:D8:FF:F9:BA:D3:0D:1D:4B:14:F0
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer:       /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial:       01A125B05D744FA3BA983705B76146693D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number:          0DEF
Signing time:             Sat 10 Oct 2026 12:01:17 +0000
Manifest this update:     Sat 10 Oct 2026 12:01:17 +0000
Manifest next update:     Sun 11 Oct 2026 12:01:17 +0000
Files and hashes:         1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: bHKLz3vpBc1VUU5QuVjV0XajHMMOZnrpkfv7SYIunc0=)
                          2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
                          3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:b0:5d:74:4f:a3:ba:98:37:05:b7:61:46:69:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
        Validity
            Not Before: Oct 10 12:01:17 2026 GMT
            Not After : Oct 11 12:01:17 2026 GMT
        Subject: CN=0a11c3d7b4892bb91a7bd8fff9bad30d1d4b14f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:38:d7:a4:87:da:c1:a5:3f:83:28:35:40:
                    7d:aa:74:ee:c3:01:09:6c:3d:ad:c1:e5:3e:81:b5:
                    f3:0d:aa:64:42:90:91:40:2d:05:36:62:14:a6:5b:
                    29:7b:7e:6d:8b:12:76:fa:1c:70:28:ce:63:11:ea:
                    fe:98:02:d0:13:4e:1e:e2:29:15:6b:ea:e5:5e:47:
                    b7:13:2e:12:7a:54:ae:66:58:9a:29:95:2e:5b:49:
                    dd:c0:63:dc:6e:b0:0e:5f:c0:49:f3:37:82:2f:7b:
                    83:6c:31:e2:f3:0e:fd:51:71:06:ab:8f:88:fc:14:
                    c8:be:b0:34:21:b9:65:d7:37:e3:53:de:7d:76:6d:
                    79:a8:6d:57:72:4c:49:fa:a9:dc:87:64:2a:1b:b3:
                    2d:99:20:53:8d:b2:fb:0e:75:b3:e7:c6:cd:55:65:
                    45:1a:3a:fd:8f:e2:21:86:7b:71:3f:f0:bd:6d:2f:
                    06:5b:b6:f6:fb:e7:59:47:23:63:dd:66:0c:06:e6:
                    21:22:79:c5:91:2e:95:3e:02:58:51:f0:e3:ae:50:
                    6d:49:f2:08:7f:f5:6e:82:22:4c:18:44:5d:25:fa:
                    41:13:62:6c:55:95:49:9c:5e:47:9d:8f:19:98:17:
                    53:5b:4b:b2:ae:3e:7d:7a:0c:6f:d1:9d:58:9c:96:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:11:C3:D7:B4:89:2B:B9:1A:7B:D8:FF:F9:BA:D3:0D:1D:4B:14:F0
            X509v3 Authority Key Identifier:
                keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:56:00:93:62:fb:9c:81:83:6d:af:4e:f8:7f:6f:4f:2f:76:
         08:fa:d5:9b:eb:1e:5b:d9:06:6e:2a:14:fd:43:88:cb:24:af:
         a1:03:e6:3f:6f:2a:c0:2a:c6:2c:3c:ad:a2:e1:d3:9b:34:e2:
         f1:2d:9a:0d:91:d6:54:f0:3c:ca:b2:39:d7:f5:60:f1:97:b6:
         1b:c3:10:0a:52:2c:df:17:a3:a7:3e:be:21:5b:2c:72:e3:d8:
         8f:b4:ec:4c:51:a8:f3:65:97:6a:95:87:6e:e8:47:b3:c3:5d:
         65:64:24:7b:a0:42:18:f8:e7:fe:f1:0e:83:11:8a:27:14:9b:
         d5:8a:92:6e:9b:8e:56:7c:1b:6d:99:ce:b1:69:d8:32:ec:ff:
         47:90:b0:b2:91:80:f8:00:71:f2:b7:be:6c:9d:73:dc:32:d4:
         41:e0:ab:4e:86:5a:95:ad:2d:e5:d0:9e:60:7b:78:92:58:c1:
         a5:bb:04:71:13:7c:3d:aa:dd:e6:68:ca:81:d6:8d:ad:d1:48:
         f0:ff:68:f1:bb:02:6f:47:f8:16:73:10:d8:47:33:f6:3b:87:
         ab:47:92:db:50:94:6f:f6:df:2a:70:2c:f9:4f:9d:17:b9:61:
         36:e7:3c:c9:7b:28:d3:64:b5:2b:af:4a:0d:df:75:d5:f1:9a:
         71:e4:8f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElsF10T6O6mDcFt2FGaT1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTQwNWVlOGY1ZDhlNzY0ZTkwYmQ2NmJkZDFlODlhYzEy
ODA5ZTgwHhcNMjYxMDEwMTIwMTE3WhcNMjYxMDExMTIwMTE3WjAzMTEwLwYDVQQD
EygwYTExYzNkN2I0ODkyYmI5MWE3YmQ4ZmZmOWJhZDMwZDFkNGIxNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A0416SH2sGlP4MoNUB9qnTuwwEJ
bD2tweU+gbXzDapkQpCRQC0FNmIUplspe35tixJ2+hxwKM5jEer+mALQE04e4ikV
a+rlXke3Ey4SelSuZliaKZUuW0ndwGPcbrAOX8BJ8zeCL3uDbDHi8w79UXEGq4+I
/BTIvrA0Ibll1zfjU959dm15qG1XckxJ+qnch2QqG7MtmSBTjbL7DnWz58bNVWVF
Gjr9j+IhhntxP/C9bS8GW7b2++dZRyNj3WYMBuYhInnFkS6VPgJYUfDjrlBtSfII
f/VugiJMGERdJfpBE2JsVZVJnF5HnY8ZmBdTW0uyrj59egxv0Z1YnJYYkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoRw9e0iSu5GnvY//m60w0dSxTwMB8GA1UdIwQY
MBaAFOmUBe6PXY52TpC9Zr3R6JrBKAnoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEt
ZWIxMWI0OTU0ZjMzLzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEtZWIxMWI0OTU0ZjMz
LzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFYAk2L7
nIGDba9O+H9vTy92CPrVm+seW9kGbioU/UOIyySvoQPmP28qwCrGLDytouHTmzTi
8S2aDZHWVPA8yrI51/Vg8Ze2G8MQClIs3xejpz6+IVsscuPYj7TsTFGo82WXapWH
buhHs8NdZWQke6BCGPjn/vEOgxGKJxSb1YqSbpuOVnwbbZnOsWnYMuz/R5CwspGA
+ABx8re+bJ1z3DLUQeCrToZala0t5dCeYHt4kljBpbsEcRN8Pard5mjKgdaNrdFI
8P9o8bsCb0f4FnMQ2Ecz9juHq0eS21CUb/bfKnAs+U+dF7lhNuc8yXso02S1K69K
Dd911fGaceSP/Q==
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:05:30 2026 by rpki-client