Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File:                     4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier:          4+fIL4sSe6JhNduMa4tOPrieYmwSAAJ2nS5+Ex4dlJE=
Subject key identifier:   73:A5:EB:53:72:F7:77:1A:67:FB:52:3A:7C:F9:24:E5:8D:08:92:12
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer:       /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial:       01A11B62B6C0BB1053053904DF4155ECB1A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number:          06ED
Signing time:             Thu 08 Oct 2026 12:00:16 +0000
Manifest this update:     Thu 08 Oct 2026 12:00:16 +0000
Manifest next update:     Fri 09 Oct 2026 12:00:16 +0000
Files and hashes:         1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: uIn19Ug2ZWUUo9P5jaiuQdMB768JC4RD6AE6McIkhT4=)
                          2: O4YiRIWBlabnpHM7xKFcaOrOaKI.roa (hash: ayodsdmBoAdUSEjYUyXeYrwcQDz8Nad0uAG3lrZysIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:62:b6:c0:bb:10:53:05:39:04:df:41:55:ec:b1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
        Validity
            Not Before: Oct  8 12:00:16 2026 GMT
            Not After : Oct  9 12:00:16 2026 GMT
        Subject: CN=73a5eb5372f7771a67fb523a7cf924e58d089212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:17:5d:af:0a:20:f9:6e:9b:6c:4f:90:40:
                    56:e7:db:e2:e7:a3:07:31:22:5f:34:75:88:30:b6:
                    f9:2d:08:54:94:7b:12:5c:7d:4a:4f:3b:67:d1:63:
                    3e:e2:f9:2d:2a:06:34:41:39:bd:9a:11:bb:fa:8e:
                    97:f3:c1:17:b0:e4:db:69:92:13:4e:d1:54:ed:7c:
                    6e:ef:dd:4a:46:53:0d:11:f9:3c:73:f7:28:07:cf:
                    f8:d9:dc:72:82:5b:b1:a7:4d:d7:f3:d4:d8:d4:87:
                    19:89:18:26:27:2e:03:06:a2:4d:50:a1:1a:ae:55:
                    db:d4:f3:b3:b8:bf:57:cc:65:82:7d:1d:f7:a4:2d:
                    6d:f5:9d:57:93:6a:4f:93:f0:a5:ab:db:19:67:f8:
                    8b:ff:1c:db:1d:64:1c:0b:6d:a6:d9:72:1e:cf:fc:
                    5a:d2:61:ef:c0:45:ef:d3:4f:b8:1a:00:8b:bc:63:
                    72:51:f1:9b:45:3d:3e:a4:65:b4:f0:10:09:e1:7f:
                    40:47:69:51:0f:4f:f2:87:37:d8:59:26:86:64:7e:
                    77:a6:18:69:9c:d7:5a:a4:8c:d6:34:85:0a:bf:ea:
                    b5:c1:ae:f1:75:0d:97:db:5b:da:ff:d1:81:2e:32:
                    3a:34:19:6f:f5:8f:8a:28:3b:b3:d6:de:a0:8e:f6:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:EB:53:72:F7:77:1A:67:FB:52:3A:7C:F9:24:E5:8D:08:92:12
            X509v3 Authority Key Identifier:
                keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:df:97:7c:f7:95:b0:c8:67:89:45:87:42:e0:79:2c:3c:93:
         51:c4:29:3c:d1:8d:26:bb:3d:c9:89:80:f2:2b:26:1b:e6:60:
         23:c1:15:9f:51:43:ee:00:21:aa:20:36:7d:e9:a8:04:24:d5:
         52:82:ef:2e:f1:09:76:d8:72:a9:48:21:2f:4b:09:04:96:9a:
         18:72:6f:b5:24:9b:59:e7:c0:02:5f:20:7d:cb:05:3e:76:86:
         0c:ff:9b:e8:89:23:9f:45:f6:44:bd:e1:a3:45:40:a1:a0:71:
         e3:82:c3:d9:b4:bc:07:56:43:b5:02:7a:58:63:dd:f7:bb:be:
         dc:5b:cc:29:d8:b1:92:13:82:d6:df:76:d7:1d:00:76:c0:d1:
         94:69:4c:1e:24:06:97:12:5a:96:17:1b:47:1e:27:16:9f:0a:
         fc:a9:99:91:e3:4a:b0:2d:84:d0:af:4b:48:22:c6:6d:87:30:
         de:68:a0:f6:f7:54:45:8e:74:f8:96:88:7f:c0:40:65:52:a9:
         23:94:4e:54:a2:31:aa:03:c0:f8:57:33:0d:1b:5d:12:2e:ac:
         f8:d9:f7:58:f8:fe:6d:a4:ba:e5:b9:c0:3d:02:97:1b:8a:eb:
         dd:19:6d:6f:be:5f:95:7d:44:a2:77:e3:71:33:4d:ca:2a:db:
         72:0b:d7:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbYrbAuxBTBTkE30FV7LGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTdhZjczYzA3YTU3ODJhZjI0ODM0ZWJkZGI3NGE5Yzg5
N2M0ZmYwHhcNMjYxMDA4MTIwMDE2WhcNMjYxMDA5MTIwMDE2WjAzMTEwLwYDVQQD
Eyg3M2E1ZWI1MzcyZjc3NzFhNjdmYjUyM2E3Y2Y5MjRlNThkMDg5MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcUXXa8KIPlum2xPkEBW59vi56MH
MSJfNHWIMLb5LQhUlHsSXH1KTztn0WM+4vktKgY0QTm9mhG7+o6X88EXsOTbaZIT
TtFU7Xxu791KRlMNEfk8c/coB8/42dxygluxp03X89TY1IcZiRgmJy4DBqJNUKEa
rlXb1POzuL9XzGWCfR33pC1t9Z1Xk2pPk/Clq9sZZ/iL/xzbHWQcC22m2XIez/xa
0mHvwEXv00+4GgCLvGNyUfGbRT0+pGW08BAJ4X9AR2lRD0/yhzfYWSaGZH53phhp
nNdapIzWNIUKv+q1wa7xdQ2X21va/9GBLjI6NBlv9Y+KKDuz1t6gjvYW/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOl61Ny93caZ/tSOnz5JOWNCJISMB8GA1UdIwQY
MBaAFOLnr3PAeleCrySDTr3bdKnIl8T/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDkt
MDk4ODZjMGM0NmEwLzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDktMDk4ODZjMGM0NmEw
LzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlN+XfPeV
sMhniUWHQuB5LDyTUcQpPNGNJrs9yYmA8ismG+ZgI8EVn1FD7gAhqiA2femoBCTV
UoLvLvEJdthyqUghL0sJBJaaGHJvtSSbWefAAl8gfcsFPnaGDP+b6Ikjn0X2RL3h
o0VAoaBx44LD2bS8B1ZDtQJ6WGPd97u+3FvMKdixkhOC1t921x0AdsDRlGlMHiQG
lxJalhcbRx4nFp8K/KmZkeNKsC2E0K9LSCLGbYcw3mig9vdURY50+JaIf8BAZVKp
I5ROVKIxqgPA+FczDRtdEi6s+Nn3WPj+baS65bnAPQKXG4rr3Rltb75flX1Eonfj
cTNNyirbcgvXyw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:28:25 2026 by rpki-client