Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
File:                     EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft (raw, json)
Hash identifier:          /WZLSBTRr4ugOqPZb1LU01ePMaY+UL6cmvFNY/pnI54=
Subject key identifier:   33:09:E2:DC:95:6E:87:5F:28:23:DD:CA:F9:26:33:8C:03:19:50:43
Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
Certificate issuer:       /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Certificate serial:       01A0C6D7EED357685C59496A08544885D541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
Manifest number:          1A67
Signing time:             Tue 22 Sep 2026 02:00:35 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:35 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:35 +0000
Files and hashes:         1: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl (hash: 9nOSCqEeHe4wisYd89fuTYSo10R2mcjsK2mFUbBN+U4=)
                          2: zpkqiEr6OZxmuI9IUaACDy7tIx8.roa (hash: p3BKr125MAv68ooq8iK1eGRE8YMR/faVc2WdwuZpJ74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d7:ee:d3:57:68:5c:59:49:6a:08:54:48:85:d5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
        Validity
            Not Before: Sep 22 02:00:35 2026 GMT
            Not After : Sep 23 02:00:35 2026 GMT
        Subject: CN=3309e2dc956e875f2823ddcaf926338c03195043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:a7:b9:14:5a:2a:30:1b:9c:aa:a9:86:46:
                    e1:59:23:34:a3:34:d7:3b:c6:90:82:43:c6:ec:d9:
                    bd:70:e8:4c:1b:b0:8f:9d:cd:1a:ed:c7:15:cb:77:
                    7c:13:22:b8:4c:14:46:dc:11:58:03:af:ed:e8:b9:
                    16:17:0e:85:5a:84:90:5f:bc:d1:0f:45:55:b6:11:
                    6d:27:b8:4c:db:78:6e:5b:66:86:04:42:2a:cb:a9:
                    99:da:57:60:86:60:db:35:b2:de:f1:7e:71:a9:4e:
                    32:14:5e:74:d3:3a:1c:c2:fd:f3:1b:09:10:55:95:
                    de:fe:5d:3e:2a:95:16:4a:c4:1e:4f:24:05:47:c9:
                    2b:7c:09:71:de:d2:17:2b:b8:87:34:1a:04:9e:84:
                    2c:b8:03:e9:7b:32:fa:2b:b1:7d:86:21:75:13:83:
                    a0:e1:30:e3:2e:15:3c:e0:4f:9a:59:bb:14:ac:1f:
                    8c:7f:88:79:59:be:37:73:a0:96:59:ba:b4:a5:d9:
                    95:10:a8:76:82:c3:9c:f5:81:d2:81:e7:f0:c8:81:
                    52:e1:01:53:f7:36:f3:33:cd:96:b7:25:55:32:33:
                    66:dc:ac:51:af:3e:84:20:4f:6f:6b:f3:f3:ad:49:
                    73:74:df:61:79:58:05:9b:5c:9e:06:98:3a:e0:33:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:09:E2:DC:95:6E:87:5F:28:23:DD:CA:F9:26:33:8C:03:19:50:43
            X509v3 Authority Key Identifier:
                keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:60:38:ce:12:3c:a9:f7:d3:68:54:14:c2:81:5d:ab:f2:ab:
         a6:93:d9:3a:fb:de:73:cc:20:e3:68:2a:b0:15:8a:fd:d2:29:
         82:49:d9:c5:a0:64:2d:cd:a8:14:dc:db:63:24:58:59:88:59:
         b2:d3:15:e2:c2:56:e4:19:79:52:95:69:cb:cc:40:cb:41:38:
         91:d4:7b:39:f6:c2:68:d1:86:83:d3:80:72:0c:c2:4a:83:13:
         74:e1:ea:10:c8:76:4f:38:55:91:f1:84:3b:dd:eb:7c:cb:9c:
         f0:58:ed:80:cf:11:13:93:a3:0f:95:94:9e:2a:3c:d2:1e:8f:
         e7:8c:93:fc:59:89:b5:27:d4:b9:95:24:0d:aa:c8:eb:ac:eb:
         5a:8b:c0:22:f8:49:00:8e:e6:60:4f:be:1e:72:47:cb:cf:a4:
         7e:86:e4:0b:fb:ec:e4:20:a4:91:0b:ff:2e:8d:32:56:c4:52:
         4c:80:c9:af:f5:9f:46:8c:1a:69:a5:82:1d:f5:5c:2f:98:82:
         83:c6:87:81:1e:18:9f:34:8f:08:a3:54:11:3d:fd:c1:11:0e:
         7a:37:76:5e:03:27:80:e1:2f:1a:59:dc:b3:77:1f:82:34:9b:
         11:47:44:bb:7e:ea:1b:85:fb:5d:9f:cd:d7:8f:43:e8:a1:28:
         13:88:0c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG1+7TV2hcWUlqCFRIhdVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTViYThkNDlhMmRkMWU5MWMzYWFjY2JjZjE0NGYwNDU5
M2YxYjMwHhcNMjYwOTIyMDIwMDM1WhcNMjYwOTIzMDIwMDM1WjAzMTEwLwYDVQQD
EygzMzA5ZTJkYzk1NmU4NzVmMjgyM2RkY2FmOTI2MzM4YzAzMTk1MDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFanuRRaKjAbnKqphkbhWSM0ozTX
O8aQgkPG7Nm9cOhMG7CPnc0a7ccVy3d8EyK4TBRG3BFYA6/t6LkWFw6FWoSQX7zR
D0VVthFtJ7hM23huW2aGBEIqy6mZ2ldghmDbNbLe8X5xqU4yFF500zocwv3zGwkQ
VZXe/l0+KpUWSsQeTyQFR8krfAlx3tIXK7iHNBoEnoQsuAPpezL6K7F9hiF1E4Og
4TDjLhU84E+aWbsUrB+Mf4h5Wb43c6CWWbq0pdmVEKh2gsOc9YHSgefwyIFS4QFT
9zbzM82WtyVVMjNm3KxRrz6EIE9va/PzrUlzdN9heVgFm1yeBpg64DNQ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMJ4tyVbodfKCPdyvkmM4wDGVBDMB8GA1UdIwQY
MBaAFBBVuo1Jot0ekcOqzLzxRPBFk/GzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgt
NGVkYWY3N2EwZTVkLzEvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgtNGVkYWY3N2EwZTVk
LzEvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmA4zhI8
qffTaFQUwoFdq/KrppPZOvvec8wg42gqsBWK/dIpgknZxaBkLc2oFNzbYyRYWYhZ
stMV4sJW5Bl5UpVpy8xAy0E4kdR7OfbCaNGGg9OAcgzCSoMTdOHqEMh2TzhVkfGE
O93rfMuc8FjtgM8RE5OjD5WUnio80h6P54yT/FmJtSfUuZUkDarI66zrWovAIvhJ
AI7mYE++HnJHy8+kfobkC/vs5CCkkQv/Lo0yVsRSTIDJr/WfRowaaaWCHfVcL5iC
g8aHgR4YnzSPCKNUET39wREOejd2XgMngOEvGlncs3cfgjSbEUdEu37qG4X7XZ/N
149D6KEoE4gMeA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:09 2026 by rpki-client