Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          MlzcFHEMHep47pjrxL4KZ+BLPZuEO6ymd0jzKIxLPcg=
Subject key identifier:   F1:AC:F5:84:CB:7A:D0:8B:34:05:7C:19:C1:2F:09:9A:BB:FD:45:D5
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       01A0C5579410A9CE1DA85AEEC15D98A4FBCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          1A69
Signing time:             Mon 21 Sep 2026 19:00:45 +0000
Manifest this update:     Mon 21 Sep 2026 19:00:45 +0000
Manifest next update:     Tue 22 Sep 2026 19:00:45 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: GDRgeAKlejUCXlTx45dj9oFJVIjsX4qfAkQaS27uydk=)
                          2: NmgUP7e3LyCZ01solEPz1wLS4js.roa (hash: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:57:94:10:a9:ce:1d:a8:5a:ee:c1:5d:98:a4:fb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Sep 21 19:00:45 2026 GMT
            Not After : Sep 22 19:00:45 2026 GMT
        Subject: CN=f1acf584cb7ad08b34057c19c12f099abbfd45d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:e0:2a:9d:2c:c1:dd:4a:eb:dc:04:14:a5:
                    15:49:fd:26:89:2f:6e:ed:c6:f2:41:66:bc:ad:7f:
                    0b:b3:af:2a:67:c4:cf:1b:2a:d2:35:b1:51:a5:e2:
                    4f:3d:ce:90:94:c3:a0:3c:26:a1:ec:9a:4e:5a:9a:
                    e3:03:cc:92:15:2e:aa:07:82:5b:8d:7a:68:cb:63:
                    b1:a6:cd:84:a9:c7:8c:57:ad:03:4d:97:00:af:bc:
                    8f:9b:63:d6:92:01:9a:9b:9f:1f:06:3b:a9:50:e2:
                    44:db:52:59:f9:de:72:b7:2e:02:1b:4c:14:3b:25:
                    12:a1:6b:91:0c:f9:cb:56:00:68:35:11:5f:4a:e4:
                    f2:0c:cc:2c:0e:4f:8c:d6:bc:2e:0c:e0:7c:42:b0:
                    11:35:7b:d3:60:1f:b4:9f:2b:dc:16:16:ad:8a:21:
                    21:bd:df:56:d6:aa:69:69:48:a4:6b:e4:01:2e:25:
                    2b:df:e1:7b:d8:70:89:e3:fe:5c:44:7c:c0:86:7a:
                    11:1b:3e:ff:ca:2b:fb:77:ed:32:1e:28:a1:69:b8:
                    58:fa:59:a9:5a:6d:2f:30:14:9a:a2:c3:4a:b3:f9:
                    85:23:c0:62:cc:d4:33:0e:9b:5b:4a:bc:c9:fe:42:
                    20:bd:71:bc:18:44:69:ad:a0:56:fc:a6:c9:39:bd:
                    b2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AC:F5:84:CB:7A:D0:8B:34:05:7C:19:C1:2F:09:9A:BB:FD:45:D5
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0d:ab:24:33:56:f1:15:3e:f1:e0:a3:06:5c:78:65:57:a4:
         49:96:c5:5e:84:73:f4:a6:c3:87:20:3e:0b:ee:0f:63:ba:50:
         8f:bd:97:9c:d1:91:1b:88:7a:85:ed:ac:ae:0d:7c:e0:ee:64:
         b2:64:b8:01:82:0f:71:82:f8:42:49:46:8c:9c:5a:16:33:03:
         20:c5:28:83:24:be:ab:3e:e1:59:30:aa:af:f0:98:d4:1b:ec:
         64:c9:bf:a2:6a:c6:42:0e:32:f4:3d:4a:b0:e0:0f:ff:00:9a:
         42:c6:5a:23:e5:86:07:03:ce:08:ef:a5:96:7c:75:05:86:83:
         53:0b:98:e4:cd:e6:3e:f2:01:c3:e2:97:63:8e:70:17:f7:64:
         39:09:35:1f:5c:1e:c3:30:90:a1:f2:74:a1:3f:ec:b3:6f:15:
         53:27:9d:cc:95:75:5d:e8:49:05:7a:7c:4e:0f:45:a0:4e:5a:
         25:4f:8a:32:12:70:29:d6:3e:36:4e:9b:c3:93:69:d9:65:aa:
         26:41:43:2d:f3:36:07:90:f1:23:78:94:b3:23:9d:fd:2c:7a:
         c4:a9:38:a4:a8:2c:30:e9:cf:db:11:a8:e8:19:90:9c:91:dc:
         81:14:8c:16:8b:6b:a4:99:c4:64:4c:45:5b:08:19:6c:b3:e3:
         7b:ad:56:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV5QQqc4dqFruwV2YpPvMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWRjMDBmZDJjMWUzZWFhZmNlY2NjMWI0YmExZjhmZDBh
NGE5OGMwHhcNMjYwOTIxMTkwMDQ1WhcNMjYwOTIyMTkwMDQ1WjAzMTEwLwYDVQQD
EyhmMWFjZjU4NGNiN2FkMDhiMzQwNTdjMTljMTJmMDk5YWJiZmQ0NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTrgKp0swd1K69wEFKUVSf0miS9u
7cbyQWa8rX8Ls68qZ8TPGyrSNbFRpeJPPc6QlMOgPCah7JpOWprjA8ySFS6qB4Jb
jXpoy2Oxps2EqceMV60DTZcAr7yPm2PWkgGam58fBjupUOJE21JZ+d5yty4CG0wU
OyUSoWuRDPnLVgBoNRFfSuTyDMwsDk+M1rwuDOB8QrARNXvTYB+0nyvcFhatiiEh
vd9W1qppaUika+QBLiUr3+F72HCJ4/5cRHzAhnoRGz7/yiv7d+0yHiihabhY+lmp
Wm0vMBSaosNKs/mFI8BizNQzDptbSrzJ/kIgvXG8GERpraBW/KbJOb2yFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGs9YTLetCLNAV8GcEvCZq7/UXVMB8GA1UdIwQY
MBaAFOsdwA/SwePqr87MwbS6H4/QpKmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgt
OTBlMjFkZjAxZTkxLzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgtOTBlMjFkZjAxZTkx
LzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQ2rJDNW
8RU+8eCjBlx4ZVekSZbFXoRz9KbDhyA+C+4PY7pQj72XnNGRG4h6he2srg184O5k
smS4AYIPcYL4QklGjJxaFjMDIMUogyS+qz7hWTCqr/CY1BvsZMm/omrGQg4y9D1K
sOAP/wCaQsZaI+WGBwPOCO+llnx1BYaDUwuY5M3mPvIBw+KXY45wF/dkOQk1H1we
wzCQofJ0oT/ss28VUyedzJV1XehJBXp8Tg9FoE5aJU+KMhJwKdY+Nk6bw5Np2WWq
JkFDLfM2B5DxI3iUsyOd/Sx6xKk4pKgsMOnP2xGo6BmQnJHcgRSMFotrpJnEZExF
WwgZbLPje61WqA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:49:35 2026 by rpki-client