Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File:                     bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier:          uCiSPMO41If8TXevI9lRetzwejJ/S/buiMRJ8oSF7jI=
Subject key identifier:   75:91:94:EE:07:34:8A:85:93:B2:EA:8B:98:15:4D:BF:EA:60:E5:C8
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer:       /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial:       01A0C368AB2ED495A32B0147F0CA904DDE1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number:          1A6A
Signing time:             Mon 21 Sep 2026 10:00:11 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:11 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:11 +0000
Files and hashes:         1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: 0+phP7P+wdr5rWHuihCOjxBkeOwS7pfzYkAKiFH8U+A=)
                          2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:68:ab:2e:d4:95:a3:2b:01:47:f0:ca:90:4d:de:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
        Validity
            Not Before: Sep 21 10:00:11 2026 GMT
            Not After : Sep 22 10:00:11 2026 GMT
        Subject: CN=759194ee07348a8593b2ea8b98154dbfea60e5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:86:f2:e9:fb:01:42:72:b6:45:90:45:a7:
                    d9:91:c5:bb:bf:4c:1e:55:67:d1:1f:6b:99:3b:c4:
                    25:a0:73:52:31:47:f8:ec:d9:93:ed:19:fc:83:d0:
                    ee:c9:fb:b6:71:03:8f:97:b4:18:a8:3c:8e:76:c1:
                    73:34:61:1e:f1:39:bc:af:47:8c:01:6a:a2:99:ea:
                    72:28:57:07:d1:9c:d8:71:a2:ee:2c:76:aa:28:bd:
                    e7:6a:5a:e7:32:ba:a6:84:5f:b4:47:80:0a:1e:e6:
                    47:89:f5:a1:8a:a1:7c:f6:fa:22:49:e8:f6:4e:3a:
                    33:03:2d:32:1a:0d:03:e0:87:3d:89:4c:b1:42:6e:
                    e1:a4:e9:f4:7c:1e:83:e5:8e:97:fd:aa:48:0c:8d:
                    de:67:c3:c4:d3:9e:ee:ed:a1:c5:c0:90:ef:41:e7:
                    90:cd:db:e2:6e:31:4d:88:49:88:a4:e4:b1:34:aa:
                    09:3d:52:84:8f:c5:f0:95:36:45:62:37:e2:7b:c8:
                    1e:b3:99:9f:57:e0:e3:85:f1:0d:88:08:4d:d2:fc:
                    e9:9d:8d:33:ab:85:dc:f3:ff:a4:b9:07:32:e5:f5:
                    8e:bf:3f:78:fd:7c:e1:17:5c:d1:1b:dc:5f:6b:09:
                    a1:d8:46:49:be:15:dd:65:a8:0f:46:c5:c8:8d:56:
                    22:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:91:94:EE:07:34:8A:85:93:B2:EA:8B:98:15:4D:BF:EA:60:E5:C8
            X509v3 Authority Key Identifier:
                keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:5f:b6:cb:98:18:2b:dc:8b:b9:c1:f4:cd:53:68:ee:d3:
         f1:f1:83:35:1d:9f:19:e2:90:e4:63:68:17:b3:38:70:da:9f:
         f7:ea:b8:29:d7:cb:a8:7f:38:f2:11:43:9f:45:db:25:dc:99:
         eb:c2:0e:3c:50:70:09:7b:26:c5:d8:76:18:a1:de:6a:ef:8e:
         a1:51:9c:4d:ac:6d:4e:c0:ae:b2:6e:c1:96:95:3c:bc:ab:55:
         f8:d6:04:db:71:ca:8a:3e:47:47:57:ef:0f:d1:3c:00:30:88:
         a5:26:46:54:fc:1a:ef:ee:1d:29:cc:4e:c5:33:5c:7a:3c:a8:
         0b:c8:04:f1:1f:fe:4b:dd:53:eb:9a:b5:f1:7c:4c:6c:f2:12:
         c8:99:ff:a6:c3:b1:c4:57:89:e9:29:62:c1:0d:45:26:86:27:
         e3:22:44:e0:89:31:16:b9:86:4f:31:df:d7:34:7e:67:06:23:
         7a:6c:85:aa:37:a2:17:0e:df:df:c9:3a:87:83:5e:55:dd:fb:
         ab:7e:d8:8f:fe:9a:1b:ce:53:7d:d4:1e:7f:ff:2e:cd:aa:7d:
         cd:77:77:3a:58:38:eb:98:f2:73:3e:cd:05:99:40:b0:36:e2:
         b9:59:78:37:7f:00:62:06:d7:27:cd:7a:3a:a3:02:df:d2:ea:
         40:8b:17:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaKsu1JWjKwFH8MqQTd4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTUwYjQzOGNjNjhmNjJkYzE1ZDM1OTU5MzE2MWY3OTlk
ZTUzYWYwHhcNMjYwOTIxMTAwMDExWhcNMjYwOTIyMTAwMDExWjAzMTEwLwYDVQQD
Eyg3NTkxOTRlZTA3MzQ4YTg1OTNiMmVhOGI5ODE1NGRiZmVhNjBlNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZmG8un7AUJytkWQRafZkcW7v0we
VWfRH2uZO8QloHNSMUf47NmT7Rn8g9Duyfu2cQOPl7QYqDyOdsFzNGEe8Tm8r0eM
AWqimepyKFcH0ZzYcaLuLHaqKL3nalrnMrqmhF+0R4AKHuZHifWhiqF89voiSej2
TjozAy0yGg0D4Ic9iUyxQm7hpOn0fB6D5Y6X/apIDI3eZ8PE057u7aHFwJDvQeeQ
zdvibjFNiEmIpOSxNKoJPVKEj8XwlTZFYjfie8ges5mfV+DjhfENiAhN0vzpnY0z
q4Xc8/+kuQcy5fWOvz94/XzhF1zRG9xfawmh2EZJvhXdZagPRsXIjVYiAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWRlO4HNIqFk7Lqi5gVTb/qYOXIMB8GA1UdIwQY
MBaAFG0VC0OMxo9i3BXTWVkxYfeZ3lOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQt
MWIzZDk4YmVmMWU5LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQtMWIzZDk4YmVmMWU5
LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfBftsuY
GCvci7nB9M1TaO7T8fGDNR2fGeKQ5GNoF7M4cNqf9+q4KdfLqH848hFDn0XbJdyZ
68IOPFBwCXsmxdh2GKHeau+OoVGcTaxtTsCusm7BlpU8vKtV+NYE23HKij5HR1fv
D9E8ADCIpSZGVPwa7+4dKcxOxTNcejyoC8gE8R/+S91T65q18XxMbPISyJn/psOx
xFeJ6SliwQ1FJoYn4yJE4IkxFrmGTzHf1zR+ZwYjemyFqjeiFw7f38k6h4NeVd37
q37Yj/6aG85TfdQef/8uzap9zXd3Olg465jycz7NBZlAsDbiuVl4N38AYgbXJ816
OqMC39LqQIsXyA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:16:32 2026 by rpki-client