Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File:                     6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier:          cf1JoJMK0zyxyoFEySFr4IwXlysM6B8ezJ8WPgdrsgw=
Subject key identifier:   DA:11:A6:E9:82:D2:0B:35:DC:19:52:2D:DE:3C:0C:96:28:44:35:AC
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer:       /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial:       01A0C6D80BB2057620D13722E3E1D11F2628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number:          119E
Signing time:             Tue 22 Sep 2026 02:00:42 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:42 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:42 +0000
Files and hashes:         1: 202qM1rsE239uIdAcf__Gnv7zdc.roa (hash: ieFIbb9cUztQSqOO5FEKp3hxs3Zx7kO0z2iNcIicraA=)
                          2: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: 95GMPUCn2vKrRPx0XP4mwiLzAQ3Gyoqh7L3TQdKXpRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:0b:b2:05:76:20:d1:37:22:e3:e1:d1:1f:26:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
        Validity
            Not Before: Sep 22 02:00:42 2026 GMT
            Not After : Sep 23 02:00:42 2026 GMT
        Subject: CN=da11a6e982d20b35dc19522dde3c0c96284435ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:65:96:0e:a8:14:ee:1d:a9:4b:ec:75:d8:
                    da:77:83:c5:59:ed:aa:cc:a2:95:ea:91:be:f8:df:
                    5f:e4:2b:08:a1:43:0c:0b:eb:22:e8:c9:fb:77:da:
                    98:3f:74:76:51:ab:39:f3:62:db:25:7f:f1:f3:f0:
                    34:a0:ee:2a:05:61:7b:55:cb:87:5a:60:b8:90:95:
                    3a:48:8a:68:53:f4:fa:01:81:99:2f:93:8e:92:17:
                    b1:ca:5f:ab:0f:fb:f7:32:57:db:04:b4:64:53:c4:
                    19:07:92:b0:f2:0a:d5:bf:4c:a8:93:a6:e5:8b:cc:
                    f2:d1:c2:5f:da:65:09:ba:a5:0d:1d:83:8d:8d:1c:
                    47:25:07:00:35:8a:cf:54:03:74:0a:73:5f:c0:a5:
                    e6:3a:b2:22:10:00:24:76:19:ff:b1:70:64:6f:2d:
                    02:b8:f1:08:5d:e0:c0:66:9f:ad:c7:76:83:0a:ff:
                    b8:ab:90:47:48:fd:3c:f4:b2:4e:6c:65:df:72:25:
                    ff:b6:86:9a:79:d0:b7:3d:8b:c3:26:f2:ac:ef:f3:
                    ad:d9:89:14:8d:58:f7:48:3d:03:8b:88:33:72:f8:
                    e5:db:de:c9:1b:c3:20:a5:f6:cc:22:e4:ac:f9:59:
                    cd:d5:67:f6:9f:c1:70:25:bb:a3:77:05:8f:d9:3e:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:11:A6:E9:82:D2:0B:35:DC:19:52:2D:DE:3C:0C:96:28:44:35:AC
            X509v3 Authority Key Identifier:
                keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:42:b0:84:ec:b1:89:d7:47:f0:c5:4b:46:c3:74:77:7b:7d:
         64:ef:6d:7e:2d:a6:bf:85:4a:88:da:46:f8:82:1a:2d:30:73:
         c0:82:db:e4:52:d7:c1:42:20:76:49:cd:f3:02:56:e2:b8:56:
         1c:9e:50:e9:fa:8b:5c:88:b7:80:15:54:c8:ac:f8:c0:6d:c0:
         0c:0f:1e:79:4d:1a:d8:97:0c:e1:b3:7c:96:fb:d1:c0:67:87:
         2e:a2:e8:51:6e:74:1c:03:78:c6:f7:5b:78:59:01:03:9c:96:
         e5:97:02:2f:14:b7:29:26:43:9b:72:8a:59:3b:2c:4e:72:a2:
         67:2c:50:31:46:7d:92:06:8b:a2:9b:c3:70:a4:5a:85:d0:49:
         64:46:74:2e:49:ed:6e:9b:84:e2:4a:2a:35:cf:80:b7:85:4b:
         e1:2f:b1:49:cf:66:1d:b8:f6:e4:b0:50:99:45:51:af:0c:87:
         d0:91:9d:f6:73:98:ea:0d:76:d8:59:25:21:50:2c:5b:92:10:
         60:6a:bc:5b:7b:c8:40:31:1f:1d:23:d1:67:e2:d3:b1:a4:9a:
         60:21:87:c9:76:ba:d9:0b:0a:3e:8d:3c:26:36:d2:82:81:7c:
         96:0a:2e:30:f6:60:43:40:ff:be:fe:1c:0b:14:12:d7:0d:de:
         2b:51:8a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2AuyBXYg0Tci4+HRHyYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTMyNGM0ZmZmMDcyNDBlZWIxZjAwZTYzZTYzNWY3Y2I5
MDJmOTgwHhcNMjYwOTIyMDIwMDQyWhcNMjYwOTIzMDIwMDQyWjAzMTEwLwYDVQQD
EyhkYTExYTZlOTgyZDIwYjM1ZGMxOTUyMmRkZTNjMGM5NjI4NDQzNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1edllg6oFO4dqUvsddjad4PFWe2q
zKKV6pG++N9f5CsIoUMMC+si6Mn7d9qYP3R2Uas582LbJX/x8/A0oO4qBWF7VcuH
WmC4kJU6SIpoU/T6AYGZL5OOkhexyl+rD/v3MlfbBLRkU8QZB5Kw8grVv0yok6bl
i8zy0cJf2mUJuqUNHYONjRxHJQcANYrPVAN0CnNfwKXmOrIiEAAkdhn/sXBkby0C
uPEIXeDAZp+tx3aDCv+4q5BHSP089LJObGXfciX/toaaedC3PYvDJvKs7/Ot2YkU
jVj3SD0Di4gzcvjl297JG8MgpfbMIuSs+VnN1Wf2n8FwJbujdwWP2T5SeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoRpumC0gs13BlSLd48DJYoRDWsMB8GA1UdIwQY
MBaAFOvjJMT/8HJA7rHwDmPmNffLkC+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAt
OGFmMDVhZTMxOTJjLzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAtOGFmMDVhZTMxOTJj
LzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEKwhOyx
iddH8MVLRsN0d3t9ZO9tfi2mv4VKiNpG+IIaLTBzwILb5FLXwUIgdknN8wJW4rhW
HJ5Q6fqLXIi3gBVUyKz4wG3ADA8eeU0a2JcM4bN8lvvRwGeHLqLoUW50HAN4xvdb
eFkBA5yW5ZcCLxS3KSZDm3KKWTssTnKiZyxQMUZ9kgaLopvDcKRahdBJZEZ0Lknt
bpuE4koqNc+At4VL4S+xSc9mHbj25LBQmUVRrwyH0JGd9nOY6g122FklIVAsW5IQ
YGq8W3vIQDEfHSPRZ+LTsaSaYCGHyXa62QsKPo08JjbSgoF8lgouMPZgQ0D/vv4c
CxQS1w3eK1GK9A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:27:32 2026 by rpki-client