Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
File:                     1CBnFtuSM_7qn465ct6JErxbg_U.mft (raw, json)
Hash identifier:          pJIJ0FMfnjtSyMkJHrnVRjNYdELzqwQr5MT0DvwwR+Y=
Subject key identifier:   6D:EF:7C:A5:90:57:5A:30:CC:E6:95:C1:8D:12:9D:20:81:D2:42:20
Authority key identifier: D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5
Certificate issuer:       /CN=d4206716db9233feea9f8eb972de8912bc5b83f5
Certificate serial:       01A0E0CF5DFE33052FEC9B3EDCCC37D86F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
Manifest number:          F1
Signing time:             Sun 27 Sep 2026 03:01:21 +0000
Manifest this update:     Sun 27 Sep 2026 03:01:21 +0000
Manifest next update:     Mon 28 Sep 2026 03:01:21 +0000
Files and hashes:         1: 1CBnFtuSM_7qn465ct6JErxbg_U.crl (hash: 8xW5HyRLnu6rXizz/oHA7WYaIUZGuoYZlaZaRZSgSDQ=)
                          2: E3b8U4MK9zLHSw0vVgZu65brCFM.roa (hash: boy8Q47zYskY8Da4ltEfvmVWaHLuWoM/3t70bBBpqRE=)
                          3: YfghBe7VMTFqE-kLeVs1Wdg80Qg.roa (hash: 5DBPLxm9csP2rBiY+V/zbPysPEH1rb2P5PzVpV2usmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:cf:5d:fe:33:05:2f:ec:9b:3e:dc:cc:37:d8:6f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4206716db9233feea9f8eb972de8912bc5b83f5
        Validity
            Not Before: Sep 27 03:01:21 2026 GMT
            Not After : Sep 28 03:01:21 2026 GMT
        Subject: CN=6def7ca590575a30cce695c18d129d2081d24220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:c0:84:7b:f4:0e:67:5a:bd:bc:c5:3b:9a:
                    1a:cd:e5:cf:38:3c:1b:4b:dd:78:5d:12:48:80:5b:
                    6a:6b:81:8b:f0:a3:51:7b:3f:ca:be:69:3a:44:ec:
                    e9:39:46:97:0a:79:fd:89:45:6d:9d:97:89:e7:00:
                    bd:47:a2:5d:8e:62:b2:c2:ea:3a:59:1c:90:2e:38:
                    b9:9a:3e:4a:96:7e:8c:f3:bf:82:20:31:1f:b6:95:
                    db:ed:e9:08:22:b0:e0:93:72:b4:e3:70:9a:89:94:
                    45:bd:d7:ba:70:cf:0b:55:e6:38:3e:8c:20:cc:ca:
                    47:7d:f6:88:bc:5f:21:62:e7:19:7a:02:59:06:5b:
                    f4:1b:70:9c:a9:c9:7e:02:cf:70:d9:96:af:0d:f6:
                    54:d2:32:73:9f:63:c0:23:ae:0f:5d:ab:ad:f8:a4:
                    5c:d8:5e:89:db:9e:06:2c:f2:f2:c6:b4:a3:3d:d3:
                    90:4a:8f:61:ba:9a:53:ca:ee:5b:b2:17:bb:c4:f9:
                    9c:dd:6f:23:26:43:c4:9d:0e:2e:67:ac:3f:64:d5:
                    87:b3:a8:47:a9:f9:4b:ae:fa:90:e5:71:eb:82:63:
                    27:5f:6f:bb:1f:93:74:fa:9f:18:90:f6:96:8b:40:
                    a6:82:04:30:50:0c:38:60:4d:8d:b7:46:18:6b:a1:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EF:7C:A5:90:57:5A:30:CC:E6:95:C1:8D:12:9D:20:81:D2:42:20
            X509v3 Authority Key Identifier:
                keyid:D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:82:8d:79:eb:02:5d:9a:b7:91:0d:58:b4:2b:5c:73:89:b1:
         54:b3:cb:83:bc:a4:b0:05:be:1c:b8:82:e7:41:76:57:54:2c:
         ef:cc:6f:92:7e:6d:ba:a5:4b:60:c8:ef:50:40:2d:68:ab:1d:
         7d:40:43:01:c1:f3:d0:cc:3d:ef:78:49:13:72:b9:cf:0e:ba:
         cc:d0:45:99:c6:9d:5b:23:9e:14:2b:67:36:e5:7f:6a:4b:53:
         a8:ff:28:94:cf:bd:fb:28:45:53:95:f2:a2:22:34:fd:b0:c3:
         ff:ec:73:e1:81:44:eb:81:35:26:00:46:53:2e:eb:20:13:04:
         84:c1:78:06:f5:14:08:04:8b:39:a6:34:3a:7e:68:af:f3:2d:
         d1:14:6f:6a:da:e5:ed:49:58:73:23:5c:10:7e:d7:0f:c7:bf:
         28:8a:60:77:20:f0:02:f7:74:57:1f:d9:95:db:a9:c5:2c:0b:
         9a:e9:2e:20:1c:18:8d:5b:d0:21:00:aa:9d:6b:cf:b3:57:05:
         1c:dd:e7:6a:ec:e7:62:94:d7:db:ff:26:63:34:4a:03:5f:0a:
         d8:9b:0d:08:66:ae:c1:b6:21:60:89:d5:aa:19:cd:75:70:9e:
         e6:1a:5b:28:a5:e2:df:75:62:1d:bb:a5:99:d7:10:f8:dc:0f:
         50:dd:ee:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgz13+MwUv7Js+3Mw32G9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MjA2NzE2ZGI5MjMzZmVlYTlmOGViOTcyZGU4OTEyYmM1
YjgzZjUwHhcNMjYwOTI3MDMwMTIxWhcNMjYwOTI4MDMwMTIxWjAzMTEwLwYDVQQD
Eyg2ZGVmN2NhNTkwNTc1YTMwY2NlNjk1YzE4ZDEyOWQyMDgxZDI0MjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO/AhHv0DmdavbzFO5oazeXPODwb
S914XRJIgFtqa4GL8KNRez/Kvmk6ROzpOUaXCnn9iUVtnZeJ5wC9R6JdjmKywuo6
WRyQLji5mj5Kln6M87+CIDEftpXb7ekIIrDgk3K043CaiZRFvde6cM8LVeY4Powg
zMpHffaIvF8hYucZegJZBlv0G3Ccqcl+As9w2ZavDfZU0jJzn2PAI64PXaut+KRc
2F6J254GLPLyxrSjPdOQSo9huppTyu5bshe7xPmc3W8jJkPEnQ4uZ6w/ZNWHs6hH
qflLrvqQ5XHrgmMnX2+7H5N0+p8YkPaWi0CmggQwUAw4YE2Nt0YYa6GqiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3vfKWQV1owzOaVwY0SnSCB0kIgMB8GA1UdIwQY
MBaAFNQgZxbbkjP+6p+OuXLeiRK8W4P1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNCbkZ0dVNNXzdxbjQ2NWN0NkpFcnhiZ19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lZjk2YTAtMzA1Ny00Mjc5LWIyM2Mt
N2I1MGRkZWFlYzdmLzEvMUNCbkZ0dVNNXzdxbjQ2NWN0NkpFcnhiZ19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9lZjk2YTAtMzA1Ny00Mjc5LWIyM2MtN2I1MGRkZWFlYzdm
LzEvMUNCbkZ0dVNNXzdxbjQ2NWN0NkpFcnhiZ19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuoKNeesC
XZq3kQ1YtCtcc4mxVLPLg7yksAW+HLiC50F2V1Qs78xvkn5tuqVLYMjvUEAtaKsd
fUBDAcHz0Mw973hJE3K5zw66zNBFmcadWyOeFCtnNuV/aktTqP8olM+9+yhFU5Xy
oiI0/bDD/+xz4YFE64E1JgBGUy7rIBMEhMF4BvUUCASLOaY0On5or/Mt0RRvatrl
7UlYcyNcEH7XD8e/KIpgdyDwAvd0Vx/ZldupxSwLmukuIBwYjVvQIQCqnWvPs1cF
HN3nauznYpTX2/8mYzRKA18K2JsNCGauwbYhYInVqhnNdXCe5hpbKKXi33ViHbul
mdcQ+NwPUN3uNw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:42:38 2026 by rpki-client