Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File:                     8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier:          +pB46BBrADsmJeBydQWRipRazVJj8KkXKHobvMRmP5k=
Subject key identifier:   96:94:25:98:40:AC:0E:6C:BF:E6:70:7A:AB:4C:0A:26:13:FB:1C:DF
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer:       /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial:       01A0D426465CE09A2034D03292E35C11BFED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 16:01:13 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:13 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:13 +0000
Files and hashes:         1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: 5twAvXQnq3evWAJJSBZQuNL0uEpcHMcRimhk1rVkhh4=)
                          2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:46:5c:e0:9a:20:34:d0:32:92:e3:5c:11:bf:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
        Validity
            Not Before: Sep 24 16:01:13 2026 GMT
            Not After : Sep 25 16:01:13 2026 GMT
        Subject: CN=9694259840ac0e6cbfe6707aab4c0a2613fb1cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:27:f2:3a:22:ec:22:7d:76:ae:1e:bd:6c:
                    f1:fe:9e:ae:7a:d8:2f:50:11:8e:39:5a:3c:23:f3:
                    18:a9:99:dc:98:9d:46:60:b5:e8:44:0a:aa:32:cb:
                    a0:d8:02:6d:b3:ad:4e:de:1c:29:bf:32:90:01:21:
                    a0:17:a6:e0:54:08:20:e7:cb:36:27:8a:f7:2f:f8:
                    13:91:34:44:df:ae:19:20:0a:e7:3d:8e:b1:d4:35:
                    c8:00:6c:f5:c9:0f:df:8e:45:aa:91:9f:73:85:6a:
                    33:e5:66:a2:fd:c0:21:de:34:8d:ab:78:d9:31:b0:
                    b7:0f:ae:fa:22:04:38:84:2e:81:0c:c5:8c:02:86:
                    f9:90:0c:c0:6f:ab:f3:bc:46:d5:8f:b8:ee:f9:b2:
                    d7:ab:3a:35:23:c2:ae:3f:af:bc:c8:10:96:4b:02:
                    eb:26:1e:39:cb:39:05:dd:c1:27:de:d8:a1:ef:5e:
                    e4:29:56:82:e5:1c:4a:e9:fe:75:9d:57:be:32:71:
                    d0:9a:93:d6:15:05:a5:39:c5:33:4e:04:0c:77:de:
                    5a:0c:03:b9:66:2b:5d:e9:e2:2e:ad:cd:52:dd:ec:
                    94:3e:0b:f7:c9:15:3f:60:18:10:4b:2a:a7:a8:07:
                    aa:8e:7f:01:40:fc:35:b0:60:b4:f0:a7:2b:a4:6c:
                    aa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:25:98:40:AC:0E:6C:BF:E6:70:7A:AB:4C:0A:26:13:FB:1C:DF
            X509v3 Authority Key Identifier:
                keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:53:0b:40:f5:a4:19:67:fb:16:36:c1:bf:02:5b:b4:e3:68:
         2d:ea:a1:87:6a:58:7c:6e:07:1d:02:fb:fb:d7:98:7c:9a:74:
         c8:ea:05:0c:3d:d6:71:ff:6d:87:c5:2a:ab:3c:ca:c1:8a:5d:
         a3:e7:dd:0f:d3:ee:6c:a7:13:47:9d:e1:9c:3c:df:f6:cb:28:
         a8:d5:6e:de:2f:98:3a:f7:df:6f:5a:91:7e:7f:94:9b:f7:d2:
         05:cb:06:32:3f:04:d8:7a:e9:4c:ab:25:91:9f:ef:25:1f:b9:
         a6:63:c4:78:98:a2:74:7e:75:95:fd:f0:e1:c5:07:05:bc:58:
         e5:1f:01:13:f3:0d:47:87:20:d8:9e:60:6a:24:82:f2:b3:95:
         f6:15:17:4d:07:9e:7e:c6:d0:05:2b:9b:68:83:3e:54:d6:85:
         8b:96:cc:f8:86:06:4e:c9:42:17:22:23:af:ce:1f:91:ef:92:
         e6:63:23:76:6e:da:cd:0c:57:dc:65:68:2a:ad:b3:a6:07:ee:
         5c:0c:d4:d3:89:b9:83:11:bc:f5:a4:37:cb:e3:67:63:9c:de:
         d8:62:8d:c1:84:d4:16:4b:c1:ad:ae:9f:88:38:3e:d3:f0:b6:
         e1:a9:a0:05:c3:a0:0c:a0:ae:88:69:a3:9b:cb:76:89:9f:28:
         6f:95:2c:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJkZc4JogNNAykuNcEb/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODA1M2VhN2YzYWI3OWE3NWU4Zjg3NTM4Njc3NTU1MWVm
NzU3MzkwHhcNMjYwOTI0MTYwMTEzWhcNMjYwOTI1MTYwMTEzWjAzMTEwLwYDVQQD
Eyg5Njk0MjU5ODQwYWMwZTZjYmZlNjcwN2FhYjRjMGEyNjEzZmIxY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKAn8joi7CJ9dq4evWzx/p6uetgv
UBGOOVo8I/MYqZncmJ1GYLXoRAqqMsug2AJts61O3hwpvzKQASGgF6bgVAgg58s2
J4r3L/gTkTRE364ZIArnPY6x1DXIAGz1yQ/fjkWqkZ9zhWoz5Wai/cAh3jSNq3jZ
MbC3D676IgQ4hC6BDMWMAob5kAzAb6vzvEbVj7ju+bLXqzo1I8KuP6+8yBCWSwLr
Jh45yzkF3cEn3tih717kKVaC5RxK6f51nVe+MnHQmpPWFQWlOcUzTgQMd95aDAO5
Zitd6eIurc1S3eyUPgv3yRU/YBgQSyqnqAeqjn8BQPw1sGC08KcrpGyqMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaUJZhArA5sv+ZweqtMCiYT+xzfMB8GA1UdIwQY
MBaAFPGAU+p/Oreadej4dThndVUe91c5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEt
NzQ3Y2VkMGI3NDg2LzEvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEtNzQ3Y2VkMGI3NDg2
LzEvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlMLQPWk
GWf7FjbBvwJbtONoLeqhh2pYfG4HHQL7+9eYfJp0yOoFDD3Wcf9th8UqqzzKwYpd
o+fdD9PubKcTR53hnDzf9ssoqNVu3i+YOvffb1qRfn+Um/fSBcsGMj8E2HrpTKsl
kZ/vJR+5pmPEeJiidH51lf3w4cUHBbxY5R8BE/MNR4cg2J5gaiSC8rOV9hUXTQee
fsbQBSubaIM+VNaFi5bM+IYGTslCFyIjr84fke+S5mMjdm7azQxX3GVoKq2zpgfu
XAzU04m5gxG89aQ3y+NnY5ze2GKNwYTUFkvBra6fiDg+0/C24amgBcOgDKCuiGmj
m8t2iZ8ob5Usqg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:24:22 2026 by rpki-client