Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          g7GCFlIvDUD9TEJ+YeWCddWuOQCB1rPoDFWhoTT5T8A=
Subject key identifier:   2F:24:17:9C:A9:A5:B2:BA:5F:99:AF:E0:C4:DA:6A:0A:9E:8B:18:7B
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01A0D45E155E2839BABB8CDC4B282F1D3DDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          1862
Signing time:             Thu 24 Sep 2026 17:02:10 +0000
Manifest this update:     Thu 24 Sep 2026 17:02:10 +0000
Manifest next update:     Fri 25 Sep 2026 17:02:10 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: nqDMTrF7unn5JgBUyH3GKIFM9UDvOn7wF4D2MU2Q+NI=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5e:15:5e:28:39:ba:bb:8c:dc:4b:28:2f:1d:3d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Sep 24 17:02:10 2026 GMT
            Not After : Sep 25 17:02:10 2026 GMT
        Subject: CN=2f24179ca9a5b2ba5f99afe0c4da6a0a9e8b187b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:26:4f:53:11:8a:07:48:67:a8:d9:63:18:
                    65:67:7a:f6:c3:98:38:39:24:b9:a7:d6:16:fb:63:
                    fc:68:54:0f:2b:d6:4a:70:e6:b8:16:d9:93:15:13:
                    b1:41:32:0c:85:1c:7a:0b:86:20:11:b0:26:fb:81:
                    3a:0c:38:35:07:ec:e5:d8:8c:1f:4d:91:4c:05:40:
                    bb:4c:2f:68:0b:d4:ff:38:f9:53:ad:63:8a:f4:f8:
                    49:bb:60:41:35:41:06:53:8f:6f:93:8b:24:a1:99:
                    3a:f1:70:95:35:f3:37:b5:e7:8c:1c:4f:0c:03:89:
                    94:b3:07:2e:64:ff:d4:ac:27:cb:27:5f:3e:fa:67:
                    e7:c2:b1:5a:7b:fd:42:5f:21:c7:61:bb:23:3f:a5:
                    95:97:25:c9:34:a4:f5:3e:88:87:c2:6c:5b:0c:f1:
                    8d:6c:7d:57:15:04:aa:67:11:d2:1c:6d:28:e6:61:
                    57:61:e8:e1:93:6f:33:e5:ae:4c:42:5b:d6:b5:17:
                    a1:2c:f9:41:ba:d0:5b:93:ae:bf:8f:be:37:61:3c:
                    b4:c3:5f:dd:b5:7b:14:e2:60:2e:32:1f:cc:06:a4:
                    6a:61:10:46:91:3a:ae:d8:38:eb:91:bf:98:0f:b0:
                    fd:61:57:b8:72:78:58:cb:77:a5:76:e6:ee:4b:87:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:17:9C:A9:A5:B2:BA:5F:99:AF:E0:C4:DA:6A:0A:9E:8B:18:7B
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:fe:7a:01:93:56:fb:74:95:af:a3:d4:b7:e8:88:24:7b:
         5a:7b:9b:ce:27:56:d9:18:39:69:fc:67:3e:4d:e4:d6:a6:b5:
         d6:12:05:70:fd:7b:cf:c7:ca:8f:5c:7c:d7:96:ba:94:0f:c6:
         46:d0:cd:16:8f:da:3a:cf:25:d3:2a:38:1d:28:99:32:3b:95:
         d4:50:28:dd:45:31:91:3b:19:cd:8f:99:e4:a2:23:f4:a8:a2:
         21:5c:c1:ff:5f:44:93:bb:5d:77:97:82:d9:d9:c6:71:62:0d:
         ed:14:8e:88:1e:f6:62:dd:31:0a:80:62:02:3d:e6:78:d8:70:
         91:c3:d9:13:a5:f2:58:e5:7e:30:1e:07:37:e7:c4:9c:8b:6d:
         bf:78:f7:00:76:12:f2:b8:ac:c7:62:ed:d7:0b:31:2c:34:fe:
         b8:4f:2b:38:82:97:49:71:65:51:dd:d3:6a:34:c0:8d:32:75:
         e5:c1:5c:d6:bb:b4:c9:75:36:0a:d2:54:04:7b:0b:0b:05:cf:
         04:22:0d:a4:41:64:be:0e:1a:e8:5f:f6:82:1b:82:91:67:de:
         16:1a:07:c4:5c:4d:c6:20:68:49:e7:98:ad:e1:f0:92:71:6f:
         27:3a:e1:6a:ca:f0:2a:fb:69:a8:b7:eb:56:c0:7e:23:b0:c1:
         bc:f2:97:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXhVeKDm6u4zcSygvHT3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjYwOTI0MTcwMjEwWhcNMjYwOTI1MTcwMjEwWjAzMTEwLwYDVQQD
EygyZjI0MTc5Y2E5YTViMmJhNWY5OWFmZTBjNGRhNmEwYTllOGIxODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3cmT1MRigdIZ6jZYxhlZ3r2w5g4
OSS5p9YW+2P8aFQPK9ZKcOa4FtmTFROxQTIMhRx6C4YgEbAm+4E6DDg1B+zl2Iwf
TZFMBUC7TC9oC9T/OPlTrWOK9PhJu2BBNUEGU49vk4skoZk68XCVNfM3teeMHE8M
A4mUswcuZP/UrCfLJ18++mfnwrFae/1CXyHHYbsjP6WVlyXJNKT1PoiHwmxbDPGN
bH1XFQSqZxHSHG0o5mFXYejhk28z5a5MQlvWtRehLPlButBbk66/j743YTy0w1/d
tXsU4mAuMh/MBqRqYRBGkTqu2Djrkb+YD7D9YVe4cnhYy3eldubuS4cjowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8kF5yppbK6X5mv4MTaagqeixh7MB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXH3+egGT
Vvt0la+j1LfoiCR7WnubzidW2Rg5afxnPk3k1qa11hIFcP17z8fKj1x815a6lA/G
RtDNFo/aOs8l0yo4HSiZMjuV1FAo3UUxkTsZzY+Z5KIj9KiiIVzB/19Ek7tdd5eC
2dnGcWIN7RSOiB72Yt0xCoBiAj3meNhwkcPZE6XyWOV+MB4HN+fEnIttv3j3AHYS
8risx2Lt1wsxLDT+uE8rOIKXSXFlUd3TajTAjTJ15cFc1ru0yXU2CtJUBHsLCwXP
BCINpEFkvg4a6F/2ghuCkWfeFhoHxFxNxiBoSeeYreHwknFvJzrhasrwKvtpqLfr
VsB+I7DBvPKXBQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:29:48 2026 by rpki-client