Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
File:                     9vqbUoZNztDV7ON-dDciSyVCJIs.mft (raw, json)
Hash identifier:          atS7kVxik0uHgb7eAvHkt6u40ek6GfUI7zx+yP6PgeI=
Subject key identifier:   0A:7D:B2:ED:41:B0:52:05:AB:EB:72:69:A2:AB:D4:B6:F6:9B:03:11
Authority key identifier: F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
Certificate issuer:       /CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Certificate serial:       01A0CBFDE231FF16DEE15D9AA28EF20BB35A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
Manifest number:          03C5
Signing time:             Wed 23 Sep 2026 02:00:08 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:08 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:08 +0000
Files and hashes:         1: 9vqbUoZNztDV7ON-dDciSyVCJIs.crl (hash: kcRod1Z0pXJUYe2/1087lrp6dt92wQgqJVIqKB8DDHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fd:e2:31:ff:16:de:e1:5d:9a:a2:8e:f2:0b:b3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fa9b52864dced0d5ece37e7437224b2542248b
        Validity
            Not Before: Sep 23 02:00:08 2026 GMT
            Not After : Sep 24 02:00:08 2026 GMT
        Subject: CN=0a7db2ed41b05205abeb7269a2abd4b6f69b0311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e5:c5:be:80:ec:10:6c:a7:a2:99:c3:92:02:
                    7e:7c:f8:7b:9b:43:07:46:6a:df:e4:08:34:81:a6:
                    67:a2:6f:5f:9e:b9:eb:de:ad:f7:b4:d6:4f:66:a4:
                    7f:e9:8c:43:44:34:86:47:5b:5f:6c:f3:ce:1f:50:
                    32:3d:e9:b0:91:b4:97:03:0c:9b:55:74:bd:72:65:
                    ff:58:2e:e4:8a:f8:47:1e:cf:65:8a:53:fa:87:ae:
                    41:cd:ea:85:6b:02:19:0a:86:d5:31:57:92:b8:63:
                    4e:76:87:ed:bb:6a:9f:c9:7e:95:0d:62:1b:55:8f:
                    22:46:72:ff:52:14:24:3c:e2:01:cb:e8:53:7e:d2:
                    52:b2:fe:be:8d:ac:de:d9:3b:8a:d1:f1:8d:5d:e5:
                    d8:e5:98:e1:73:fb:a1:6b:79:8e:3b:d3:64:02:21:
                    1b:66:d2:00:c0:79:51:a9:77:43:81:80:69:d8:8a:
                    49:bc:1c:88:69:cc:99:ee:8e:2e:57:96:cb:fb:bd:
                    c2:d9:e6:79:46:87:bf:84:7f:52:9e:3b:03:c0:3e:
                    ea:5a:8d:90:a3:c6:67:aa:da:ec:e3:ab:a1:47:8f:
                    a1:d0:23:50:a9:c5:4a:00:71:db:54:5b:0f:b0:cc:
                    84:31:ef:34:fc:2f:a9:ea:8d:3a:4d:37:bb:9d:d1:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7D:B2:ED:41:B0:52:05:AB:EB:72:69:A2:AB:D4:B6:F6:9B:03:11
            X509v3 Authority Key Identifier:
                keyid:F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:d7:5d:74:15:24:e6:7b:03:a5:52:a9:50:9e:68:56:5b:
         85:01:e1:89:82:bc:07:b3:ff:2e:a8:d8:87:f3:92:63:30:d6:
         52:07:16:af:0c:ed:d4:d3:21:4a:e5:06:60:bb:9d:aa:cb:8f:
         4b:82:ba:0b:4c:0b:a1:6a:e0:bd:0b:43:18:dc:71:d7:46:bc:
         d1:f9:00:e4:5a:60:69:40:82:cf:73:48:84:c5:7f:5a:8f:24:
         50:c0:26:f8:fe:c8:5c:df:0a:3c:d4:19:53:dc:04:73:5d:b3:
         13:eb:53:0b:63:9b:df:99:a8:7e:b4:6b:2c:7e:7d:55:36:7a:
         e6:c0:a5:5c:02:65:f4:c1:a5:98:f0:46:c7:91:71:44:69:14:
         e4:bf:7d:80:9c:e2:8e:71:80:8d:61:31:a9:13:c0:df:2f:72:
         c6:45:65:4c:ef:82:d9:72:2a:05:d8:1b:5e:bc:86:a4:4c:80:
         b0:20:9b:6b:e7:85:53:f8:c8:00:f2:52:3a:f3:be:b3:e3:f6:
         42:c0:9e:14:73:02:fe:4c:89:f4:a8:d3:ba:64:3d:a2:02:1e:
         0a:14:34:e5:3a:81:dd:5d:ac:d6:7f:b5:50:a5:97:1e:2d:48:
         a5:74:de:41:47:be:21:4c:57:a9:54:48:15:3c:e7:aa:70:28:
         5d:0f:31:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/eIx/xbe4V2aoo7yC7NaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZmE5YjUyODY0ZGNlZDBkNWVjZTM3ZTc0MzcyMjRiMjU0
MjI0OGIwHhcNMjYwOTIzMDIwMDA4WhcNMjYwOTI0MDIwMDA4WjAzMTEwLwYDVQQD
EygwYTdkYjJlZDQxYjA1MjA1YWJlYjcyNjlhMmFiZDRiNmY2OWIwMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OXFvoDsEGynopnDkgJ+fPh7m0MH
Rmrf5Ag0gaZnom9fnrnr3q33tNZPZqR/6YxDRDSGR1tfbPPOH1AyPemwkbSXAwyb
VXS9cmX/WC7kivhHHs9lilP6h65BzeqFawIZCobVMVeSuGNOdoftu2qfyX6VDWIb
VY8iRnL/UhQkPOIBy+hTftJSsv6+jaze2TuK0fGNXeXY5Zjhc/uha3mOO9NkAiEb
ZtIAwHlRqXdDgYBp2IpJvByIacyZ7o4uV5bL+73C2eZ5Roe/hH9SnjsDwD7qWo2Q
o8Znqtrs46uhR4+h0CNQqcVKAHHbVFsPsMyEMe80/C+p6o06TTe7ndHvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp9su1BsFIFq+tyaaKr1Lb2mwMRMB8GA1UdIwQY
MBaAFPb6m1KGTc7Q1ezjfnQ3IkslQiSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZxYlVvWk56dERWN09OLWREY2lTeVZDSklzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80OGQ5ODctNGNhNi00MzIwLTkyZDAt
MDk5YjZiYmYxYTQ1LzEvOXZxYlVvWk56dERWN09OLWREY2lTeVZDSklzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80OGQ5ODctNGNhNi00MzIwLTkyZDAtMDk5YjZiYmYxYTQ1
LzEvOXZxYlVvWk56dERWN09OLWREY2lTeVZDSklzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2bXXXQV
JOZ7A6VSqVCeaFZbhQHhiYK8B7P/LqjYh/OSYzDWUgcWrwzt1NMhSuUGYLudqsuP
S4K6C0wLoWrgvQtDGNxx10a80fkA5FpgaUCCz3NIhMV/Wo8kUMAm+P7IXN8KPNQZ
U9wEc12zE+tTC2Ob35mofrRrLH59VTZ65sClXAJl9MGlmPBGx5FxRGkU5L99gJzi
jnGAjWExqRPA3y9yxkVlTO+C2XIqBdgbXryGpEyAsCCba+eFU/jIAPJSOvO+s+P2
QsCeFHMC/kyJ9KjTumQ9ogIeChQ05TqB3V2s1n+1UKWXHi1IpXTeQUe+IUxXqVRI
FTznqnAoXQ8xlQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:18:59 2026 by rpki-client