Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File:                     Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier:          pQfxZDuIeC6f11/PsiL0IFZ7CVWdXwBd535O4Pty5XQ=
Subject key identifier:   7E:6A:AF:FD:4B:1F:C2:92:5E:7D:D7:3C:8B:46:BD:16:AA:0B:EE:E1
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer:       /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial:       01A0E43E3D8E219B1832C23DA15E0130636B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number:          1A76
Signing time:             Sun 27 Sep 2026 19:01:19 +0000
Manifest this update:     Sun 27 Sep 2026 19:01:19 +0000
Manifest next update:     Mon 28 Sep 2026 19:01:19 +0000
Files and hashes:         1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: RJ/PLmUGsjrJnDN5qNuMqrWv0U16kSCCpFo/ua9PZ2U=)
                          2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:3e:3d:8e:21:9b:18:32:c2:3d:a1:5e:01:30:63:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
        Validity
            Not Before: Sep 27 19:01:19 2026 GMT
            Not After : Sep 28 19:01:19 2026 GMT
        Subject: CN=7e6aaffd4b1fc2925e7dd73c8b46bd16aa0beee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:70:74:61:d0:ef:85:fb:3f:18:0e:5c:a1:
                    bb:e9:14:a4:d7:f0:ad:23:a8:3d:2c:1a:b2:65:b2:
                    74:18:1f:2c:4f:07:1f:54:60:6e:64:85:67:31:3f:
                    f9:82:7d:73:37:02:be:b4:e7:05:f8:f4:cc:32:40:
                    a7:b9:ba:d3:13:ba:d2:5a:d4:f8:f8:6d:83:13:dc:
                    23:56:7e:d0:8d:45:ea:40:93:68:ab:ae:cd:a8:05:
                    f3:c5:3a:44:06:14:cb:ad:28:c3:02:1f:29:32:5b:
                    d9:fc:da:e4:c7:ae:a5:0e:37:42:0f:9c:77:4c:4e:
                    93:b8:f7:f0:8f:86:fd:01:10:82:e2:f1:43:fe:68:
                    6a:3f:2f:43:cb:e1:2f:1e:f2:86:e4:68:c2:7d:08:
                    c0:9d:53:64:5b:46:2d:77:41:c7:1c:42:a8:1c:3f:
                    c4:c5:f6:9b:f4:5d:f2:cd:c7:e7:cb:e4:95:8d:64:
                    84:5e:8c:fd:ac:50:ab:fa:d7:a8:63:f8:da:d2:2e:
                    fe:a0:b3:df:da:c3:e8:a8:09:b6:09:88:03:5b:4e:
                    cc:25:d4:68:b6:e2:20:74:1d:f4:a0:e2:ce:26:a7:
                    88:47:2b:bf:22:78:66:a3:31:4e:47:ed:9a:64:cb:
                    0e:40:3d:03:44:a4:4b:b1:5b:b3:0c:f0:f8:2f:83:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:AF:FD:4B:1F:C2:92:5E:7D:D7:3C:8B:46:BD:16:AA:0B:EE:E1
            X509v3 Authority Key Identifier:
                keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a1:38:dc:db:64:a3:bc:e3:96:83:79:44:b6:09:be:03:89:
         c0:7f:11:a1:be:cc:f9:1a:8b:1f:2b:d7:96:b6:3a:cd:31:a7:
         5c:cb:e3:ea:87:87:12:0f:95:35:7b:eb:f6:a7:7a:a0:4b:18:
         0f:06:ee:ce:a8:bf:3d:b2:8a:f6:9e:65:8f:0a:42:cc:bd:da:
         1e:14:a4:3c:f8:18:c2:96:02:44:44:21:77:d0:5d:9a:a7:18:
         6e:93:3a:d8:91:71:61:ea:9d:52:11:89:e9:d0:87:89:c2:5b:
         40:22:bd:81:5a:74:de:88:fa:5b:c7:6f:22:7c:3c:bf:ad:17:
         6c:5a:59:e0:75:2d:85:aa:6e:5c:54:2f:99:c2:e6:9a:a4:b4:
         02:c1:cd:44:ae:81:19:1b:d7:88:79:d5:ec:ee:95:f9:1c:e9:
         da:49:90:48:3b:56:74:03:a9:ad:0b:17:3d:65:e8:57:55:20:
         5f:89:b0:75:7f:3e:83:38:64:fb:ff:7a:65:ca:db:90:b1:96:
         92:65:3b:6a:d4:c4:f8:ca:68:17:44:58:64:d6:8d:47:91:e0:
         dc:ad:c3:28:82:72:95:47:70:a5:67:7d:5e:83:d5:28:a4:0b:
         32:33:dd:ff:a2:7c:c9:b4:2c:34:0a:e5:c8:94:ad:31:74:c2:
         5e:62:87:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkPj2OIZsYMsI9oV4BMGNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk
ODhmZTMwHhcNMjYwOTI3MTkwMTE5WhcNMjYwOTI4MTkwMTE5WjAzMTEwLwYDVQQD
Eyg3ZTZhYWZmZDRiMWZjMjkyNWU3ZGQ3M2M4YjQ2YmQxNmFhMGJlZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYtwdGHQ74X7PxgOXKG76RSk1/Ct
I6g9LBqyZbJ0GB8sTwcfVGBuZIVnMT/5gn1zNwK+tOcF+PTMMkCnubrTE7rSWtT4
+G2DE9wjVn7QjUXqQJNoq67NqAXzxTpEBhTLrSjDAh8pMlvZ/Nrkx66lDjdCD5x3
TE6TuPfwj4b9ARCC4vFD/mhqPy9Dy+EvHvKG5GjCfQjAnVNkW0Ytd0HHHEKoHD/E
xfab9F3yzcfny+SVjWSEXoz9rFCr+teoY/ja0i7+oLPf2sPoqAm2CYgDW07MJdRo
tuIgdB30oOLOJqeIRyu/InhmozFOR+2aZMsOQD0DRKRLsVuzDPD4L4OwtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5qr/1LH8KSXn3XPItGvRaqC+7hMB8GA1UdIwQY
MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt
NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj
LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqE43Ntk
o7zjloN5RLYJvgOJwH8Rob7M+RqLHyvXlrY6zTGnXMvj6oeHEg+VNXvr9qd6oEsY
Dwbuzqi/PbKK9p5ljwpCzL3aHhSkPPgYwpYCREQhd9BdmqcYbpM62JFxYeqdUhGJ
6dCHicJbQCK9gVp03oj6W8dvInw8v60XbFpZ4HUthapuXFQvmcLmmqS0AsHNRK6B
GRvXiHnV7O6V+Rzp2kmQSDtWdAOprQsXPWXoV1UgX4mwdX8+gzhk+/96ZcrbkLGW
kmU7atTE+MpoF0RYZNaNR5Hg3K3DKIJylUdwpWd9XoPVKKQLMjPd/6J8ybQsNArl
yJStMXTCXmKHTA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:47:40 2026 by rpki-client