Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File:                     9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier:          3k8XKrRq4C40CmR5PPkc0E0GILQyTThHUJNVp7FDpvM=
Subject key identifier:   D4:C8:05:4F:0D:C7:30:53:31:BA:2B:5F:47:2C:DC:D6:33:A3:D5:B4
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer:       /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial:       01A0D4CB2CE6807E08BCAA7FC16A93C5E510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number:          0F8B
Signing time:             Thu 24 Sep 2026 19:01:20 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:20 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:20 +0000
Files and hashes:         1: 5FdT73JkLCgHgzugWWXpOCrhVgc.roa (hash: oluoiDxtzFoApZrsUB2VZK/Twzibw5WYce0WItyA/mY=)
                          2: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: pZHq0A0M1339+xL7WZHBdT99q2XKU0rxdqCY3Ylp7bY=)
                          3: gFVBldPsPJ9_Z3436EbOexrFKyQ.roa (hash: XpNUD5CKdNtgQ6f8YKYlS0lGIc67007/Bg5jHv80Qgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:2c:e6:80:7e:08:bc:aa:7f:c1:6a:93:c5:e5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
        Validity
            Not Before: Sep 24 19:01:20 2026 GMT
            Not After : Sep 25 19:01:20 2026 GMT
        Subject: CN=d4c8054f0dc7305331ba2b5f472cdcd633a3d5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1b:14:ba:3a:54:6c:f6:49:fa:24:9b:33:43:
                    45:93:25:25:ca:82:54:92:14:12:de:f3:0a:a7:e4:
                    26:cf:34:59:9e:7f:dd:76:cb:42:08:ce:8c:02:7c:
                    3f:a4:d9:0d:6b:70:c6:d1:6e:4c:2d:5f:91:47:7e:
                    da:f6:d3:33:21:de:13:ba:2b:d2:c1:40:e6:d4:d7:
                    1b:e0:35:90:a4:22:9f:91:1a:66:42:fb:e8:8b:85:
                    35:6a:18:50:e8:11:ad:47:d2:ce:2a:3f:74:21:d0:
                    d9:18:df:43:41:ad:44:45:82:e0:93:b2:5f:3b:09:
                    95:06:0f:dd:84:03:de:84:09:b3:63:97:33:9a:74:
                    61:d6:d2:92:d8:83:36:35:f6:06:1a:b3:49:f3:1b:
                    e7:3f:af:09:22:39:f6:ab:2c:aa:46:79:6b:89:47:
                    e5:97:65:9f:d6:81:3c:47:f7:d5:78:32:df:7c:b8:
                    54:70:03:ae:41:4e:f7:33:38:b8:19:84:10:1d:19:
                    92:19:8f:72:7a:c1:e0:cd:3e:7a:84:3b:42:5d:bd:
                    43:60:0a:a8:68:6a:13:cc:5b:a2:c1:06:9b:e0:84:
                    6d:1a:52:17:f3:6a:23:78:69:6c:85:65:d9:dc:4a:
                    0c:4a:35:bf:11:e7:b8:13:98:46:ab:01:ba:c6:a4:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C8:05:4F:0D:C7:30:53:31:BA:2B:5F:47:2C:DC:D6:33:A3:D5:B4
            X509v3 Authority Key Identifier:
                keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:09:7f:58:46:2e:96:bd:35:6c:ae:17:2b:21:21:d5:93:9f:
         cd:4e:b3:ed:2d:9a:10:0f:4a:ad:04:35:4a:bd:9a:bd:dc:63:
         67:9a:e2:77:5c:f3:18:6d:7e:4d:cb:07:8d:fb:0f:c1:2e:cf:
         b5:5d:5e:8b:10:9f:2a:ac:64:a1:53:95:3b:14:b0:60:d8:a9:
         02:76:a9:32:f5:02:39:90:8e:0a:0b:eb:a8:73:ca:ad:c0:e9:
         e5:e0:8a:80:5a:1b:6b:a8:c0:a1:04:d4:d7:0d:49:f5:4a:3c:
         0a:00:34:5b:a0:3c:42:96:d6:91:ce:b3:87:23:f3:8f:56:ab:
         af:fb:72:ff:bd:16:12:e1:93:62:8f:a5:1a:c6:91:3a:e0:43:
         fa:19:b4:ce:d7:3f:d9:1a:cd:c6:f3:87:d0:8c:fe:8b:8c:b8:
         b1:f3:74:e2:ed:71:9b:26:f9:84:a5:56:bc:9e:ee:58:5e:9b:
         e9:f9:fd:a3:a3:77:21:ae:4e:b9:fa:7f:9f:b2:91:f5:a6:7e:
         e3:b1:f2:d6:04:aa:74:38:81:71:d8:4f:d8:50:19:35:b3:07:
         ae:43:8e:f3:34:5f:00:9c:8c:29:a2:f7:70:4f:c0:d7:f9:2d:
         49:3e:69:8a:4d:f7:e6:2c:fd:35:2e:e9:d4:f6:00:53:72:8a:
         4e:85:a4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUyyzmgH4IvKp/wWqTxeUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjRjYmE1MjFjMDgwZGI3MmE2ZTU0YTFiOGNmNDQ5NWNi
YmM3ZDYwHhcNMjYwOTI0MTkwMTIwWhcNMjYwOTI1MTkwMTIwWjAzMTEwLwYDVQQD
EyhkNGM4MDU0ZjBkYzczMDUzMzFiYTJiNWY0NzJjZGNkNjMzYTNkNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hsUujpUbPZJ+iSbM0NFkyUlyoJU
khQS3vMKp+QmzzRZnn/ddstCCM6MAnw/pNkNa3DG0W5MLV+RR37a9tMzId4TuivS
wUDm1Ncb4DWQpCKfkRpmQvvoi4U1ahhQ6BGtR9LOKj90IdDZGN9DQa1ERYLgk7Jf
OwmVBg/dhAPehAmzY5czmnRh1tKS2IM2NfYGGrNJ8xvnP68JIjn2qyyqRnlriUfl
l2Wf1oE8R/fVeDLffLhUcAOuQU73Mzi4GYQQHRmSGY9yesHgzT56hDtCXb1DYAqo
aGoTzFuiwQab4IRtGlIX82ojeGlshWXZ3EoMSjW/Eee4E5hGqwG6xqTRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTIBU8NxzBTMborX0cs3NYzo9W0MB8GA1UdIwQY
MBaAFPcky6UhwIDbcqblShuM9Elcu8fWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAt
MTAzYjIwNmJhMjhiLzEvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAtMTAzYjIwNmJhMjhi
LzEvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQl/WEYu
lr01bK4XKyEh1ZOfzU6z7S2aEA9KrQQ1Sr2avdxjZ5rid1zzGG1+TcsHjfsPwS7P
tV1eixCfKqxkoVOVOxSwYNipAnapMvUCOZCOCgvrqHPKrcDp5eCKgFoba6jAoQTU
1w1J9Uo8CgA0W6A8QpbWkc6zhyPzj1arr/ty/70WEuGTYo+lGsaROuBD+hm0ztc/
2RrNxvOH0Iz+i4y4sfN04u1xmyb5hKVWvJ7uWF6b6fn9o6N3Ia5Oufp/n7KR9aZ+
47Hy1gSqdDiBcdhP2FAZNbMHrkOO8zRfAJyMKaL3cE/A1/ktST5pik335iz9NS7p
1PYAU3KKToWkXg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:46:48 2026 by rpki-client