Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          yBvqX4/LqGiLXCE1b/tQaImI7sZqlgFIuStVkfYHVe0=
Subject key identifier:   B9:E0:A7:1D:C7:86:D2:F5:3C:95:E9:5C:02:FC:8A:EF:C5:D4:1D:36
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       01A0DC17A11AF9AA653335B9843B3E58156D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          0EE8
Signing time:             Sat 26 Sep 2026 05:02:11 +0000
Manifest this update:     Sat 26 Sep 2026 05:02:11 +0000
Manifest next update:     Sun 27 Sep 2026 05:02:11 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: g7UnQLLdo7CXwgI7qKfHWnsdNGUaye6cJInKtFqqZpY=)
                          2: jPp4Av3P5IVYrkqxOGqhOqwt480.roa (hash: cRa8LYV5Wo5t1Qa11CdMWIS8CjSo634/LpDIUbcvW3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:a1:1a:f9:aa:65:33:35:b9:84:3b:3e:58:15:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: Sep 26 05:02:11 2026 GMT
            Not After : Sep 27 05:02:11 2026 GMT
        Subject: CN=b9e0a71dc786d2f53c95e95c02fc8aefc5d41d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:82:8e:82:e2:7f:c0:b1:56:c8:f0:74:cc:
                    ce:16:a7:b1:05:55:a7:e0:dc:d8:91:46:3a:a3:fa:
                    4e:3f:84:45:72:e6:e3:a3:75:7e:0d:e0:f0:d0:cc:
                    76:67:b7:39:fa:e2:b5:25:32:ec:47:a1:a8:81:21:
                    06:02:08:ce:87:d9:11:c9:91:ca:c7:c2:08:29:f0:
                    f0:52:57:f6:93:45:5b:ee:ef:e8:f2:07:10:0a:de:
                    0e:dc:36:fc:4d:5d:4b:9a:74:f1:95:ff:58:29:ad:
                    a4:c4:71:a7:97:14:06:60:10:fb:4e:5a:23:32:36:
                    f4:80:77:cc:92:76:c5:d8:da:eb:f3:4b:7f:2a:73:
                    54:60:77:9a:85:e0:11:1e:3f:25:52:d4:7c:15:c0:
                    93:86:5d:7c:bb:c3:6e:a1:8d:fa:af:ba:49:2f:b0:
                    b2:57:44:6f:c0:60:30:fc:71:e4:f8:f9:bc:cb:cd:
                    e2:ac:68:d9:1b:8f:50:49:90:d2:b0:fa:cb:20:6b:
                    41:7a:31:9a:a1:1e:72:77:a9:23:df:80:de:f9:aa:
                    b5:f9:c9:54:91:fb:33:a1:eb:63:37:ec:bf:e7:8f:
                    d2:42:3a:6d:94:07:90:d4:28:3f:85:df:10:d0:cf:
                    b2:00:83:5b:ec:1f:66:8f:32:35:bc:c3:7f:01:d0:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E0:A7:1D:C7:86:D2:F5:3C:95:E9:5C:02:FC:8A:EF:C5:D4:1D:36
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:38:df:6c:e7:91:f9:a2:62:33:d5:18:be:82:98:56:2d:e7:
         31:d4:02:9d:0e:36:c9:c1:f4:b3:ec:1d:8f:d7:15:58:df:53:
         5f:c4:e2:22:c2:14:5c:1b:e4:c9:29:ac:bc:8d:4c:73:8c:1a:
         96:8a:23:dd:6b:4c:e3:08:e0:71:42:95:fc:8b:f6:53:17:8b:
         f5:e3:47:49:b3:15:ef:15:1f:25:17:97:17:79:27:91:91:c8:
         6c:b8:f8:bc:4b:f6:12:95:7b:5f:b8:7c:36:ec:ef:2c:26:c1:
         00:4a:2f:1c:02:74:28:71:e4:08:7b:b5:26:4f:87:44:d6:0e:
         b4:04:1e:91:a3:7c:a9:7e:fb:94:25:5f:b6:32:c9:11:09:45:
         6c:37:dc:20:a0:70:b6:7b:c1:d4:0e:09:72:8d:cf:2b:e5:72:
         d9:10:6c:81:c6:34:a6:08:f4:1d:8b:ff:20:cc:41:8a:92:ae:
         8c:c2:94:9c:86:20:f0:46:9d:9a:d3:9a:d5:39:fb:97:31:60:
         ca:1d:1c:3f:9f:8b:72:fa:01:6b:13:d9:b1:aa:d7:66:56:45:
         3a:a6:46:19:43:78:e1:e8:57:1d:71:ce:66:28:94:c4:32:b1:
         0b:6e:b7:5b:48:82:b1:18:59:a8:69:1f:c2:05:50:6e:7e:af:
         53:5e:65:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF6Ea+aplMzW5hDs+WBVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OWVhMDI3NWM3NjVlMTc2MDNlYjU5ZWVmMzllMmZhYjUz
ODBlZjAwHhcNMjYwOTI2MDUwMjExWhcNMjYwOTI3MDUwMjExWjAzMTEwLwYDVQQD
EyhiOWUwYTcxZGM3ODZkMmY1M2M5NWU5NWMwMmZjOGFlZmM1ZDQxZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVSCjoLif8CxVsjwdMzOFqexBVWn
4NzYkUY6o/pOP4RFcubjo3V+DeDw0Mx2Z7c5+uK1JTLsR6GogSEGAgjOh9kRyZHK
x8IIKfDwUlf2k0Vb7u/o8gcQCt4O3Db8TV1LmnTxlf9YKa2kxHGnlxQGYBD7Tloj
Mjb0gHfMknbF2Nrr80t/KnNUYHeaheARHj8lUtR8FcCThl18u8NuoY36r7pJL7Cy
V0RvwGAw/HHk+Pm8y83irGjZG49QSZDSsPrLIGtBejGaoR5yd6kj34De+aq1+clU
kfszoetjN+y/54/SQjptlAeQ1Cg/hd8Q0M+yAINb7B9mjzI1vMN/AdC3FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLngpx3HhtL1PJXpXAL8iu/F1B02MB8GA1UdIwQY
MBaAFBaeoCdcdl4XYD61nu854vq1OA7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5Njkt
ZDY5ZWY0MjJjMTY3LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5NjktZDY5ZWY0MjJjMTY3
LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTjfbOeR
+aJiM9UYvoKYVi3nMdQCnQ42ycH0s+wdj9cVWN9TX8TiIsIUXBvkySmsvI1Mc4wa
looj3WtM4wjgcUKV/Iv2UxeL9eNHSbMV7xUfJReXF3knkZHIbLj4vEv2EpV7X7h8
NuzvLCbBAEovHAJ0KHHkCHu1Jk+HRNYOtAQekaN8qX77lCVftjLJEQlFbDfcIKBw
tnvB1A4Jco3PK+Vy2RBsgcY0pgj0HYv/IMxBipKujMKUnIYg8EadmtOa1Tn7lzFg
yh0cP5+LcvoBaxPZsarXZlZFOqZGGUN44ehXHXHOZiiUxDKxC263W0iCsRhZqGkf
wgVQbn6vU15lkQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:30:19 2026 by rpki-client