Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
File:                     5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft (raw, json)
Hash identifier:          +te4dtOrEEcnigJ7FFuKIaNqZnZfqp8/8hp4ddI3bm4=
Subject key identifier:   9F:1B:11:27:9B:1D:AE:87:31:10:43:51:F2:33:EE:F5:BA:05:04:AE
Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
Certificate issuer:       /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Certificate serial:       01A0D4CBB62F270609C513BC27026DE81217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
Manifest number:          1701
Signing time:             Thu 24 Sep 2026 19:01:55 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:55 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:55 +0000
Files and hashes:         1: 2FfewzchtBOlT_1-bM1KbwVEptI.roa (hash: XCreExSvtYmion6efW1Ds82lk+nlI9Ef/9JOGZG0IwY=)
                          2: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl (hash: +HKN7tDsSu9Z8+aG0Lfk/7+66k+P30OSIkkOFD+SOEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:b6:2f:27:06:09:c5:13:bc:27:02:6d:e8:12:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
        Validity
            Not Before: Sep 24 19:01:55 2026 GMT
            Not After : Sep 25 19:01:55 2026 GMT
        Subject: CN=9f1b11279b1dae8731104351f233eef5ba0504ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:41:2c:1c:cc:f7:fe:dd:3e:e5:d9:56:73:
                    50:a7:0f:d2:4b:bc:b0:b9:d8:97:3c:49:7e:8a:3d:
                    57:24:6c:3f:c6:ca:95:2d:21:cd:64:a1:2e:f5:89:
                    f4:02:ad:0e:01:9c:80:67:60:6e:2e:e5:76:7c:3b:
                    6a:e5:b2:ef:19:ae:aa:04:ba:4f:e9:1e:27:f5:ce:
                    e2:22:c1:fd:d1:bc:b2:d7:9c:3b:ea:c4:bb:76:03:
                    66:a1:f9:8f:ce:41:77:ac:40:a3:8d:df:0a:17:95:
                    34:a2:c9:17:69:af:1e:1d:53:99:9d:64:46:f1:f9:
                    1c:da:37:a0:4f:70:66:fc:15:eb:c1:0d:c6:87:6a:
                    9e:35:1e:cb:a0:d7:43:72:0b:96:33:d0:23:03:c3:
                    bb:b2:53:fa:d4:70:71:5a:e2:42:6a:8d:22:c8:ed:
                    77:aa:de:66:0f:55:b2:d0:4a:2b:9d:5f:59:e7:72:
                    b1:5d:4a:45:26:29:6e:eb:30:1d:5e:7f:31:3b:7a:
                    3f:41:0a:0f:61:2b:b0:20:df:06:2a:b7:c6:c8:de:
                    03:8d:5b:c9:01:10:b9:73:5d:98:a5:72:8e:a7:9b:
                    b5:12:0b:b2:8f:fb:62:d8:de:2d:3e:53:5f:1a:1a:
                    1b:d8:59:67:08:7a:fe:5e:04:d6:7b:b5:65:2c:ce:
                    7b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1B:11:27:9B:1D:AE:87:31:10:43:51:F2:33:EE:F5:BA:05:04:AE
            X509v3 Authority Key Identifier:
                keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:24:cf:63:c7:41:fe:e1:98:45:1d:e1:b4:7b:b8:e2:3c:be:
         d3:1d:98:0f:3e:2d:23:bf:46:d9:a5:1e:df:02:a3:7a:97:b1:
         c1:78:15:b5:33:10:be:fd:56:c5:41:49:eb:b0:00:e2:ab:1e:
         d0:ce:a1:57:51:22:24:da:df:b3:0d:7c:8b:a1:3c:f1:0f:dd:
         f5:59:c9:e4:a0:6a:5a:97:68:92:2e:68:d2:85:25:61:19:e5:
         6e:b4:8f:4f:f1:50:fc:bd:e5:c6:5d:37:57:d2:f4:9a:a9:8e:
         d1:82:0f:17:3e:36:52:1b:a0:60:34:e4:ce:c7:86:ed:0b:cf:
         41:f8:bb:81:2a:a5:5b:c1:bf:49:0d:fd:db:c7:b0:3d:05:85:
         d6:60:ac:53:7c:66:b5:cc:96:9d:be:ee:b8:37:83:fa:d0:8f:
         84:ca:f8:30:40:74:4e:ce:04:44:cf:0f:60:36:46:eb:c2:51:
         06:2b:aa:c3:0f:8a:61:98:2f:5b:cf:29:1b:a1:98:79:a8:d7:
         f6:e6:7f:54:ce:18:fd:5b:8f:65:75:6d:e9:e6:fd:14:02:2d:
         79:82:53:07:4b:e8:1d:97:0a:85:ab:c3:3e:8c:97:d0:ec:38:
         28:28:6f:2c:94:c2:de:42:d2:42:21:9b:3b:9e:c0:19:19:7f:
         b5:86:4b:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy7YvJwYJxRO8JwJt6BIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MWJmNzhiNzBhYzI3NmNiZjY1YmI5MDlmOTkzNDA4MmY0
ZDJkNzkwHhcNMjYwOTI0MTkwMTU1WhcNMjYwOTI1MTkwMTU1WjAzMTEwLwYDVQQD
Eyg5ZjFiMTEyNzliMWRhZTg3MzExMDQzNTFmMjMzZWVmNWJhMDUwNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlodBLBzM9/7dPuXZVnNQpw/SS7yw
udiXPEl+ij1XJGw/xsqVLSHNZKEu9Yn0Aq0OAZyAZ2BuLuV2fDtq5bLvGa6qBLpP
6R4n9c7iIsH90byy15w76sS7dgNmofmPzkF3rECjjd8KF5U0oskXaa8eHVOZnWRG
8fkc2jegT3Bm/BXrwQ3Gh2qeNR7LoNdDcguWM9AjA8O7slP61HBxWuJCao0iyO13
qt5mD1Wy0EornV9Z53KxXUpFJilu6zAdXn8xO3o/QQoPYSuwIN8GKrfGyN4DjVvJ
ARC5c12YpXKOp5u1Eguyj/ti2N4tPlNfGhob2FlnCHr+XgTWe7VlLM572wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8bESebHa6HMRBDUfIz7vW6BQSuMB8GA1UdIwQY
MBaAFOQb94twrCdsv2W7kJ+ZNAgvTS15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAt
YWYwNTU2YzQ3YTM3LzEvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAtYWYwNTU2YzQ3YTM3
LzEvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxyTPY8dB
/uGYRR3htHu44jy+0x2YDz4tI79G2aUe3wKjepexwXgVtTMQvv1WxUFJ67AA4qse
0M6hV1EiJNrfsw18i6E88Q/d9VnJ5KBqWpdoki5o0oUlYRnlbrSPT/FQ/L3lxl03
V9L0mqmO0YIPFz42UhugYDTkzseG7QvPQfi7gSqlW8G/SQ3928ewPQWF1mCsU3xm
tcyWnb7uuDeD+tCPhMr4MEB0Ts4ERM8PYDZG68JRBiuqww+KYZgvW88pG6GYeajX
9uZ/VM4Y/VuPZXVt6eb9FAIteYJTB0voHZcKhavDPoyX0Ow4KChvLJTC3kLSQiGb
O57AGRl/tYZLuA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:24:09 2026 by rpki-client