Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
File:                     0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft (raw, json)
Hash identifier:          6cpcD89GuF3iPgEnBd4QCDXEMfZpSUKAyGvjHcnfrKw=
Subject key identifier:   FA:93:C5:19:0C:CA:F7:E2:BA:A9:AE:C7:83:60:EF:F3:79:FA:B3:91
Authority key identifier: D0:52:BC:25:0F:F7:78:B7:27:9A:4B:18:C1:26:74:0D:4C:E8:6C:95
Certificate issuer:       /CN=d052bc250ff778b7279a4b18c126740d4ce86c95
Certificate serial:       01A0D8726AFFAEF8C4C18E2C17F309308489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
Manifest number:          E9
Signing time:             Fri 25 Sep 2026 12:02:51 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:51 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:51 +0000
Files and hashes:         1: 0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl (hash: n4Xts+yryspBJlLqm38TCy+em9OUAlK3VzPosnLl4cc=)
                          2: 1-uqAA49B-LNga8wL-Km6wovobcI.roa (hash: kAUV5RbRLGHjSsvGuNU8jasfwM1rrJe2ngCkHs1tfUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:6a:ff:ae:f8:c4:c1:8e:2c:17:f3:09:30:84:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d052bc250ff778b7279a4b18c126740d4ce86c95
        Validity
            Not Before: Sep 25 12:02:51 2026 GMT
            Not After : Sep 26 12:02:51 2026 GMT
        Subject: CN=fa93c5190ccaf7e2baa9aec78360eff379fab391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7f:41:47:8b:c7:10:70:57:b3:59:86:c0:31:
                    9e:03:43:18:9a:ea:7c:24:37:6f:e2:62:ca:91:c7:
                    bb:f3:88:2a:09:ee:ef:b8:7f:8c:e4:db:11:48:1b:
                    a9:62:67:d8:99:31:45:d9:c6:04:fa:5d:43:20:c4:
                    6c:0c:34:97:77:7d:f2:ea:5b:78:92:f1:99:9b:2a:
                    15:9c:0b:94:1a:cb:65:1b:99:6f:b7:83:9f:39:5c:
                    2b:8d:c3:ab:2a:49:6b:a4:ee:b9:a5:92:b4:25:a7:
                    70:27:ed:5b:54:72:49:c0:93:fa:1e:66:14:7a:99:
                    9e:e2:f8:ef:e3:21:e9:ca:15:5f:c1:a1:bb:17:e3:
                    94:ee:b3:4a:ff:f8:d6:a9:66:3e:5b:53:22:74:bf:
                    bf:ac:41:f6:93:09:b9:48:18:63:ab:d6:d3:3f:a0:
                    94:45:d4:66:cf:53:a8:59:d0:1b:5e:a8:1c:47:1c:
                    ce:b0:fe:6d:f2:72:68:56:e0:22:72:54:27:bf:d1:
                    91:1c:96:97:55:8e:5b:45:9a:d5:c2:c3:cb:91:d6:
                    11:3c:66:fe:b7:9a:ba:78:f8:5a:a5:82:4f:3d:ad:
                    e9:b4:e1:d1:41:df:62:0e:50:dd:7d:b9:0f:e2:84:
                    52:bf:6e:d4:ee:16:51:f8:5c:ae:11:ac:b6:52:bd:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:93:C5:19:0C:CA:F7:E2:BA:A9:AE:C7:83:60:EF:F3:79:FA:B3:91
            X509v3 Authority Key Identifier:
                keyid:D0:52:BC:25:0F:F7:78:B7:27:9A:4B:18:C1:26:74:0D:4C:E8:6C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:aa:05:ca:d9:b8:26:c7:a2:c3:4c:72:7a:74:29:85:d5:f4:
         66:e2:95:7a:22:e7:2a:9e:7f:94:1e:01:6b:a1:6d:a1:14:05:
         e4:27:b4:f4:14:08:49:b3:83:41:ab:9a:02:07:da:3c:cf:5c:
         ef:a8:55:1f:70:75:26:04:a9:75:b3:a3:2f:82:6b:be:b3:97:
         3b:0a:de:42:73:2d:87:63:ee:3d:3e:e6:ac:1d:bf:aa:5f:c7:
         49:af:ec:57:d7:ba:59:0f:1e:a2:82:34:5e:17:72:64:7b:87:
         56:e6:04:0f:db:0e:27:04:69:17:f4:2f:59:a7:d8:9d:90:b6:
         33:f9:34:5b:2f:61:a7:7d:07:bc:81:f9:3b:62:b5:0f:43:5d:
         97:48:0c:ee:e1:3d:05:52:68:cb:b7:2c:e8:87:bc:25:70:ec:
         46:ef:56:19:55:b8:fb:e0:4c:1c:f8:ed:9d:e8:38:a3:2a:fa:
         cc:5f:2e:19:40:f0:7a:50:0a:54:bc:0d:7a:a0:79:31:87:8f:
         3a:92:da:33:d6:99:10:a9:b1:39:0e:40:96:b3:b0:cc:b9:f6:
         0a:bb:02:89:eb:93:34:11:6f:ed:21:b8:9a:7e:9a:08:46:26:
         22:6e:ee:87:6b:61:c9:b8:c3:8d:06:cb:cf:f6:37:a0:4c:19:
         24:24:d1:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcmr/rvjEwY4sF/MJMISJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTJiYzI1MGZmNzc4YjcyNzlhNGIxOGMxMjY3NDBkNGNl
ODZjOTUwHhcNMjYwOTI1MTIwMjUxWhcNMjYwOTI2MTIwMjUxWjAzMTEwLwYDVQQD
EyhmYTkzYzUxOTBjY2FmN2UyYmFhOWFlYzc4MzYwZWZmMzc5ZmFiMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA339BR4vHEHBXs1mGwDGeA0MYmup8
JDdv4mLKkce784gqCe7vuH+M5NsRSBupYmfYmTFF2cYE+l1DIMRsDDSXd33y6lt4
kvGZmyoVnAuUGstlG5lvt4OfOVwrjcOrKklrpO65pZK0JadwJ+1bVHJJwJP6HmYU
epme4vjv4yHpyhVfwaG7F+OU7rNK//jWqWY+W1MidL+/rEH2kwm5SBhjq9bTP6CU
RdRmz1OoWdAbXqgcRxzOsP5t8nJoVuAiclQnv9GRHJaXVY5bRZrVwsPLkdYRPGb+
t5q6ePhapYJPPa3ptOHRQd9iDlDdfbkP4oRSv27U7hZR+FyuEay2Ur29EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqTxRkMyvfiuqmux4Ng7/N5+rORMB8GA1UdIwQY
MBaAFNBSvCUP93i3J5pLGMEmdA1M6GyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZLOEpRXzNlTGNubWtzWXdTWjBEVXpvYkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2QzY2QtNWU2Ny00N2YzLTgyYzYt
NGRkMTUxYzZhZGVkLzEvMEZLOEpRXzNlTGNubWtzWXdTWjBEVXpvYkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kN2QzY2QtNWU2Ny00N2YzLTgyYzYtNGRkMTUxYzZhZGVk
LzEvMEZLOEpRXzNlTGNubWtzWXdTWjBEVXpvYkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKoFytm4
Jseiw0xyenQphdX0ZuKVeiLnKp5/lB4Ba6FtoRQF5Ce09BQISbODQauaAgfaPM9c
76hVH3B1JgSpdbOjL4JrvrOXOwreQnMth2PuPT7mrB2/ql/HSa/sV9e6WQ8eooI0
XhdyZHuHVuYED9sOJwRpF/QvWafYnZC2M/k0Wy9hp30HvIH5O2K1D0Ndl0gM7uE9
BVJoy7cs6Ie8JXDsRu9WGVW4++BMHPjtneg4oyr6zF8uGUDwelAKVLwNeqB5MYeP
OpLaM9aZEKmxOQ5AlrOwzLn2CrsCieuTNBFv7SG4mn6aCEYmIm7uh2thybjDjQbL
z/Y3oEwZJCTRxw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:56:34 2026 by rpki-client