Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
File:                     7a9t6QTN6PpLM_ajYxcueaPOjK4.mft (raw, json)
Hash identifier:          Ypt6+RUt37xL7U0rdaTEIgqUBNp8ijtkWhJ0/NdLap8=
Subject key identifier:   D4:14:A9:AD:4E:91:00:04:8D:C9:4D:5F:7A:1E:1B:17:21:5F:40:27
Authority key identifier: ED:AF:6D:E9:04:CD:E8:FA:4B:33:F6:A3:63:17:2E:79:A3:CE:8C:AE
Certificate issuer:       /CN=edaf6de904cde8fa4b33f6a363172e79a3ce8cae
Certificate serial:       01A0CCD9BC0529D50A4763E0B7981ECA02EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
Manifest number:          01F1
Signing time:             Wed 23 Sep 2026 06:00:16 +0000
Manifest this update:     Wed 23 Sep 2026 06:00:16 +0000
Manifest next update:     Thu 24 Sep 2026 06:00:16 +0000
Files and hashes:         1: 7a9t6QTN6PpLM_ajYxcueaPOjK4.crl (hash: cTKVspOOaizTb9SUhjFtjvuUIDoCXtEByHQ1FqUPkWU=)
                          2: MZwHyoxyedbHMHzcDY_-BSVnPSA.asa (hash: GUjDhBxz76iF0qBxXqsv2ZfQlXLmcrAvFFiVS8y2Yns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:d9:bc:05:29:d5:0a:47:63:e0:b7:98:1e:ca:02:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edaf6de904cde8fa4b33f6a363172e79a3ce8cae
        Validity
            Not Before: Sep 23 06:00:16 2026 GMT
            Not After : Sep 24 06:00:16 2026 GMT
        Subject: CN=d414a9ad4e9100048dc94d5f7a1e1b17215f4027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:f5:51:72:6e:bf:af:8c:01:9c:a4:bf:3d:
                    03:5c:46:3c:d4:54:bc:11:99:06:84:03:9f:63:b9:
                    af:6c:f6:b9:be:c9:e1:19:96:7b:42:ef:30:cc:f7:
                    75:78:77:55:69:8c:d6:fe:9c:10:5b:e6:d7:f3:e1:
                    fe:e1:16:42:63:96:80:8a:3d:40:a8:57:7b:8f:ee:
                    09:53:82:97:ae:ef:f5:68:28:23:3a:d7:4e:61:38:
                    07:ae:92:8f:65:b7:d2:c2:63:fb:a8:e0:64:8c:36:
                    4a:7f:27:d3:7b:f8:fa:3f:b0:e5:f0:05:9d:32:01:
                    f1:31:8e:2f:88:61:33:98:d5:68:28:7c:61:2f:b8:
                    4e:38:3c:f0:8c:dc:c7:e8:3b:24:23:83:4b:9e:c0:
                    4b:8a:df:8f:3d:ab:48:cf:7c:61:89:25:67:df:d5:
                    ad:5e:b8:cb:e5:c4:de:96:80:2a:8e:96:fb:e8:ac:
                    91:bb:b3:b0:be:b6:72:fc:5c:d4:81:78:3d:47:3f:
                    25:3b:3e:0b:5a:51:49:e6:cf:d4:ad:c6:20:81:70:
                    cc:a8:ea:b7:ef:51:6d:e5:b5:22:ad:40:b8:9c:ef:
                    bf:f0:46:2c:29:7e:87:68:a7:b8:05:24:de:70:c2:
                    94:44:54:4b:05:5c:8e:c1:31:a0:cd:2e:4d:74:9e:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:14:A9:AD:4E:91:00:04:8D:C9:4D:5F:7A:1E:1B:17:21:5F:40:27
            X509v3 Authority Key Identifier:
                keyid:ED:AF:6D:E9:04:CD:E8:FA:4B:33:F6:A3:63:17:2E:79:A3:CE:8C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:44:de:6d:3c:ca:a5:c7:a5:3f:1d:64:ab:de:5f:0c:12:
         64:04:89:ca:d6:ec:f4:e3:60:22:69:d0:7e:e7:61:b1:10:b7:
         f4:29:f5:f3:1e:29:f3:29:1e:47:38:e0:c9:ad:1a:18:c1:5b:
         79:9f:cb:18:94:f7:c8:e3:8c:08:3d:ca:0d:32:de:62:b8:f8:
         9f:d2:bb:ef:e8:a1:4a:0a:68:b3:b8:e4:20:fa:f4:82:4b:bf:
         ec:c4:b9:7c:33:f4:45:3a:75:be:91:be:06:5e:f5:9f:b6:e5:
         d1:88:3d:7d:a3:64:54:79:88:57:34:d7:32:a7:4d:b3:ff:c9:
         29:d5:7e:cd:1c:6e:1d:90:60:a0:d1:52:1d:d2:dc:01:18:52:
         78:d7:84:88:84:7f:57:28:b9:ce:e3:4e:42:b9:c2:59:8f:c8:
         d3:1b:01:32:07:ae:b4:44:b6:14:21:b4:50:ee:6e:66:1e:9a:
         6d:62:92:f6:35:50:70:69:d4:81:4a:6f:0b:c1:4a:a6:b4:27:
         39:df:25:d4:0c:e4:4f:90:91:f3:6a:85:83:b1:41:91:0d:32:
         1a:01:02:05:71:e7:9f:3a:d3:32:5a:4d:77:b3:24:74:31:c1:
         df:11:54:ee:f0:d8:36:1b:c5:a7:4a:05:26:7d:e7:b1:28:70:
         02:1a:85:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2bwFKdUKR2Pgt5geygLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWY2ZGU5MDRjZGU4ZmE0YjMzZjZhMzYzMTcyZTc5YTNj
ZThjYWUwHhcNMjYwOTIzMDYwMDE2WhcNMjYwOTI0MDYwMDE2WjAzMTEwLwYDVQQD
EyhkNDE0YTlhZDRlOTEwMDA0OGRjOTRkNWY3YTFlMWIxNzIxNWY0MDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfz1UXJuv6+MAZykvz0DXEY81FS8
EZkGhAOfY7mvbPa5vsnhGZZ7Qu8wzPd1eHdVaYzW/pwQW+bX8+H+4RZCY5aAij1A
qFd7j+4JU4KXru/1aCgjOtdOYTgHrpKPZbfSwmP7qOBkjDZKfyfTe/j6P7Dl8AWd
MgHxMY4viGEzmNVoKHxhL7hOODzwjNzH6DskI4NLnsBLit+PPatIz3xhiSVn39Wt
XrjL5cTeloAqjpb76KyRu7OwvrZy/FzUgXg9Rz8lOz4LWlFJ5s/UrcYggXDMqOq3
71Ft5bUirUC4nO+/8EYsKX6HaKe4BSTecMKURFRLBVyOwTGgzS5NdJ4QwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQUqa1OkQAEjclNX3oeGxchX0AnMB8GA1UdIwQY
MBaAFO2vbekEzej6SzP2o2MXLnmjzoyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2E5dDZRVE42UHBMTV9hall4Y3VlYVBPaks0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85M2NiYTktZDBjNS00NTJiLTkyMjYt
NWQ3ODQ0ZGQ0NWI0LzEvN2E5dDZRVE42UHBMTV9hall4Y3VlYVBPaks0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85M2NiYTktZDBjNS00NTJiLTkyMjYtNWQ3ODQ0ZGQ0NWI0
LzEvN2E5dDZRVE42UHBMTV9hall4Y3VlYVBPaks0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacpE3m08
yqXHpT8dZKveXwwSZASJytbs9ONgImnQfudhsRC39Cn18x4p8ykeRzjgya0aGMFb
eZ/LGJT3yOOMCD3KDTLeYrj4n9K77+ihSgpos7jkIPr0gku/7MS5fDP0RTp1vpG+
Bl71n7bl0Yg9faNkVHmIVzTXMqdNs//JKdV+zRxuHZBgoNFSHdLcARhSeNeEiIR/
Vyi5zuNOQrnCWY/I0xsBMgeutES2FCG0UO5uZh6abWKS9jVQcGnUgUpvC8FKprQn
Od8l1AzkT5CR82qFg7FBkQ0yGgECBXHnnzrTMlpNd7MkdDHB3xFU7vDYNhvFp0oF
Jn3nsShwAhqFKg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:57:01 2026 by rpki-client