Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File:                     9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier:          DxAoXxMr2hba4N9hLa2oIoCwp9jUF3p/fNfLVrt5oxA=
Subject key identifier:   AB:44:27:66:E4:04:03:7A:80:A1:CD:15:55:78:4B:D6:7C:31:2B:4F
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer:       /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial:       01A0C9D8D0A1C046F57AF6DAC4BC77A7812C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number:          16F6
Signing time:             Tue 22 Sep 2026 16:00:24 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:24 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:24 +0000
Files and hashes:         1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: XPiZvTqGBm6o6qPhk6Wv4Eb8t2tbws9E7fmHWC9x6lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d8:d0:a1:c0:46:f5:7a:f6:da:c4:bc:77:a7:81:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
        Validity
            Not Before: Sep 22 16:00:24 2026 GMT
            Not After : Sep 23 16:00:24 2026 GMT
        Subject: CN=ab442766e404037a80a1cd1555784bd67c312b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:64:ab:05:aa:a2:4e:79:b4:93:99:f4:ff:
                    c4:02:23:3a:59:a5:ad:2e:ae:04:20:1c:f0:2d:1a:
                    51:c3:d2:39:23:3a:d2:e3:93:55:55:74:e8:af:f9:
                    a5:08:fa:18:10:2d:21:79:cb:92:ac:e4:1b:52:c7:
                    92:05:8b:d2:44:43:f3:fd:64:80:85:94:57:01:60:
                    59:36:d2:5d:a4:c1:66:b3:36:9c:2c:0d:2c:30:a7:
                    d2:d2:af:c4:df:6b:a6:95:9f:03:a1:b8:9f:04:cc:
                    ab:e2:fd:29:51:a2:18:5c:d0:a3:38:29:f2:1b:b3:
                    a2:2a:d8:58:b5:48:58:2c:cb:94:ab:66:5d:30:75:
                    1c:d0:a2:7e:91:74:09:30:2b:eb:e6:31:d6:5b:89:
                    47:4e:d4:b8:8d:ac:45:c3:9b:b4:e4:42:18:98:c7:
                    15:06:2e:0f:8e:0d:9c:65:39:52:55:cf:3d:1e:3b:
                    57:56:14:57:6b:50:d3:64:1c:96:fa:05:d3:ea:b8:
                    22:ef:3b:08:ac:cb:d6:fd:93:3d:0e:02:dc:93:b5:
                    0d:dc:77:9e:cc:16:45:4c:74:42:8a:ce:2f:74:71:
                    33:ca:5b:ee:9f:5a:87:fb:aa:c7:75:d9:f3:67:4f:
                    29:cc:db:b6:88:5d:db:af:44:9b:ca:37:c0:96:48:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:27:66:E4:04:03:7A:80:A1:CD:15:55:78:4B:D6:7C:31:2B:4F
            X509v3 Authority Key Identifier:
                keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:92:d6:1d:64:30:70:a0:aa:bf:77:3d:4d:49:f0:64:05:26:
         b9:c6:67:98:c0:6c:19:00:c7:32:8c:90:4e:63:c9:e5:fe:4b:
         ff:57:61:07:c7:cf:22:c2:78:88:d9:b9:cf:7a:d6:e1:8e:66:
         c8:67:33:03:ee:84:84:03:3c:c1:2c:7c:a1:70:55:dd:2f:12:
         c7:d5:71:bd:18:bf:17:17:93:b3:7a:9a:02:b8:fd:4c:59:37:
         09:e9:9d:2d:b0:cc:04:70:b5:d7:4a:5b:5c:56:67:b7:6f:c6:
         5b:a0:29:ed:47:ad:75:d3:98:a9:89:99:06:b2:03:c2:8a:be:
         96:ad:70:5a:ff:da:1e:ec:7a:d7:1b:0f:20:98:a5:34:42:69:
         08:e6:5b:b2:af:52:cf:a6:64:62:57:4b:70:c9:e4:c6:6f:a3:
         6e:59:26:57:b1:c9:64:64:2c:f9:c8:aa:f9:64:2d:00:61:51:
         ce:ca:3e:6d:f5:8e:bc:8d:cb:c2:fe:70:67:28:ef:ec:f4:6f:
         71:0a:4d:3c:06:a6:be:b3:47:e2:a6:54:e2:7c:7d:60:6b:0d:
         3c:4c:23:d3:90:94:80:7b:26:56:e2:bb:f6:79:f5:8e:9e:58:
         04:82:8d:12:a6:b1:e4:8b:7d:a4:2c:66:26:fa:b0:15:05:14:
         c5:04:aa:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2NChwEb1evbaxLx3p4EsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Y2RkNGM3YzhiZjg3MTg3MDMwYTY0NDcwMjBhODk2ZjQx
ZTQ5OTMwHhcNMjYwOTIyMTYwMDI0WhcNMjYwOTIzMTYwMDI0WjAzMTEwLwYDVQQD
EyhhYjQ0Mjc2NmU0MDQwMzdhODBhMWNkMTU1NTc4NGJkNjdjMzEyYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZFkqwWqok55tJOZ9P/EAiM6WaWt
Lq4EIBzwLRpRw9I5IzrS45NVVXTor/mlCPoYEC0hecuSrOQbUseSBYvSREPz/WSA
hZRXAWBZNtJdpMFmszacLA0sMKfS0q/E32umlZ8DobifBMyr4v0pUaIYXNCjOCny
G7OiKthYtUhYLMuUq2ZdMHUc0KJ+kXQJMCvr5jHWW4lHTtS4jaxFw5u05EIYmMcV
Bi4Pjg2cZTlSVc89HjtXVhRXa1DTZByW+gXT6rgi7zsIrMvW/ZM9DgLck7UN3Hee
zBZFTHRCis4vdHEzylvun1qH+6rHddnzZ08pzNu2iF3br0SbyjfAlkjOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtEJ2bkBAN6gKHNFVV4S9Z8MStPMB8GA1UdIwQY
MBaAFPTN1MfIv4cYcDCmRHAgqJb0HkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAt
ZjFlMTk4YTI0ZGJmLzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAtZjFlMTk4YTI0ZGJm
LzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZLWHWQw
cKCqv3c9TUnwZAUmucZnmMBsGQDHMoyQTmPJ5f5L/1dhB8fPIsJ4iNm5z3rW4Y5m
yGczA+6EhAM8wSx8oXBV3S8Sx9VxvRi/FxeTs3qaArj9TFk3CemdLbDMBHC110pb
XFZnt2/GW6Ap7UetddOYqYmZBrIDwoq+lq1wWv/aHux61xsPIJilNEJpCOZbsq9S
z6ZkYldLcMnkxm+jblkmV7HJZGQs+ciq+WQtAGFRzso+bfWOvI3Lwv5wZyjv7PRv
cQpNPAamvrNH4qZU4nx9YGsNPEwj05CUgHsmVuK79nn1jp5YBIKNEqax5It9pCxm
JvqwFQUUxQSqrw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:37:23 2026 by rpki-client