Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File:                     9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier:          z1ahPnpBo1S5GAsLSxQ1WdvSzWzIyFi6435qi3zMqyU=
Subject key identifier:   82:7D:48:8D:18:4B:28:73:AF:DD:88:F6:B6:D9:40:43:5A:54:69:9C
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer:       /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial:       01A0CBC77360866BB5250EC6AA4F6B169258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number:          1A66
Signing time:             Wed 23 Sep 2026 01:00:40 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:40 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:40 +0000
Files and hashes:         1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: lFERUqpRpjAb+trrDKTSByfFiEv13RrHpO0rAw1Q6e4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:73:60:86:6b:b5:25:0e:c6:aa:4f:6b:16:92:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
        Validity
            Not Before: Sep 23 01:00:40 2026 GMT
            Not After : Sep 24 01:00:40 2026 GMT
        Subject: CN=827d488d184b2873afdd88f6b6d940435a54699c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:79:50:50:1f:dd:1b:e9:49:e8:4e:e3:0b:
                    39:36:c9:1e:81:d8:7d:1b:25:f0:b4:73:da:f7:9f:
                    5d:5f:f8:60:05:e8:ac:e7:12:16:90:46:75:0a:c0:
                    d0:6f:ed:6d:8d:2d:62:46:cc:a7:7d:e6:2a:0c:08:
                    a3:8e:cb:ae:28:bd:3f:17:dc:23:6c:c8:e2:3e:8b:
                    fb:ee:78:9e:15:d8:83:55:1c:29:25:93:e6:92:4f:
                    94:5e:a7:81:a2:0c:56:ee:95:45:0d:63:2b:8a:ea:
                    6f:fa:c8:33:72:a1:87:9a:02:6d:58:7a:15:f7:b0:
                    26:20:59:e2:32:52:bb:d2:52:78:26:06:81:af:a6:
                    ab:bc:ae:d5:35:a4:c4:00:bf:99:76:f4:98:f8:1a:
                    8c:01:76:cf:17:9e:f3:82:e0:75:4d:cf:25:1f:6a:
                    11:e9:6f:cb:d8:cc:a1:ca:c7:fc:45:86:9f:1e:6e:
                    87:aa:3e:b5:fa:52:45:7b:e6:39:76:bf:cb:ef:a1:
                    33:37:a9:f0:7d:31:a9:3e:35:3c:fd:d0:f8:16:dc:
                    ce:86:a6:db:2e:89:07:2e:19:e6:dc:96:74:2b:50:
                    52:2e:a7:4d:31:b0:51:4f:c2:cf:56:fa:d8:6c:2d:
                    0d:6d:c5:af:91:6e:67:e2:56:cd:0f:34:49:25:fe:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7D:48:8D:18:4B:28:73:AF:DD:88:F6:B6:D9:40:43:5A:54:69:9C
            X509v3 Authority Key Identifier:
                keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4c:ce:47:84:5f:1c:07:f5:7a:46:bf:86:d0:30:44:0d:b3:
         02:79:98:f1:5e:64:87:e7:2f:0f:51:f0:98:d9:6c:99:dd:a3:
         19:1c:f5:dc:7b:e5:ab:dc:73:6a:5a:a8:f6:f2:85:37:e8:72:
         e7:e3:ed:2e:aa:fd:7e:ea:22:1f:88:7c:21:7d:03:e4:19:91:
         58:e8:16:09:2c:11:64:31:b2:f1:d1:c9:03:e5:70:d6:ab:a4:
         38:e2:c6:2c:e5:d1:ee:6f:58:83:8f:4c:13:73:e2:7b:01:95:
         00:a8:d9:11:d9:db:d1:5b:10:fd:55:c7:a8:58:3d:0a:77:13:
         75:05:3f:8f:a0:28:1d:37:f7:b6:ff:e9:80:db:8d:1f:f9:8c:
         bb:17:4b:17:60:c6:57:d1:c3:2f:1c:89:9e:c9:9c:f5:81:80:
         e8:70:00:2f:73:c4:d4:15:67:6c:c0:e6:63:de:8c:bf:54:c1:
         7e:5f:76:bc:3e:96:6f:a3:88:d7:c7:2a:77:aa:c3:89:be:4f:
         1d:9b:fd:69:65:c8:6f:e0:b5:2e:f3:49:89:1f:65:a5:77:70:
         06:17:40:eb:48:5e:ef:3d:ad:98:a0:d9:ea:9d:0d:3e:05:99:
         31:96:8f:a9:fc:57:37:bf:b1:78:d1:1b:c7:51:9d:5b:38:fe:
         49:ca:ca:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx3Nghmu1JQ7Gqk9rFpJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODM4MTNkYjRkM2Y3YjBmMDJjMzFmODViNTI0M2MzMGY0
NWUyNTIwHhcNMjYwOTIzMDEwMDQwWhcNMjYwOTI0MDEwMDQwWjAzMTEwLwYDVQQD
Eyg4MjdkNDg4ZDE4NGIyODczYWZkZDg4ZjZiNmQ5NDA0MzVhNTQ2OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsod5UFAf3RvpSehO4ws5Nskegdh9
GyXwtHPa959dX/hgBeis5xIWkEZ1CsDQb+1tjS1iRsynfeYqDAijjsuuKL0/F9wj
bMjiPov77nieFdiDVRwpJZPmkk+UXqeBogxW7pVFDWMriupv+sgzcqGHmgJtWHoV
97AmIFniMlK70lJ4JgaBr6arvK7VNaTEAL+ZdvSY+BqMAXbPF57zguB1Tc8lH2oR
6W/L2Myhysf8RYafHm6Hqj61+lJFe+Y5dr/L76EzN6nwfTGpPjU8/dD4FtzOhqbb
LokHLhnm3JZ0K1BSLqdNMbBRT8LPVvrYbC0NbcWvkW5n4lbNDzRJJf5jJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ9SI0YSyhzr92I9rbZQENaVGmcMB8GA1UdIwQY
MBaAFPSDgT200/ew8Cwx+FtSQ8MPReJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEt
ZTcxOGM4NDNhMjk0LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEtZTcxOGM4NDNhMjk0
LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEzOR4Rf
HAf1eka/htAwRA2zAnmY8V5kh+cvD1HwmNlsmd2jGRz13Hvlq9xzalqo9vKFN+hy
5+PtLqr9fuoiH4h8IX0D5BmRWOgWCSwRZDGy8dHJA+Vw1qukOOLGLOXR7m9Yg49M
E3PiewGVAKjZEdnb0VsQ/VXHqFg9CncTdQU/j6AoHTf3tv/pgNuNH/mMuxdLF2DG
V9HDLxyJnsmc9YGA6HAAL3PE1BVnbMDmY96Mv1TBfl92vD6Wb6OI18cqd6rDib5P
HZv9aWXIb+C1LvNJiR9lpXdwBhdA60he7z2tmKDZ6p0NPgWZMZaPqfxXN7+xeNEb
x1GdWzj+ScrK5A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:56:06 2026 by rpki-client