Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File:                     9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier:          SNE2Xo5E68tt6H9B8hjZBwLfDivuiibLA2otTzXtTJo=
Subject key identifier:   8A:BC:1C:39:78:A7:0F:39:C3:15:A1:19:AA:CF:49:4F:07:84:DE:77
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer:       /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial:       01A0CB90C4E139F3F1A3F24ECED65C464D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number:          0C57
Signing time:             Wed 23 Sep 2026 00:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:57 +0000
Files and hashes:         1: 5VaEr_9CgIk0hDvBuz897kphjAA.roa (hash: O8HVzXpA3yJisGesiXqBb6I5Gg2zmpPDn2gcT3B2Ub8=)
                          2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: gQ/wTq3Adn1xgEkBCnveOEMYWI4Kmo2s+q6N5ihsM2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:c4:e1:39:f3:f1:a3:f2:4e:ce:d6:5c:46:4d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
        Validity
            Not Before: Sep 23 00:00:57 2026 GMT
            Not After : Sep 24 00:00:57 2026 GMT
        Subject: CN=8abc1c3978a70f39c315a119aacf494f0784de77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:84:ed:03:a6:1f:dd:c5:20:63:13:ab:ed:
                    de:2e:37:60:10:2a:99:84:60:3c:81:ca:59:43:96:
                    57:91:03:18:94:70:71:e6:bf:e2:63:d7:d4:ce:c2:
                    82:a6:cc:37:71:c1:6b:d4:2d:b9:f1:7b:42:21:c7:
                    bd:d4:59:bd:6a:16:67:37:e8:51:29:23:b6:37:f8:
                    67:02:67:19:e1:92:84:e2:ac:8c:a2:37:c8:1d:a9:
                    b0:3e:63:9a:6f:c8:70:54:4c:e3:74:01:66:f8:b1:
                    4f:42:db:6e:86:cb:04:b5:b5:ea:5e:bb:16:9d:75:
                    78:70:c2:7a:74:27:c0:17:5b:12:d8:d8:16:07:d2:
                    05:08:eb:a7:f9:c1:8d:ff:af:42:15:fe:62:1b:9d:
                    dd:61:36:a2:54:c9:f9:e1:9e:85:29:0a:b8:68:fd:
                    53:26:1a:45:df:ba:28:48:f5:61:07:f3:3f:71:19:
                    64:1b:bf:9e:5d:29:33:d0:1b:a7:e8:f4:22:cb:c3:
                    50:40:10:c7:75:ff:e2:76:e5:29:ef:2e:e9:a5:2b:
                    94:60:0a:f0:b1:94:20:a0:23:cd:03:31:4b:e9:a8:
                    8d:0c:04:0b:91:88:b7:5d:b9:e1:96:81:17:22:16:
                    35:a8:94:41:32:04:ab:d6:5d:e6:a7:1b:c0:58:21:
                    02:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:1C:39:78:A7:0F:39:C3:15:A1:19:AA:CF:49:4F:07:84:DE:77
            X509v3 Authority Key Identifier:
                keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a1:52:69:95:cc:d3:9f:3c:2b:ea:e9:6c:93:c0:46:8b:2d:
         3c:4e:8c:d3:05:a2:60:db:f7:a2:f1:e3:c7:93:7c:63:a1:c0:
         3f:74:8a:3c:0c:90:e2:35:e1:0c:5b:13:fb:e0:1f:b8:8e:70:
         66:e0:6b:86:7b:8b:a0:f4:af:60:39:3a:0d:d8:0d:0f:4a:5e:
         df:1e:92:96:6a:99:79:eb:1d:6e:09:c9:4c:1c:e5:ca:9d:e1:
         0a:d1:c3:31:6a:a8:5d:e7:6d:b9:00:74:f3:56:51:de:60:2f:
         18:fb:a8:10:f6:5a:30:16:79:0d:8e:12:47:a8:72:f8:41:d7:
         5e:d3:3e:d5:b2:98:da:51:ca:75:67:e2:be:94:3d:41:f4:cb:
         6c:7a:22:04:9f:ec:23:1f:19:9d:ce:5c:bc:06:64:45:34:1c:
         26:42:ef:1b:b8:60:71:25:09:9c:e8:ca:6c:e4:80:43:69:61:
         fc:16:68:c4:7d:4c:1e:c2:dd:fe:31:5d:dc:6f:6b:23:58:bd:
         a1:4f:43:44:c6:e0:e9:e0:c3:8e:08:eb:65:a1:9b:65:3e:9d:
         4e:9a:f9:83:f2:3d:22:68:74:86:e9:5d:a4:9a:b1:0c:5a:cf:
         fa:7d:06:84:91:e8:6c:f7:90:b8:11:2b:aa:a9:53:03:8e:49:
         76:1b:97:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLkMThOfPxo/JOztZcRk0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjJjODlkMzFmNjE3NTE2YTg2MGE3ODIyYmJhNjgyNDhh
NzY5YTAwHhcNMjYwOTIzMDAwMDU3WhcNMjYwOTI0MDAwMDU3WjAzMTEwLwYDVQQD
Eyg4YWJjMWMzOTc4YTcwZjM5YzMxNWExMTlhYWNmNDk0ZjA3ODRkZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdGE7QOmH93FIGMTq+3eLjdgECqZ
hGA8gcpZQ5ZXkQMYlHBx5r/iY9fUzsKCpsw3ccFr1C258XtCIce91Fm9ahZnN+hR
KSO2N/hnAmcZ4ZKE4qyMojfIHamwPmOab8hwVEzjdAFm+LFPQttuhssEtbXqXrsW
nXV4cMJ6dCfAF1sS2NgWB9IFCOun+cGN/69CFf5iG53dYTaiVMn54Z6FKQq4aP1T
JhpF37ooSPVhB/M/cRlkG7+eXSkz0Bun6PQiy8NQQBDHdf/iduUp7y7ppSuUYArw
sZQgoCPNAzFL6aiNDAQLkYi3XbnhloEXIhY1qJRBMgSr1l3mpxvAWCECEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIq8HDl4pw85wxWhGarPSU8HhN53MB8GA1UdIwQY
MBaAFPayyJ0x9hdRaoYKeCK7poJIp2mgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MTdiZDYtOGJkMy00YzI4LTgyNWYt
MTQ3NWQyMmRjMTYyLzEvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MTdiZDYtOGJkMy00YzI4LTgyNWYtMTQ3NWQyMmRjMTYy
LzEvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6FSaZXM
0588K+rpbJPARostPE6M0wWiYNv3ovHjx5N8Y6HAP3SKPAyQ4jXhDFsT++AfuI5w
ZuBrhnuLoPSvYDk6DdgND0pe3x6SlmqZeesdbgnJTBzlyp3hCtHDMWqoXedtuQB0
81ZR3mAvGPuoEPZaMBZ5DY4SR6hy+EHXXtM+1bKY2lHKdWfivpQ9QfTLbHoiBJ/s
Ix8Znc5cvAZkRTQcJkLvG7hgcSUJnOjKbOSAQ2lh/BZoxH1MHsLd/jFd3G9rI1i9
oU9DRMbg6eDDjgjrZaGbZT6dTpr5g/I9Imh0huldpJqxDFrP+n0GhJHobPeQuBEr
qqlTA45JdhuXWw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:04 2026 by rpki-client