Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File:                     d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier:          j6PAzEOk2MnRr28giyGnLOZ9RtNty1ZvPxwF2wXYuHo=
Subject key identifier:   9A:57:9E:1A:B0:82:12:BE:68:8A:A3:4D:B1:20:EB:55:CA:DD:78:3A
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer:       /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial:       01A0E0CF487301AFBBBA720CE714BD4927F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number:          0A9B
Signing time:             Sun 27 Sep 2026 03:01:15 +0000
Manifest this update:     Sun 27 Sep 2026 03:01:15 +0000
Manifest next update:     Mon 28 Sep 2026 03:01:15 +0000
Files and hashes:         1: 9F2fGaXqkwYq7hsidHwhVUABVT0.roa (hash: b+5jUhu8wzSR5Hz+8wVW5uNIAXefzuPQ7RL1+84Zd/s=)
                          2: FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa (hash: ev1W9ohjVf7Q0Z9nGx/i+Cc2wNkdLs6mHMbE9kefqiU=)
                          3: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: OVAFLbi4RAYtIljg7pVzkLNFx3fYd/co9NpIX3Z5L1w=)
                          4: yj4Baoa8O0cK9liPFSajl18EXPE.roa (hash: qR4NJRolj3aKBGShXLhpMIVXbSB+hmucW84pdI75rZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:cf:48:73:01:af:bb:ba:72:0c:e7:14:bd:49:27:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
        Validity
            Not Before: Sep 27 03:01:15 2026 GMT
            Not After : Sep 28 03:01:15 2026 GMT
        Subject: CN=9a579e1ab08212be688aa34db120eb55cadd783a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:db:04:19:48:ba:ff:ce:11:ae:b2:7d:3b:
                    5d:bf:a8:9b:55:01:4c:85:6c:ba:45:60:b8:b4:47:
                    6f:84:86:15:2d:51:fa:28:16:3a:3e:65:dd:25:3e:
                    e9:3a:83:38:36:be:2a:b4:60:3e:45:f7:fb:3d:53:
                    b5:14:6e:cc:27:d7:a1:18:69:ad:2d:9e:b9:78:78:
                    8d:c5:86:b7:f4:b6:6d:91:f4:3f:2d:fb:28:db:ae:
                    5a:e1:e4:d0:92:94:54:63:f4:45:f3:58:6d:55:84:
                    cd:ba:df:d4:08:3c:fd:d4:50:78:6b:c0:dd:00:dc:
                    39:9b:78:8e:e9:9e:d5:a1:d8:0e:e3:95:1f:18:13:
                    b2:b8:e2:21:04:af:54:1c:52:51:ee:18:5d:e0:5c:
                    c9:79:d1:39:c5:09:1b:33:9d:e3:41:0c:af:f2:fe:
                    3e:b0:4a:c3:b8:95:8f:cd:91:29:c9:a0:36:13:3e:
                    63:1c:37:97:28:9a:b4:cd:2b:ff:6b:44:b1:1f:c3:
                    90:b8:d5:32:b2:4c:ad:0e:cb:fc:56:02:34:62:50:
                    bb:4a:de:0f:98:c6:e6:ab:54:78:e1:b7:53:64:d3:
                    34:ac:3c:3b:fb:6b:af:05:3c:5a:fe:c5:44:29:39:
                    a9:e8:20:c4:9f:c5:19:c1:13:7c:f0:f3:29:c8:f8:
                    a5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:57:9E:1A:B0:82:12:BE:68:8A:A3:4D:B1:20:EB:55:CA:DD:78:3A
            X509v3 Authority Key Identifier:
                keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:05:d0:40:82:3a:ef:17:79:41:7c:2e:a1:c4:a9:7d:59:36:
         47:54:ba:dd:9b:32:b3:c6:8f:07:e9:b4:62:f4:29:a8:da:89:
         6f:1b:4b:00:cd:6c:ce:32:b5:7f:e7:57:24:c5:fa:80:fe:f7:
         70:de:31:c0:a2:bb:92:00:6e:59:f7:b8:91:9d:4c:90:b6:07:
         80:f7:15:ea:9c:f4:8e:09:2b:f1:28:d6:f8:a1:21:43:7e:14:
         3a:21:12:21:a9:b8:f6:cf:03:a1:b2:cf:3a:59:dd:84:95:38:
         cd:43:b5:84:7b:a7:67:97:06:e1:93:17:8f:f1:5a:e8:6c:99:
         dd:fa:d9:cc:4a:82:d2:0b:23:99:9b:04:83:57:c3:a8:50:a7:
         a5:12:db:c3:42:ca:d1:59:57:da:ee:fa:11:50:b6:88:20:d3:
         a8:f2:0e:2f:65:4a:c5:bb:34:91:eb:02:67:ac:d5:98:2a:57:
         4a:b0:73:76:a2:2e:bf:38:54:76:99:a5:af:09:8b:1f:f8:bd:
         3c:c3:de:46:2a:ce:19:2b:6d:76:ac:d9:ee:ed:cc:49:7e:e9:
         d5:a3:cc:02:7c:c5:43:ab:0c:89:cf:d8:28:d7:a5:40:26:e2:
         76:50:7d:37:1e:a5:d2:4d:fd:81:94:2a:c4:8f:fb:32:f1:04:
         98:40:dc:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgz0hzAa+7unIM5xS9SSfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NTVjZDhiZTcxZTI5ZTcyZDk2OTBjN2NkNDA4N2I1ZjI2
MTE2ZjAwHhcNMjYwOTI3MDMwMTE1WhcNMjYwOTI4MDMwMTE1WjAzMTEwLwYDVQQD
Eyg5YTU3OWUxYWIwODIxMmJlNjg4YWEzNGRiMTIwZWI1NWNhZGQ3ODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj/bBBlIuv/OEa6yfTtdv6ibVQFM
hWy6RWC4tEdvhIYVLVH6KBY6PmXdJT7pOoM4Nr4qtGA+Rff7PVO1FG7MJ9ehGGmt
LZ65eHiNxYa39LZtkfQ/Lfso265a4eTQkpRUY/RF81htVYTNut/UCDz91FB4a8Dd
ANw5m3iO6Z7VodgO45UfGBOyuOIhBK9UHFJR7hhd4FzJedE5xQkbM53jQQyv8v4+
sErDuJWPzZEpyaA2Ez5jHDeXKJq0zSv/a0SxH8OQuNUyskytDsv8VgI0YlC7St4P
mMbmq1R44bdTZNM0rDw7+2uvBTxa/sVEKTmp6CDEn8UZwRN88PMpyPilIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpXnhqwghK+aIqjTbEg61XK3Xg6MB8GA1UdIwQY
MBaAFHdVzYvnHinnLZaQx81Ah7XyYRbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQt
ZTAyMWY4Y2U2YzUxLzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQtZTAyMWY4Y2U2YzUx
LzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgXQQII6
7xd5QXwuocSpfVk2R1S63Zsys8aPB+m0YvQpqNqJbxtLAM1szjK1f+dXJMX6gP73
cN4xwKK7kgBuWfe4kZ1MkLYHgPcV6pz0jgkr8SjW+KEhQ34UOiESIam49s8DobLP
OlndhJU4zUO1hHunZ5cG4ZMXj/Fa6GyZ3frZzEqC0gsjmZsEg1fDqFCnpRLbw0LK
0VlX2u76EVC2iCDTqPIOL2VKxbs0kesCZ6zVmCpXSrBzdqIuvzhUdpmlrwmLH/i9
PMPeRirOGSttdqzZ7u3MSX7p1aPMAnzFQ6sMic/YKNelQCbidlB9Nx6l0k39gZQq
xI/7MvEEmEDc7A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:10:17 2026 by rpki-client