Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
File:                     1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json)
Hash identifier:          YClu1bS7a9LQMlTe8aHUs1dbpFktoDBLSfVxzDtRKEg=
Subject key identifier:   D5:A0:F4:DE:55:38:A5:42:77:ED:59:D7:41:75:16:09:EA:DF:B1:86
Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
Certificate issuer:       /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Certificate serial:       01A0D34B0D58EEC38654BE710AE3F1125015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
Manifest number:          0317
Signing time:             Thu 24 Sep 2026 12:01:46 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:46 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:46 +0000
Files and hashes:         1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: r+ny2YsL7PPqdIAwH5luI90IxGlbvSCMS2G6Ro40BIY=)
                          2: iYN0utCjOjCIPINNJfjhuG0vjOg.roa (hash: 7Wnyb9CGOm4TN0ey7ufrrNiIF/X3LDz9AlFMHrkszjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4b:0d:58:ee:c3:86:54:be:71:0a:e3:f1:12:50:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
        Validity
            Not Before: Sep 24 12:01:46 2026 GMT
            Not After : Sep 25 12:01:46 2026 GMT
        Subject: CN=d5a0f4de5538a54277ed59d741751609eadfb186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:0d:49:a3:a9:28:06:44:55:5e:b5:42:4e:
                    d7:1b:97:b2:5b:3b:2e:cb:15:f9:f6:99:a2:cd:98:
                    de:36:15:e5:2c:9a:31:61:5f:38:75:2e:0e:c3:72:
                    ba:03:4d:43:13:8e:a3:5b:14:b5:ec:6d:05:30:1d:
                    45:c5:84:04:23:e4:42:1a:80:54:fd:9e:84:ed:b6:
                    27:c3:6c:27:3d:74:10:9b:d7:42:a7:40:da:7e:ce:
                    c0:a1:98:a2:ab:0b:ba:f1:5d:5f:64:a4:24:50:77:
                    e8:a0:8b:72:a6:e6:96:6a:79:cf:48:6b:c9:79:59:
                    d6:2f:ce:8f:03:78:d8:c3:b9:04:dd:84:53:48:b2:
                    0c:21:31:05:93:ba:07:a1:67:3b:a3:eb:0a:30:5e:
                    10:63:19:39:ef:94:09:78:2f:36:16:d8:c6:fd:d5:
                    7c:8b:55:75:d0:39:8f:1e:74:cb:96:ef:b4:dd:3d:
                    9d:e3:bf:41:71:16:99:36:4c:c4:bd:0f:c8:55:d0:
                    32:af:af:99:3c:33:a5:7b:aa:d8:b1:96:db:2e:bf:
                    2b:2f:ab:99:e9:4d:9f:1b:3f:77:6d:25:6e:90:55:
                    26:eb:6b:7d:5b:3a:7a:5d:2d:08:65:57:c7:d9:08:
                    71:92:fa:99:ed:9c:21:48:ff:82:f1:62:52:cc:74:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A0:F4:DE:55:38:A5:42:77:ED:59:D7:41:75:16:09:EA:DF:B1:86
            X509v3 Authority Key Identifier:
                keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:11:ab:ca:97:66:57:4f:4d:6f:0b:e7:5f:b9:bb:9a:72:04:
         20:a6:ce:75:01:58:1f:06:6e:e8:9d:79:c6:85:40:f0:84:be:
         5c:05:44:20:83:e5:04:49:10:c9:f3:00:16:7a:db:2e:ac:34:
         53:e5:ad:bb:91:c6:a8:d0:34:79:cf:c3:b3:56:f5:34:d3:05:
         f3:38:88:58:dc:86:60:b0:65:f2:f7:ac:03:45:90:64:1d:5a:
         80:46:67:e2:bf:ca:22:a7:4d:9b:f9:28:f5:86:bf:39:77:27:
         fb:b8:3d:37:b2:98:4a:3f:fa:8d:e0:97:61:cd:4f:d4:f8:4a:
         aa:f5:76:70:f4:0c:4b:f6:a0:4d:64:b4:7b:50:1d:20:f0:fb:
         44:17:44:c3:99:e9:85:fa:0d:50:7b:ea:b2:4a:e1:07:60:75:
         b1:ea:95:c0:7c:58:a6:39:5b:7a:92:16:03:5a:ed:76:a3:60:
         65:d8:f3:f0:b7:c9:aa:b1:9d:91:8f:5c:c4:bc:e7:5e:c3:a5:
         32:2c:86:ef:b0:58:94:ae:35:e7:5d:e3:13:1b:fc:aa:d3:ec:
         b8:57:15:cd:b9:c3:88:76:7a:c8:39:39:f2:d9:d8:c5:eb:02:
         3b:b0:d3:bb:ab:c4:0e:a8:ab:3b:81:09:46:ea:b2:11:7e:80:
         31:ee:d6:9f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDTSw1Y7sOGVL5xCuPxElAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNWEyNTk4MmY3Yjc0NzExMmIwZmYzNThmM2QyNGE1NjJj
ZmNmZWMwHhcNMjYwOTI0MTIwMTQ2WhcNMjYwOTI1MTIwMTQ2WjAzMTEwLwYDVQQD
EyhkNWEwZjRkZTU1MzhhNTQyNzdlZDU5ZDc0MTc1MTYwOWVhZGZiMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSkNSaOpKAZEVV61Qk7XG5eyWzsu
yxX59pmizZjeNhXlLJoxYV84dS4Ow3K6A01DE46jWxS17G0FMB1FxYQEI+RCGoBU
/Z6E7bYnw2wnPXQQm9dCp0Dafs7AoZiiqwu68V1fZKQkUHfooItypuaWannPSGvJ
eVnWL86PA3jYw7kE3YRTSLIMITEFk7oHoWc7o+sKMF4QYxk575QJeC82FtjG/dV8
i1V10DmPHnTLlu+03T2d479BcRaZNkzEvQ/IVdAyr6+ZPDOle6rYsZbbLr8rL6uZ
6U2fGz93bSVukFUm62t9Wzp6XS0IZVfH2QhxkvqZ7ZwhSP+C8WJSzHSfIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNWg9N5VOKVCd+1Z10F1Fgnq37GGMB8GA1UdIwQY
MBaAFPpaJZgve3RxErD/NY89JKViz8/sMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sb2xtQzk3ZEhFU3NQODFqejBrcFdMUHotdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNzZkN2FlLWRlNjctNGEwNS1hNzFi
LWRlNzc0YjBlMzFkZi8xLzEtbG9sbUM5N2RIRVNzUDgxanowa3BXTFB6LXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E5Lzc2ZDdhZS1kZTY3LTRhMDUtYTcxYi1kZTc3NGIwZTMx
ZGYvMS8xLWxvbG1DOTdkSEVTc1A4MWp6MGtwV0xQei13LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBGr
ypdmV09NbwvnX7m7mnIEIKbOdQFYHwZu6J15xoVA8IS+XAVEIIPlBEkQyfMAFnrb
Lqw0U+Wtu5HGqNA0ec/Ds1b1NNMF8ziIWNyGYLBl8vesA0WQZB1agEZn4r/KIqdN
m/ko9Ya/OXcn+7g9N7KYSj/6jeCXYc1P1PhKqvV2cPQMS/agTWS0e1AdIPD7RBdE
w5nphfoNUHvqskrhB2B1seqVwHxYpjlbepIWA1rtdqNgZdjz8LfJqrGdkY9cxLzn
XsOlMiyG77BYlK41513jExv8qtPsuFcVzbnDiHZ6yDk58tnYxesCO7DTu6vEDqir
O4EJRuqyEX6AMe7Wnw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:37:22 2026 by rpki-client