Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File:                     aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier:          yAUXDfZHv5yqNsEY0WqcPDysnXuPdSWNbQXbt4Jl+T4=
Subject key identifier:   D8:76:B3:DC:0B:74:D2:F2:51:20:9D:B7:24:45:0F:61:26:95:36:80
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer:       /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial:       01A0E173E2165FDF697B836F4071524A449D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number:          079B
Signing time:             Sun 27 Sep 2026 06:01:03 +0000
Manifest this update:     Sun 27 Sep 2026 06:01:03 +0000
Manifest next update:     Mon 28 Sep 2026 06:01:03 +0000
Files and hashes:         1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: Uo+0UD7bpasvH9KDDp6WO1eK8DSLk4pvX2FTY91/GB4=)
                          2: cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa (hash: UR08Hy/azzQ+483DEHzJsxzgFkrpBPCwomIM+T0eyWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:73:e2:16:5f:df:69:7b:83:6f:40:71:52:4a:44:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
        Validity
            Not Before: Sep 27 06:01:03 2026 GMT
            Not After : Sep 28 06:01:03 2026 GMT
        Subject: CN=d876b3dc0b74d2f251209db724450f6126953680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:f9:77:ab:08:33:10:cb:f6:59:8f:0d:eb:
                    48:55:aa:52:31:08:b7:c8:16:d3:d8:57:89:93:b5:
                    3f:05:a2:9c:04:6e:1e:74:47:5d:68:1f:76:82:82:
                    d7:84:81:5d:69:63:e8:a8:3c:6a:39:0e:0d:16:5a:
                    4b:4f:d8:64:85:df:f5:1b:15:4a:b3:a6:0e:1a:e7:
                    d5:c9:a1:f0:4a:58:0b:96:1d:10:ef:7d:f9:4a:a9:
                    27:e7:7c:78:a9:b5:68:65:5d:36:ab:39:f6:25:fb:
                    48:bf:d9:10:31:7a:fd:5e:b4:1e:5d:19:ec:77:65:
                    43:21:f3:62:0f:2c:06:87:c0:2d:7e:77:9b:c6:b6:
                    8e:a2:60:2f:d5:be:49:fa:c3:9e:d3:2c:a5:89:7a:
                    17:7f:92:94:23:42:6c:d7:09:31:57:77:bf:c5:85:
                    40:6c:e4:80:2f:1c:c3:8b:e4:49:9b:09:18:f7:3a:
                    9a:bc:7d:f6:1b:79:dc:f3:ab:a7:d0:71:de:9f:e8:
                    ca:a3:63:e2:3e:f0:15:92:b9:a8:3b:ce:fe:d0:8f:
                    6f:19:a1:58:5e:cc:8c:cf:16:da:55:11:f5:ef:d6:
                    1e:94:54:60:72:f7:1a:c5:eb:df:6c:ec:c6:01:c0:
                    cd:2e:c6:5e:a6:e9:51:ef:0d:6b:e4:ae:71:54:a4:
                    89:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:76:B3:DC:0B:74:D2:F2:51:20:9D:B7:24:45:0F:61:26:95:36:80
            X509v3 Authority Key Identifier:
                keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:00:ca:0c:fc:20:da:d1:e8:f6:a4:f6:bd:0b:19:09:d7:57:
         55:d2:a5:1e:ab:a3:6e:07:c4:2b:88:18:58:fc:d7:3d:d0:44:
         09:c2:b6:d7:c4:db:78:36:a9:9b:d8:36:9b:a5:95:6c:ff:25:
         fc:db:56:6d:37:7c:f6:bb:0c:cc:30:24:82:eb:83:e7:ee:53:
         4a:4c:d4:01:9c:79:55:76:b5:bb:51:22:e3:92:7e:f9:0c:17:
         81:42:76:6b:24:d7:cb:2d:c6:36:1b:5f:f4:ff:3e:aa:71:b8:
         15:af:d7:41:dc:74:da:ff:1e:89:0e:92:b5:5e:c6:06:92:bf:
         0a:de:e9:45:58:36:00:17:ec:b3:81:ab:e6:9b:7d:57:b5:54:
         f1:05:ea:e5:6c:a4:57:18:bf:ab:73:3d:3d:eb:63:bd:bc:f5:
         25:c4:a2:48:34:8b:9d:fc:4a:87:a3:1c:e8:df:2c:52:bb:37:
         4c:c4:6c:fe:02:b6:cd:0b:8e:51:a1:1a:e1:fb:45:a6:2e:63:
         be:a1:d7:83:8f:7f:2e:6f:7f:1e:04:9b:99:18:0d:d3:50:3d:
         9c:ac:fe:41:98:d9:d3:5b:43:61:bc:d0:57:79:52:52:cc:f6:
         e6:fe:7b:f3:d9:89:a7:e4:d2:1f:6f:9d:1a:bf:2a:01:1f:fc:
         0d:d2:d4:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhc+IWX99pe4NvQHFSSkSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTJkMDRhYjBjMzdhNDczYjFmYzgxYTM2OWZjOWFkNWQ5
ZmZkNDQwHhcNMjYwOTI3MDYwMTAzWhcNMjYwOTI4MDYwMTAzWjAzMTEwLwYDVQQD
EyhkODc2YjNkYzBiNzRkMmYyNTEyMDlkYjcyNDQ1MGY2MTI2OTUzNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk/5d6sIMxDL9lmPDetIVapSMQi3
yBbT2FeJk7U/BaKcBG4edEddaB92goLXhIFdaWPoqDxqOQ4NFlpLT9hkhd/1GxVK
s6YOGufVyaHwSlgLlh0Q7335Sqkn53x4qbVoZV02qzn2JftIv9kQMXr9XrQeXRns
d2VDIfNiDywGh8AtfnebxraOomAv1b5J+sOe0yyliXoXf5KUI0Js1wkxV3e/xYVA
bOSALxzDi+RJmwkY9zqavH32G3nc86un0HHen+jKo2PiPvAVkrmoO87+0I9vGaFY
XsyMzxbaVRH179YelFRgcvcaxevfbOzGAcDNLsZepulR7w1r5K5xVKSJ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh2s9wLdNLyUSCdtyRFD2EmlTaAMB8GA1UdIwQY
MBaAFGkS0Eqww3pHOx/IGjafya1dn/1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQt
ZjIxYjRmMTFmYWYwLzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQtZjIxYjRmMTFmYWYw
LzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmADKDPwg
2tHo9qT2vQsZCddXVdKlHqujbgfEK4gYWPzXPdBECcK218TbeDapm9g2m6WVbP8l
/NtWbTd89rsMzDAkguuD5+5TSkzUAZx5VXa1u1Ei45J++QwXgUJ2ayTXyy3GNhtf
9P8+qnG4Fa/XQdx02v8eiQ6StV7GBpK/Ct7pRVg2ABfss4Gr5pt9V7VU8QXq5Wyk
Vxi/q3M9Petjvbz1JcSiSDSLnfxKh6Mc6N8sUrs3TMRs/gK2zQuOUaEa4ftFpi5j
vqHXg49/Lm9/HgSbmRgN01A9nKz+QZjZ01tDYbzQV3lSUsz25v5789mJp+TSH2+d
Gr8qAR/8DdLU+A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:14:00 2026 by rpki-client