Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
File:                     8vQKwelzpu2pWuj5lPOipGwwGlE.mft (raw, json)
Hash identifier:          cP84EfQALIkHiihNJO8gy+lV6Hh3Tx/XCrsBUr+S/O8=
Subject key identifier:   AB:FC:7F:08:BB:5B:FC:81:B8:93:2D:D6:CE:12:BA:D3:76:D0:72:BF
Authority key identifier: F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
Certificate issuer:       /CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Certificate serial:       01A0E13D3A04D47131C278EDEA8F10E8B0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
Manifest number:          E9
Signing time:             Sun 27 Sep 2026 05:01:21 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:21 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:21 +0000
Files and hashes:         1: 8vQKwelzpu2pWuj5lPOipGwwGlE.crl (hash: wlxRjLbO9by5VSUwQ5RpHfpOldb1NG5+xa+P6jFhfrA=)
                          2: 9eIznmkQ1i1wObSFJhgIo07kbEs.roa (hash: PRIHTF2R61srx/cf5f84GRd6EYSqTtmRTfxJne6LAdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3d:3a:04:d4:71:31:c2:78:ed:ea:8f:10:e8:b0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
        Validity
            Not Before: Sep 27 05:01:21 2026 GMT
            Not After : Sep 28 05:01:21 2026 GMT
        Subject: CN=abfc7f08bb5bfc81b8932dd6ce12bad376d072bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:63:93:4f:94:8b:5e:62:3f:af:65:28:9b:
                    16:35:a5:a8:16:21:39:67:16:8a:2b:f4:9d:da:73:
                    90:22:ea:52:75:2b:aa:76:03:7a:5b:35:04:df:7f:
                    d5:b2:28:fd:fa:6b:23:f3:c7:e8:93:36:b7:de:e6:
                    ef:2c:31:88:f1:4c:2b:78:53:cc:6f:47:bc:ae:df:
                    1d:4a:ff:98:c6:56:e3:07:e1:94:78:97:be:50:a5:
                    52:2d:fb:a0:7e:10:79:04:01:be:9e:e9:ce:63:ff:
                    22:ce:a1:31:63:6c:a3:dd:aa:c3:5d:4c:4e:57:44:
                    51:6d:6f:f0:67:31:24:1c:d5:25:fb:9c:69:3d:1d:
                    02:75:48:63:6d:20:e6:66:25:22:98:14:e6:a2:28:
                    27:ce:c3:c6:ec:b1:67:b6:eb:27:58:97:10:e4:60:
                    b7:27:3d:88:1f:c2:db:bb:70:7e:54:ed:03:65:b3:
                    3d:f2:6f:d2:75:0c:a4:97:99:c1:b6:cf:f9:fc:18:
                    33:c3:42:85:78:10:71:de:dd:7c:61:12:de:7c:46:
                    2b:9f:31:f5:8f:54:8f:6f:c2:3a:83:09:de:5e:21:
                    37:1c:69:28:4f:46:36:82:79:79:a6:3b:f7:13:26:
                    35:bb:ef:8f:ee:15:92:1b:0d:60:aa:41:27:68:cd:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:7F:08:BB:5B:FC:81:B8:93:2D:D6:CE:12:BA:D3:76:D0:72:BF
            X509v3 Authority Key Identifier:
                keyid:F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:04:30:a2:b0:2e:2c:78:16:a8:55:84:72:5e:8b:72:f9:9e:
         08:3f:41:61:48:9c:3c:be:53:93:3f:4e:ef:3a:91:9f:bf:d1:
         1a:03:18:6b:fe:75:34:1b:f2:97:8a:f3:16:9d:64:4d:ac:ce:
         fa:17:9c:68:38:95:bb:43:11:da:cd:0e:51:db:55:07:ec:25:
         e2:41:78:66:21:7f:29:67:d0:75:eb:57:21:4f:b8:92:8b:f9:
         20:5a:2a:be:55:10:db:c4:b1:90:8a:50:02:da:f6:15:77:7f:
         81:ab:e1:15:9b:d3:eb:5b:ba:bb:c4:4d:fe:19:ad:1a:b5:24:
         92:c6:6b:9c:8a:1b:94:4e:b3:71:1e:60:6f:32:70:9e:ed:99:
         09:76:fa:b7:9c:bd:e8:96:f2:70:41:bf:01:c7:61:c4:21:b5:
         99:47:ba:d6:de:dd:12:9f:f9:7b:cb:71:0c:a4:5b:37:ce:62:
         e6:70:89:38:22:ac:62:7a:29:47:d0:80:23:e6:7c:cb:ca:b2:
         6a:43:2b:7e:c8:50:29:77:64:bd:3d:71:5f:83:75:b7:84:e5:
         41:d9:2e:4a:fb:5b:b3:91:73:6e:2d:4a:dd:68:5f:d3:0c:8b:
         eb:41:fb:d3:50:2d:97:44:aa:72:b4:42:49:d5:6e:c5:e2:28:
         9e:df:fe:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhPToE1HExwnjt6o8Q6LCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjQwYWMxZTk3M2E2ZWRhOTVhZThmOTk0ZjNhMmE0NmMz
MDFhNTEwHhcNMjYwOTI3MDUwMTIxWhcNMjYwOTI4MDUwMTIxWjAzMTEwLwYDVQQD
EyhhYmZjN2YwOGJiNWJmYzgxYjg5MzJkZDZjZTEyYmFkMzc2ZDA3MmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncBjk0+Ui15iP69lKJsWNaWoFiE5
ZxaKK/Sd2nOQIupSdSuqdgN6WzUE33/Vsij9+msj88fokza33ubvLDGI8UwreFPM
b0e8rt8dSv+YxlbjB+GUeJe+UKVSLfugfhB5BAG+nunOY/8izqExY2yj3arDXUxO
V0RRbW/wZzEkHNUl+5xpPR0CdUhjbSDmZiUimBTmoignzsPG7LFntusnWJcQ5GC3
Jz2IH8Lbu3B+VO0DZbM98m/SdQykl5nBts/5/Bgzw0KFeBBx3t18YRLefEYrnzH1
j1SPb8I6gwneXiE3HGkoT0Y2gnl5pjv3EyY1u++P7hWSGw1gqkEnaM3c3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKv8fwi7W/yBuJMt1s4SutN20HK/MB8GA1UdIwQY
MBaAFPL0CsHpc6btqVro+ZTzoqRsMBpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZRS3dlbHpwdTJwV3VqNWxQT2lwR3d3R2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mNmRjM2ItYWRjNy00MjI5LWFkODIt
YjcwZmM2YWE5MTVhLzEvOHZRS3dlbHpwdTJwV3VqNWxQT2lwR3d3R2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mNmRjM2ItYWRjNy00MjI5LWFkODItYjcwZmM2YWE5MTVh
LzEvOHZRS3dlbHpwdTJwV3VqNWxQT2lwR3d3R2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgQworAu
LHgWqFWEcl6LcvmeCD9BYUicPL5Tkz9O7zqRn7/RGgMYa/51NBvyl4rzFp1kTazO
+hecaDiVu0MR2s0OUdtVB+wl4kF4ZiF/KWfQdetXIU+4kov5IFoqvlUQ28SxkIpQ
Atr2FXd/gavhFZvT61u6u8RN/hmtGrUkksZrnIoblE6zcR5gbzJwnu2ZCXb6t5y9
6JbycEG/AcdhxCG1mUe61t7dEp/5e8txDKRbN85i5nCJOCKsYnopR9CAI+Z8y8qy
akMrfshQKXdkvT1xX4N1t4TlQdkuSvtbs5Fzbi1K3Whf0wyL60H701Atl0SqcrRC
SdVuxeIont/+xA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:28:38 2026 by rpki-client