Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File:                     l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier:          92mQOlpDnhVNu0IU609eNNafNwE6+4lAV0vBMOpTpLY=
Subject key identifier:   71:DE:04:D0:BD:AD:A3:6D:04:59:38:7E:2F:AD:33:DC:07:CE:CC:54
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer:       /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial:       01A0CF35D94FA9D26AF2EDD2164F1996AD46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number:          09DE
Signing time:             Wed 23 Sep 2026 17:00:07 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:07 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:07 +0000
Files and hashes:         1: 1-8xMaqkH_5xZ3uxccVsqaTzU7IQ.roa (hash: ma/odS797klUEA34iGL6RT7n0eSaHogxuFxNTM6qcBM=)
                          2: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: BOOgzcqneujRL5FJoj29oigkM39oHtgHlBnWO4IQBw8=)
                          3: ly4jAghIqZcQUeWo_GsyRA8lugc.roa (hash: hPss/Kqk0zlga1lABVmDknuY7c7zTOu7Fb+2VoC/L1Y=)
                          4: o_HyBkikAR9w1apxuJDVKF2p-3Y.roa (hash: elrFF3wLFffPqJSdmbrmGaLjv6ONKW+nsnV6avvP20k=)
                          5: sVT6ylubpnSl9Wo3Q1UIodxgUTA.roa (hash: XIJ9HqJKdhG3i/7uPJ3bJoLhrTdl04nl6aE6hwyGjnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:35:d9:4f:a9:d2:6a:f2:ed:d2:16:4f:19:96:ad:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
        Validity
            Not Before: Sep 23 17:00:07 2026 GMT
            Not After : Sep 24 17:00:07 2026 GMT
        Subject: CN=71de04d0bdada36d0459387e2fad33dc07cecc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:29:f8:f2:c1:c2:dc:39:f8:ed:a2:43:7b:
                    88:90:22:ef:a7:3e:55:86:25:ed:fa:28:51:b6:7c:
                    2c:a7:a0:cc:0a:65:fd:36:69:20:ba:97:cb:f1:16:
                    73:cd:e4:e6:d6:dc:b8:c6:07:9b:02:14:a1:79:5b:
                    56:0e:33:5f:30:ae:02:86:60:4a:96:2b:b0:db:57:
                    f8:62:9a:45:87:dc:26:12:1a:a3:eb:20:ff:8a:22:
                    75:02:8a:64:ea:7a:47:f0:f4:ac:0d:6b:fc:5f:56:
                    8c:3f:e1:3b:91:af:eb:0d:8a:b4:8e:1e:46:78:a3:
                    6a:e2:45:12:c8:a7:57:29:aa:0a:9d:fa:0c:6c:a6:
                    46:ba:79:3f:81:a2:e9:e3:e2:8d:fa:d7:83:21:df:
                    43:1a:1f:c0:4b:d8:33:ab:89:35:ab:e6:08:0a:a0:
                    1d:1a:83:b9:12:31:c1:d2:e4:ed:82:29:68:b8:5e:
                    a3:5f:8b:02:4d:b8:27:54:2d:9d:00:f6:0a:aa:e1:
                    f2:2f:e6:00:ee:39:c3:d7:03:72:da:c5:7e:2a:54:
                    cc:89:d3:84:f4:6b:85:82:dd:e8:b7:e9:1d:69:40:
                    36:b2:dc:09:ef:bc:5e:49:e0:48:3f:d6:57:f8:71:
                    80:23:82:f9:38:88:22:72:37:7a:26:4e:ae:58:e8:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DE:04:D0:BD:AD:A3:6D:04:59:38:7E:2F:AD:33:DC:07:CE:CC:54
            X509v3 Authority Key Identifier:
                keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:e9:07:a6:72:36:d3:f2:85:8d:21:a7:65:02:d1:12:a5:
         0d:5f:ec:ae:f4:a1:73:f0:2e:14:b3:ed:0e:d9:86:c0:2c:e4:
         f3:e8:b4:f6:c2:9f:f4:c5:dc:a8:a6:cc:8a:e7:ae:e0:7d:0b:
         42:73:3b:f6:bb:0e:ea:80:5d:7c:89:6f:0f:d5:ae:2e:42:e1:
         25:e0:51:8e:97:d2:41:52:6b:42:87:4e:90:bd:63:29:5a:29:
         c6:f3:35:94:79:f1:16:0f:7a:bd:7d:7b:d9:03:43:03:4e:b8:
         17:47:ec:3d:be:f8:2e:53:56:72:f2:37:3d:b0:53:65:37:f0:
         98:f9:6f:b2:ee:05:6f:3e:ff:14:bd:9a:69:9c:53:46:06:e0:
         9b:53:e2:e9:cd:5e:92:a9:e2:5e:07:66:df:b5:0d:e9:fc:8d:
         53:d6:53:60:09:5a:2d:60:8e:f4:11:5e:8e:d6:7b:a7:fd:ef:
         89:6c:1d:0c:82:5a:d6:58:ed:b6:3e:4f:e2:97:30:f2:79:bf:
         27:d9:90:87:40:f9:11:cf:3a:9f:d0:34:0d:19:fc:a2:f6:59:
         c4:7e:70:2e:a8:9c:cd:81:66:0c:00:dc:3a:21:83:fe:39:dc:
         29:e4:14:fa:18:37:4c:d2:72:95:26:73:d8:5a:26:9c:c4:4a:
         f6:90:7b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNdlPqdJq8u3SFk8Zlq1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj
YjU2Y2EwHhcNMjYwOTIzMTcwMDA3WhcNMjYwOTI0MTcwMDA3WjAzMTEwLwYDVQQD
Eyg3MWRlMDRkMGJkYWRhMzZkMDQ1OTM4N2UyZmFkMzNkYzA3Y2VjYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XEp+PLBwtw5+O2iQ3uIkCLvpz5V
hiXt+ihRtnwsp6DMCmX9NmkgupfL8RZzzeTm1ty4xgebAhSheVtWDjNfMK4ChmBK
liuw21f4YppFh9wmEhqj6yD/iiJ1Aopk6npH8PSsDWv8X1aMP+E7ka/rDYq0jh5G
eKNq4kUSyKdXKaoKnfoMbKZGunk/gaLp4+KN+teDId9DGh/AS9gzq4k1q+YICqAd
GoO5EjHB0uTtgilouF6jX4sCTbgnVC2dAPYKquHyL+YA7jnD1wNy2sV+KlTMidOE
9GuFgt3ot+kdaUA2stwJ77xeSeBIP9ZX+HGAI4L5OIgicjd6Jk6uWOjEOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHeBNC9raNtBFk4fi+tM9wHzsxUMB8GA1UdIwQY
MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt
Y2RmNGM2YjQyNGUxLzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx
LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhb3pB6Zy
NtPyhY0hp2UC0RKlDV/srvShc/AuFLPtDtmGwCzk8+i09sKf9MXcqKbMiueu4H0L
QnM79rsO6oBdfIlvD9WuLkLhJeBRjpfSQVJrQodOkL1jKVopxvM1lHnxFg96vX17
2QNDA064F0fsPb74LlNWcvI3PbBTZTfwmPlvsu4Fbz7/FL2aaZxTRgbgm1Pi6c1e
kqniXgdm37UN6fyNU9ZTYAlaLWCO9BFejtZ7p/3viWwdDIJa1ljttj5P4pcw8nm/
J9mQh0D5Ec86n9A0DRn8ovZZxH5wLqiczYFmDADcOiGD/jncKeQU+hg3TNJylSZz
2FomnMRK9pB7+A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:02:55 2026 by rpki-client