Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File:                     20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier:          U9gk2egN7YtLMI3jZiAqIsUrXVkEJhUIogrROcSMwWk=
Subject key identifier:   77:C9:89:DC:0E:30:67:0A:07:3E:52:12:C1:DB:85:AE:2C:7A:4D:34
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer:       /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial:       01A0CF367BC15B9B9B651777BF50FF8A14A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number:          1621
Signing time:             Wed 23 Sep 2026 17:00:49 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:49 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:49 +0000
Files and hashes:         1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: ezTsISr81w/IcXxdbx9uygNBDzRr55ujUtKPkFw1tcs=)
                          2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:7b:c1:5b:9b:9b:65:17:77:bf:50:ff:8a:14:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
        Validity
            Not Before: Sep 23 17:00:49 2026 GMT
            Not After : Sep 24 17:00:49 2026 GMT
        Subject: CN=77c989dc0e30670a073e5212c1db85ae2c7a4d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:50:dc:8f:78:17:9e:ca:cc:8d:37:9f:99:
                    b3:87:38:f8:b9:1a:7a:59:4c:c7:70:23:1c:69:38:
                    05:03:3a:99:12:2f:82:5d:e0:50:55:8c:0a:27:94:
                    28:56:4d:68:b5:f9:2c:e3:0b:eb:37:9e:df:05:cc:
                    73:cd:8d:a0:ea:5e:3b:c0:88:2a:83:66:33:54:84:
                    9e:4c:bd:a9:0b:7e:62:0b:55:27:40:f2:fd:d1:8e:
                    9d:51:a4:4f:cb:62:ca:fe:95:0f:78:9c:3e:b8:02:
                    da:a6:e9:d0:45:34:ab:23:67:fa:de:12:59:4f:c7:
                    ff:54:30:98:92:23:3a:cf:ef:fc:06:30:b1:14:ba:
                    00:eb:09:de:52:01:67:96:a6:c8:1d:d2:35:42:4b:
                    10:d9:1d:e0:87:55:73:26:9f:d6:60:be:b8:7c:25:
                    ba:04:4d:56:02:15:5b:d8:1e:2f:d1:96:f5:0c:89:
                    27:19:e3:c9:25:a5:b8:b0:04:90:16:a0:f4:4e:6f:
                    44:8e:46:39:de:5b:aa:aa:dc:bf:32:73:20:45:50:
                    ca:9e:9a:9c:95:01:86:65:c2:2d:95:d9:c9:62:90:
                    21:0a:d3:dd:4e:c3:f2:db:c4:37:97:61:23:c3:9f:
                    29:a1:90:86:bf:34:c8:d7:8a:6d:a9:ea:64:f9:01:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C9:89:DC:0E:30:67:0A:07:3E:52:12:C1:DB:85:AE:2C:7A:4D:34
            X509v3 Authority Key Identifier:
                keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:80:55:db:77:93:7f:8e:83:ed:97:24:88:73:01:c4:a2:cf:
         d5:af:e5:98:76:e1:0e:e3:0e:6d:7d:eb:15:f2:05:6f:da:95:
         28:b5:25:21:e4:00:43:f1:83:47:b4:6e:dd:7a:fd:24:14:31:
         8a:5b:2c:d1:dc:28:72:5f:22:90:85:63:45:d0:01:1f:28:f7:
         ec:24:e8:85:b2:ef:69:3e:11:b0:91:db:76:c2:6a:9a:ec:b1:
         9e:a1:f8:a5:f3:f8:02:ab:05:4f:bf:31:60:f4:bb:96:c8:cd:
         05:28:c4:e7:23:3e:cc:42:b5:99:c7:4d:31:f3:4c:53:3c:7c:
         a5:bf:61:71:0b:64:fc:68:f8:b5:ce:70:d1:33:52:f8:0c:fd:
         29:80:e4:47:57:a5:15:9d:9b:64:40:81:49:0d:41:f6:fc:05:
         2f:a0:eb:51:36:f7:19:e4:6c:6c:7b:a2:e6:bd:a1:ff:93:c8:
         30:59:e9:49:03:60:85:73:92:fe:a2:84:9d:40:50:e0:43:87:
         c1:fd:e9:42:76:00:9a:74:fb:53:2e:e7:a8:68:78:53:3d:0a:
         e3:cb:bb:c8:ad:f3:a4:93:af:bf:83:ac:ec:a0:74:9e:2a:6b:
         26:cc:15:4f:a8:fe:de:4f:17:27:34:a5:74:5e:44:0a:3a:97:
         4d:bf:6c:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNnvBW5ubZRd3v1D/ihSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDg5ZmJlOTg5OTRjYmMwOThjODc2YmE2M2U1NjBhYzE3
ZTViMmYwHhcNMjYwOTIzMTcwMDQ5WhcNMjYwOTI0MTcwMDQ5WjAzMTEwLwYDVQQD
Eyg3N2M5ODlkYzBlMzA2NzBhMDczZTUyMTJjMWRiODVhZTJjN2E0ZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPRQ3I94F57KzI03n5mzhzj4uRp6
WUzHcCMcaTgFAzqZEi+CXeBQVYwKJ5QoVk1otfks4wvrN57fBcxzzY2g6l47wIgq
g2YzVISeTL2pC35iC1UnQPL90Y6dUaRPy2LK/pUPeJw+uALapunQRTSrI2f63hJZ
T8f/VDCYkiM6z+/8BjCxFLoA6wneUgFnlqbIHdI1QksQ2R3gh1VzJp/WYL64fCW6
BE1WAhVb2B4v0Zb1DIknGePJJaW4sASQFqD0Tm9EjkY53luqqty/MnMgRVDKnpqc
lQGGZcItldnJYpAhCtPdTsPy28Q3l2Ejw58poZCGvzTI14ptqepk+QEBNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfJidwOMGcKBz5SEsHbha4sek00MB8GA1UdIwQY
MBaAFNtIn76YmUy8CYyHa6Y+VgrBflsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQt
ZGVjZWM0MWE3MWQxLzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQtZGVjZWM0MWE3MWQx
LzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYBV23eT
f46D7ZckiHMBxKLP1a/lmHbhDuMObX3rFfIFb9qVKLUlIeQAQ/GDR7Ru3Xr9JBQx
ilss0dwocl8ikIVjRdABHyj37CTohbLvaT4RsJHbdsJqmuyxnqH4pfP4AqsFT78x
YPS7lsjNBSjE5yM+zEK1mcdNMfNMUzx8pb9hcQtk/Gj4tc5w0TNS+Az9KYDkR1el
FZ2bZECBSQ1B9vwFL6DrUTb3GeRsbHui5r2h/5PIMFnpSQNghXOS/qKEnUBQ4EOH
wf3pQnYAmnT7Uy7nqGh4Uz0K48u7yK3zpJOvv4Os7KB0niprJswVT6j+3k8XJzSl
dF5ECjqXTb9sgg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:43:04 2026 by rpki-client