Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File:                     CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier:          0FdA8lgmLXNaEebsgOGXQWzK3JYuFKFTPzCmIYAY+/U=
Subject key identifier:   15:12:9D:B7:4C:10:A5:62:BA:9A:D4:B2:FB:98:CA:F8:7B:00:5A:F5
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer:       /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial:       01A0CBC7549D975785AA7A473F91EFE0D00A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number:          14CD
Signing time:             Wed 23 Sep 2026 01:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:33 +0000
Files and hashes:         1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: Z3O6EAqmNYlYiyUQZCHPvhvxUc3OSmP6vlMf4f65KBI=)
                          2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:54:9d:97:57:85:aa:7a:47:3f:91:ef:e0:d0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
        Validity
            Not Before: Sep 23 01:00:33 2026 GMT
            Not After : Sep 24 01:00:33 2026 GMT
        Subject: CN=15129db74c10a562ba9ad4b2fb98caf87b005af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:e6:c7:55:1a:f2:26:8a:7c:df:0d:ec:87:
                    ba:8d:c7:97:26:02:c3:2f:5e:7c:43:ce:6d:8f:9c:
                    5a:d1:df:74:ec:14:11:65:40:b3:ef:60:41:4c:21:
                    ca:49:c2:67:34:ae:46:17:0f:6d:3b:7c:b0:d4:6e:
                    45:63:17:7b:49:94:07:c2:46:32:37:d3:f0:78:c5:
                    6b:b2:75:2d:0d:9c:01:f7:cb:66:8d:8c:85:40:6c:
                    6b:96:f6:a5:d5:70:6e:b4:52:a3:51:56:f4:f3:45:
                    09:9d:a2:83:f4:01:0e:5a:ba:e9:50:04:c8:12:2a:
                    e0:24:9a:ed:bb:fc:16:3b:ed:b4:75:db:63:4e:a6:
                    0d:b1:2b:0b:06:67:7e:d6:a2:04:64:fe:08:c0:0e:
                    dc:80:83:22:e0:33:94:ea:33:59:ee:90:cc:83:1b:
                    ec:72:74:fc:54:35:8a:16:be:ce:6e:3d:3f:f1:ec:
                    1b:d0:82:43:2e:0f:db:94:d3:43:4f:c0:a1:af:ca:
                    15:e7:d5:ee:7b:5d:97:91:a7:50:a9:f6:e5:61:95:
                    bc:a4:2f:1d:89:c7:c9:60:ac:6d:91:f8:12:56:10:
                    a5:c4:62:23:dc:f2:d1:e0:d7:b8:d1:81:08:0b:23:
                    73:0c:dd:46:b6:4e:fc:d9:25:7b:0a:a0:f8:90:b6:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:12:9D:B7:4C:10:A5:62:BA:9A:D4:B2:FB:98:CA:F8:7B:00:5A:F5
            X509v3 Authority Key Identifier:
                keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d9:3d:23:07:68:52:06:0a:f9:7f:9e:24:16:98:60:ae:c6:
         62:da:30:7a:4f:58:60:46:88:29:ab:81:f6:31:d4:f2:00:b3:
         6d:42:3f:8f:53:b8:83:f8:7a:3e:62:34:3f:4c:9f:a0:0a:e3:
         8f:a3:bb:4c:58:18:ff:f8:61:94:e8:02:e0:11:10:28:fa:77:
         10:42:de:3e:3f:b0:35:40:f4:00:27:3a:b2:a2:1c:9b:22:57:
         e5:8a:f2:e2:5a:22:4d:80:c5:73:36:33:0f:0d:56:01:f0:17:
         10:db:bc:09:3f:e1:70:2c:96:08:ed:a5:02:2d:ad:0f:5b:ca:
         df:a5:6d:8c:7a:26:8f:3b:4b:7d:e6:43:6b:cc:69:aa:d0:00:
         cf:55:27:5b:03:67:ec:3b:cf:44:a0:cb:59:d5:4f:d8:fa:cb:
         8c:cd:1f:e2:0d:8a:5d:5b:cc:6a:ef:ef:b2:5b:c1:92:21:c1:
         96:a7:e7:d6:98:5f:3d:2d:22:88:d9:4a:e1:b4:98:c3:2a:ca:
         f1:2e:82:2f:a7:2b:3e:41:f5:d6:28:2b:85:b8:aa:5e:b1:a6:
         84:10:5f:3f:df:83:50:52:8a:d2:8e:4b:b5:ea:b9:fc:6d:8d:
         87:00:8d:88:6b:ea:bd:e6:22:7b:5b:25:38:52:cf:a8:b1:09:
         81:05:7f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx1Sdl1eFqnpHP5Hv4NAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm
OGMxNGQwHhcNMjYwOTIzMDEwMDMzWhcNMjYwOTI0MDEwMDMzWjAzMTEwLwYDVQQD
EygxNTEyOWRiNzRjMTBhNTYyYmE5YWQ0YjJmYjk4Y2FmODdiMDA1YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzXmx1Ua8iaKfN8N7Ie6jceXJgLD
L158Q85tj5xa0d907BQRZUCz72BBTCHKScJnNK5GFw9tO3yw1G5FYxd7SZQHwkYy
N9PweMVrsnUtDZwB98tmjYyFQGxrlval1XButFKjUVb080UJnaKD9AEOWrrpUATI
EirgJJrtu/wWO+20ddtjTqYNsSsLBmd+1qIEZP4IwA7cgIMi4DOU6jNZ7pDMgxvs
cnT8VDWKFr7Obj0/8ewb0IJDLg/blNNDT8Chr8oV59Xue12XkadQqfblYZW8pC8d
icfJYKxtkfgSVhClxGIj3PLR4Ne40YEICyNzDN1Gtk782SV7CqD4kLY/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUSnbdMEKViuprUsvuYyvh7AFr1MB8GA1UdIwQY
MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt
YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi
LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9k9Iwdo
UgYK+X+eJBaYYK7GYtowek9YYEaIKauB9jHU8gCzbUI/j1O4g/h6PmI0P0yfoArj
j6O7TFgY//hhlOgC4BEQKPp3EELePj+wNUD0ACc6sqIcmyJX5Yry4loiTYDFczYz
Dw1WAfAXENu8CT/hcCyWCO2lAi2tD1vK36VtjHomjztLfeZDa8xpqtAAz1UnWwNn
7DvPRKDLWdVP2PrLjM0f4g2KXVvMau/vslvBkiHBlqfn1phfPS0iiNlK4bSYwyrK
8S6CL6crPkH11igrhbiqXrGmhBBfP9+DUFKK0o5Lteq5/G2NhwCNiGvqveYie1sl
OFLPqLEJgQV/lA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:22:41 2026 by rpki-client