Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File:                     0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier:          F8D0/TP5zdyeMOjPzEfYnHcqZuwqgxYcfc4K1kDfIy4=
Subject key identifier:   E2:40:ED:FA:21:5A:6A:C5:5B:02:44:8D:37:45:4D:72:E6:A8:4F:A4
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer:       /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial:       01A0CF363E8085C3E53E0B7C9D6B74A6E21B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 17:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:33 +0000
Files and hashes:         1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: V/huanY98/gvX3lMNLNHEaPIwOXxhxEtWUZk+sAkFFk=)
                          2: eIIxqZskipAH_XpPhKjF9X-64rY.asa (hash: VTutP00cFHBg9CdpBAccd7neZzunWQqoCOHiZUhg2dY=)
                          3: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:3e:80:85:c3:e5:3e:0b:7c:9d:6b:74:a6:e2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
        Validity
            Not Before: Sep 23 17:00:33 2026 GMT
            Not After : Sep 24 17:00:33 2026 GMT
        Subject: CN=e240edfa215a6ac55b02448d37454d72e6a84fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:35:79:cb:5a:d8:d9:f0:0e:82:ce:fe:c9:
                    6e:db:32:45:71:45:fb:ac:93:e1:e5:96:be:74:60:
                    36:a8:6b:39:5c:89:22:a1:17:87:4f:05:42:44:c4:
                    49:c0:04:d8:22:b1:c9:9f:65:60:c1:ce:eb:9d:53:
                    de:25:88:38:a4:ea:e3:37:87:6e:49:96:ff:34:81:
                    38:75:76:98:c0:98:08:91:63:aa:18:aa:57:13:ed:
                    0a:df:2d:f5:33:03:9f:ae:5f:0e:b6:14:d5:9a:2f:
                    6f:13:19:29:f4:5a:f7:b1:21:c5:e5:f5:95:52:e1:
                    3e:2a:c4:b8:bb:bd:fa:02:88:51:92:8f:24:cd:c7:
                    f8:19:7a:83:4f:6f:f2:88:be:fb:2c:fe:c8:6d:ff:
                    0c:46:33:b9:70:81:09:4a:72:30:0a:d1:54:4e:1e:
                    68:4f:c7:bb:3e:fd:6a:31:60:5f:71:d8:82:9f:2e:
                    7a:65:15:7e:7e:d4:f7:94:37:cb:29:0b:f5:b5:91:
                    b6:7d:42:98:1b:48:ee:21:d9:3e:95:06:51:ce:08:
                    21:1d:3e:4c:16:37:66:7f:ee:9e:31:d6:69:23:cf:
                    b2:5e:0f:b2:79:3a:58:69:06:1b:53:9d:0f:e4:2f:
                    9b:da:ea:ca:1d:1e:3e:24:49:ab:0e:a4:05:f1:bb:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:40:ED:FA:21:5A:6A:C5:5B:02:44:8D:37:45:4D:72:E6:A8:4F:A4
            X509v3 Authority Key Identifier:
                keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:81:00:88:30:5d:b4:49:10:63:d6:68:c3:e8:64:25:49:
         0d:95:60:9f:5d:fa:5e:9f:d4:17:e3:a5:5b:fb:97:38:eb:86:
         c4:6c:43:d9:62:77:ac:34:54:a4:00:b7:e5:44:fb:1a:64:b3:
         68:67:eb:7c:d4:c2:70:5e:9f:98:16:65:41:d8:56:ac:36:23:
         11:91:ed:3a:9c:f4:37:43:7b:96:28:e9:e6:d3:d9:78:08:be:
         d1:d4:3b:7c:20:68:fb:c8:90:f1:35:66:81:c3:35:1d:ab:1e:
         70:0a:db:1c:21:d3:02:0d:d4:b7:a2:16:ec:1b:ef:c2:65:b1:
         05:82:da:79:e1:62:52:8d:cf:f6:94:d8:6f:f8:c2:62:3f:15:
         db:51:ad:7d:4e:3f:af:0c:80:47:39:c5:39:28:df:9b:88:11:
         e3:f9:b1:a9:be:07:6b:32:91:de:0d:4c:e6:07:54:13:63:53:
         df:7a:4e:d8:01:65:fe:d1:d9:63:f3:16:34:ab:b8:cf:5b:69:
         9c:10:b8:80:46:9c:1e:1e:23:be:c5:3b:f7:d1:6e:3a:10:b6:
         62:3e:f5:d9:41:29:d8:50:5a:b6:72:86:6e:11:92:86:26:54:
         74:01:c9:b9:a7:4d:a6:dc:5c:67:b2:72:37:74:d2:8d:38:c2:
         d9:41:f8:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNj6AhcPlPgt8nWt0puIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYmI2NmZiZGVhYWZmZjQzYjk2NTBiMWY2Y2JlNGYyOWVk
YWY1OGMwHhcNMjYwOTIzMTcwMDMzWhcNMjYwOTI0MTcwMDMzWjAzMTEwLwYDVQQD
EyhlMjQwZWRmYTIxNWE2YWM1NWIwMjQ0OGQzNzQ1NGQ3MmU2YTg0ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKA1ecta2NnwDoLO/slu2zJFcUX7
rJPh5Za+dGA2qGs5XIkioReHTwVCRMRJwATYIrHJn2Vgwc7rnVPeJYg4pOrjN4du
SZb/NIE4dXaYwJgIkWOqGKpXE+0K3y31MwOfrl8OthTVmi9vExkp9Fr3sSHF5fWV
UuE+KsS4u736AohRko8kzcf4GXqDT2/yiL77LP7Ibf8MRjO5cIEJSnIwCtFUTh5o
T8e7Pv1qMWBfcdiCny56ZRV+ftT3lDfLKQv1tZG2fUKYG0juIdk+lQZRzgghHT5M
Fjdmf+6eMdZpI8+yXg+yeTpYaQYbU50P5C+b2urKHR4+JEmrDqQF8buTQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJA7fohWmrFWwJEjTdFTXLmqE+kMB8GA1UdIwQY
MBaAFNK7Zvveqv/0O5ZQsfbL5PKe2vWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMt
Y2IwZjI0NTVjYmQ2LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMtY2IwZjI0NTVjYmQ2
LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIuBAIgw
XbRJEGPWaMPoZCVJDZVgn136Xp/UF+OlW/uXOOuGxGxD2WJ3rDRUpAC35UT7GmSz
aGfrfNTCcF6fmBZlQdhWrDYjEZHtOpz0N0N7lijp5tPZeAi+0dQ7fCBo+8iQ8TVm
gcM1HasecArbHCHTAg3Ut6IW7BvvwmWxBYLaeeFiUo3P9pTYb/jCYj8V21GtfU4/
rwyARznFOSjfm4gR4/mxqb4HazKR3g1M5gdUE2NT33pO2AFl/tHZY/MWNKu4z1tp
nBC4gEacHh4jvsU799FuOhC2Yj712UEp2FBatnKGbhGShiZUdAHJuadNptxcZ7Jy
N3TSjTjC2UH4yA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:24:01 2026 by rpki-client