Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File:                     9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier:          b9fnrDDUu2zNmVgMRLvZyYBGKA5QRhOqHxATdCuSrSI=
Subject key identifier:   4B:19:F2:C0:D4:01:CF:EB:A0:08:AC:79:E3:23:66:33:77:8E:09:5C
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer:       /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial:       01A0D3EFCAF974BDBA28F5E9766048E5C4CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 15:01:42 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:42 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:42 +0000
Files and hashes:         1: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: iElfps6/ED7lf+cFGTaybQtQN67+gQ63WkcFoCCSrok=)
                          2: JuwdF3pXKULgX8rdBkYwVawnKUg.roa (hash: J6niK53xMmSAm4XjHsm9sqSbekhWgzfMokxnfXFEmFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:ca:f9:74:bd:ba:28:f5:e9:76:60:48:e5:c4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Validity
            Not Before: Sep 24 15:01:42 2026 GMT
            Not After : Sep 25 15:01:42 2026 GMT
        Subject: CN=4b19f2c0d401cfeba008ac79e3236633778e095c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:85:f7:36:5b:ec:a2:c9:c2:df:ca:b3:87:
                    08:11:ac:b5:e5:e4:a1:5f:3b:cd:48:e7:22:8d:f9:
                    6c:71:c9:7d:79:fd:b5:02:c5:3d:7b:d0:12:9d:40:
                    26:a0:2f:10:1e:c3:fc:0e:52:dd:6c:3c:38:a9:b7:
                    96:a6:55:47:8d:c6:60:6f:42:ef:3c:ea:6d:eb:6c:
                    6e:28:30:7c:01:78:28:2e:47:65:e1:50:40:92:10:
                    b8:9e:32:2c:1e:ff:3f:93:fe:3c:32:da:e1:a3:a7:
                    dd:9a:a2:69:98:0f:16:30:80:a3:d9:55:9f:2e:31:
                    55:20:62:44:e0:c9:e6:31:16:ad:e0:02:23:f6:53:
                    21:36:72:c8:1d:ec:3b:0b:69:bb:60:a3:ac:3f:5b:
                    2e:aa:ab:52:d7:4a:af:fe:e6:aa:e5:bf:c0:d1:96:
                    de:7f:d7:b3:af:97:ab:b9:78:ef:37:6a:56:fd:5f:
                    4f:99:50:15:95:0a:31:bf:56:ff:05:97:16:14:07:
                    23:46:77:15:4c:a1:7e:b7:c0:99:90:5d:ee:12:31:
                    35:eb:e2:99:e9:8b:f9:bb:ce:af:93:e3:c2:38:e0:
                    f0:5a:1b:ac:2d:0c:08:7d:e1:dc:7e:e5:e7:26:d4:
                    46:56:0d:24:a9:5d:71:a6:c2:04:9a:7b:79:ea:9d:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:19:F2:C0:D4:01:CF:EB:A0:08:AC:79:E3:23:66:33:77:8E:09:5C
            X509v3 Authority Key Identifier:
                keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d1:f7:77:47:14:40:27:da:61:f7:94:c0:3f:09:02:34:1b:
         4e:d7:30:d9:fc:64:33:68:b0:53:1a:df:77:6d:24:9b:38:1b:
         ba:e5:e6:5a:16:fb:49:0f:cd:8f:83:ff:4c:2b:d4:0e:b9:8f:
         13:8f:ae:7e:07:b0:e4:83:94:0c:af:17:a1:fb:0e:e4:53:8c:
         67:e4:b4:8e:df:51:6e:d3:39:54:12:c4:0c:db:db:00:8a:e2:
         11:80:df:a5:0e:8d:58:db:0c:76:b4:0c:0d:cf:c9:d6:40:cc:
         6c:02:e5:7b:b2:43:fb:6c:f3:db:0b:70:c9:bd:65:b8:a0:10:
         76:7c:ca:28:bb:3a:bd:43:11:2a:db:93:e0:da:18:a9:10:60:
         c6:4d:8c:9b:a9:e8:83:ba:dc:bb:64:f4:46:df:f4:f5:6b:0a:
         ae:83:51:0a:86:d2:9a:2a:d0:4c:3f:25:7f:f0:4a:a5:4b:61:
         0d:2c:43:fc:84:3d:23:6a:0e:6e:8f:8a:d3:b7:3c:48:7a:5a:
         5a:eb:59:87:58:b2:ab:0f:8e:8f:14:2d:83:f4:de:8c:00:52:
         76:c5:43:9d:f4:3d:22:46:f7:83:91:0d:6c:e4:84:90:09:a4:
         1b:01:3a:a6:24:dd:b4:ea:c4:fe:6c:a6:34:cb:00:82:a0:9b:
         19:65:9b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT78r5dL26KPXpdmBI5cTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2N2VkNGY3ZDM1NTc1MjgxYzE3NmNhZTNkZGNiZDQwY2M1
YzFkZDYwHhcNMjYwOTI0MTUwMTQyWhcNMjYwOTI1MTUwMTQyWjAzMTEwLwYDVQQD
Eyg0YjE5ZjJjMGQ0MDFjZmViYTAwOGFjNzllMzIzNjYzMzc3OGUwOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2yF9zZb7KLJwt/Ks4cIEay15eSh
XzvNSOcijflsccl9ef21AsU9e9ASnUAmoC8QHsP8DlLdbDw4qbeWplVHjcZgb0Lv
POpt62xuKDB8AXgoLkdl4VBAkhC4njIsHv8/k/48Mtrho6fdmqJpmA8WMICj2VWf
LjFVIGJE4MnmMRat4AIj9lMhNnLIHew7C2m7YKOsP1suqqtS10qv/uaq5b/A0Zbe
f9ezr5eruXjvN2pW/V9PmVAVlQoxv1b/BZcWFAcjRncVTKF+t8CZkF3uEjE16+KZ
6Yv5u86vk+PCOODwWhusLQwIfeHcfuXnJtRGVg0kqV1xpsIEmnt56p0UEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsZ8sDUAc/roAiseeMjZjN3jglcMB8GA1UdIwQY
MBaAFPZ+1PfTVXUoHBdsrj3cvUDMXB3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjct
ZjQ0ODVhZWQ3NDI5LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjctZjQ0ODVhZWQ3NDI5
LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtH3d0cU
QCfaYfeUwD8JAjQbTtcw2fxkM2iwUxrfd20kmzgbuuXmWhb7SQ/Nj4P/TCvUDrmP
E4+ufgew5IOUDK8XofsO5FOMZ+S0jt9RbtM5VBLEDNvbAIriEYDfpQ6NWNsMdrQM
Dc/J1kDMbALle7JD+2zz2wtwyb1luKAQdnzKKLs6vUMRKtuT4NoYqRBgxk2Mm6no
g7rcu2T0Rt/09WsKroNRCobSmirQTD8lf/BKpUthDSxD/IQ9I2oObo+K07c8SHpa
WutZh1iyqw+OjxQtg/TejABSdsVDnfQ9Ikb3g5ENbOSEkAmkGwE6piTdtOrE/mym
NMsAgqCbGWWbFQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:01:40 2026 by rpki-client