Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
File:                     hHyRt2JrFwQf6KdfOVgdo6L_5do.mft (raw, json)
Hash identifier:          7zM/I2/brETIIcC4zrA0icDDZ3od+E2wfk+Qkln4lWw=
Subject key identifier:   B0:A7:53:51:EA:48:BD:BF:E6:32:2D:AC:79:19:E9:F2:CB:87:DB:86
Authority key identifier: 84:7C:91:B7:62:6B:17:04:1F:E8:A7:5F:39:58:1D:A3:A2:FF:E5:DA
Certificate issuer:       /CN=847c91b7626b17041fe8a75f39581da3a2ffe5da
Certificate serial:       01A0E1E1B7846898BF77687A84C2C81E3E29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
Manifest number:          9F
Signing time:             Sun 27 Sep 2026 08:01:01 +0000
Manifest this update:     Sun 27 Sep 2026 08:01:01 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:01 +0000
Files and hashes:         1: cB7PC28F3bY-m09DAAeWUi3RUiA.roa (hash: 3lEL6EkP5eBl9884xVL0N/vy5L6Tqe95mpKiy8EOZ7s=)
                          2: hHyRt2JrFwQf6KdfOVgdo6L_5do.crl (hash: z+GVyIel2c2MXIUbhbekrvaFGXq3okqgOJG8nn0W5oM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e1:b7:84:68:98:bf:77:68:7a:84:c2:c8:1e:3e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c91b7626b17041fe8a75f39581da3a2ffe5da
        Validity
            Not Before: Sep 27 08:01:01 2026 GMT
            Not After : Sep 28 08:01:01 2026 GMT
        Subject: CN=b0a75351ea48bdbfe6322dac7919e9f2cb87db86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:9c:4c:97:cd:44:26:46:ad:ac:20:bd:37:
                    98:78:00:fd:81:c6:3d:a1:2e:e1:d2:6d:fe:84:32:
                    5f:79:72:39:a6:b0:1d:6f:5c:cb:63:63:96:cc:c8:
                    12:a1:f3:6a:75:11:96:3f:89:2e:42:f8:41:80:d5:
                    a3:44:ba:67:2c:50:03:72:b0:24:d5:73:e6:7d:2e:
                    27:00:c4:ce:a6:ad:e1:99:01:7c:00:ad:01:5d:6e:
                    db:f6:8e:be:af:9b:f4:d5:e0:8a:d7:9d:56:89:65:
                    83:c8:1d:97:b9:c2:5e:d4:a1:ad:e9:ca:3f:04:c8:
                    6a:77:3b:16:bc:b7:45:dd:26:ff:b0:51:7a:97:62:
                    5a:c6:53:fa:33:74:64:5e:de:8c:61:fb:c2:2e:18:
                    d6:3a:9b:2d:5a:2d:ce:df:d9:98:37:cf:ae:a5:d9:
                    ff:ce:6c:ef:87:d0:e4:00:70:c6:14:2f:a0:1e:df:
                    4d:89:4b:20:2c:d0:f1:22:96:3a:e0:b6:ff:7d:34:
                    e5:1d:43:c4:da:94:0a:27:af:46:3a:b1:69:b3:49:
                    20:a5:51:7c:98:2e:a0:50:1a:dd:1b:f1:47:f0:a2:
                    da:84:7c:d6:fd:94:c4:e4:ee:ac:66:4f:ed:b2:9c:
                    6c:01:c4:64:d6:63:6d:61:e6:4c:96:2e:29:8a:ba:
                    5e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:53:51:EA:48:BD:BF:E6:32:2D:AC:79:19:E9:F2:CB:87:DB:86
            X509v3 Authority Key Identifier:
                keyid:84:7C:91:B7:62:6B:17:04:1F:E8:A7:5F:39:58:1D:A3:A2:FF:E5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bc:18:3a:98:b7:05:69:ed:c6:58:a7:7e:4a:0f:e6:cc:6b:
         f6:a6:3d:76:65:e6:1f:8d:59:cb:aa:d2:37:f0:7e:83:cd:f3:
         bb:9c:ae:1b:71:9d:92:ad:5b:8a:77:19:e6:a2:72:31:5e:5b:
         ca:47:b3:67:2e:5f:6c:3c:d6:73:32:c4:6b:9e:c9:44:18:18:
         45:69:e4:6b:74:27:58:fc:1a:88:1b:8c:38:b4:f4:79:04:97:
         7b:c9:8f:8d:23:27:f3:21:dd:2e:5c:15:08:23:f7:ca:fb:87:
         df:ff:97:86:54:74:28:91:e4:1d:1e:95:87:1a:75:2c:14:32:
         50:6d:d6:fa:38:21:7a:c9:88:27:ea:2c:5e:b2:09:84:4e:e0:
         9c:05:d7:d7:3c:92:73:7a:66:53:dd:c1:b1:d1:d5:15:30:de:
         94:2c:f9:59:57:27:a1:92:0c:fa:b0:d9:34:4d:de:0c:55:63:
         a5:a1:de:c0:40:d6:bb:02:8d:ac:e4:d6:aa:86:ab:3c:6e:05:
         1f:0a:ed:0c:89:d7:5a:c0:fb:48:31:09:08:be:0f:d1:15:4a:
         03:15:e8:54:6e:ab:04:3e:4c:24:5f:88:93:70:70:67:21:01:
         40:9c:8d:c0:d7:33:b3:df:f0:4f:9b:d8:77:bc:e2:78:83:8b:
         d1:d4:56:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDh4beEaJi/d2h6hMLIHj4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0N2M5MWI3NjI2YjE3MDQxZmU4YTc1ZjM5NTgxZGEzYTJm
ZmU1ZGEwHhcNMjYwOTI3MDgwMTAxWhcNMjYwOTI4MDgwMTAxWjAzMTEwLwYDVQQD
EyhiMGE3NTM1MWVhNDhiZGJmZTYzMjJkYWM3OTE5ZTlmMmNiODdkYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMicTJfNRCZGrawgvTeYeAD9gcY9
oS7h0m3+hDJfeXI5prAdb1zLY2OWzMgSofNqdRGWP4kuQvhBgNWjRLpnLFADcrAk
1XPmfS4nAMTOpq3hmQF8AK0BXW7b9o6+r5v01eCK151WiWWDyB2XucJe1KGt6co/
BMhqdzsWvLdF3Sb/sFF6l2JaxlP6M3RkXt6MYfvCLhjWOpstWi3O39mYN8+updn/
zmzvh9DkAHDGFC+gHt9NiUsgLNDxIpY64Lb/fTTlHUPE2pQKJ69GOrFps0kgpVF8
mC6gUBrdG/FH8KLahHzW/ZTE5O6sZk/tspxsAcRk1mNtYeZMli4pirpeAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCnU1HqSL2/5jItrHkZ6fLLh9uGMB8GA1UdIwQY
MBaAFIR8kbdiaxcEH+inXzlYHaOi/+XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEh5UnQySnJGd1FmNktkZk9WZ2RvNkxfNWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83ZDcxM2ItMTJiMy00MTkwLTgyMGEt
NzFjNDU1NTc0MTc5LzEvaEh5UnQySnJGd1FmNktkZk9WZ2RvNkxfNWRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83ZDcxM2ItMTJiMy00MTkwLTgyMGEtNzFjNDU1NTc0MTc5
LzEvaEh5UnQySnJGd1FmNktkZk9WZ2RvNkxfNWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLwYOpi3
BWntxlinfkoP5sxr9qY9dmXmH41Zy6rSN/B+g83zu5yuG3Gdkq1bincZ5qJyMV5b
ykezZy5fbDzWczLEa57JRBgYRWnka3QnWPwaiBuMOLT0eQSXe8mPjSMn8yHdLlwV
CCP3yvuH3/+XhlR0KJHkHR6Vhxp1LBQyUG3W+jghesmIJ+osXrIJhE7gnAXX1zyS
c3pmU93BsdHVFTDelCz5WVcnoZIM+rDZNE3eDFVjpaHewEDWuwKNrOTWqoarPG4F
HwrtDInXWsD7SDEJCL4P0RVKAxXoVG6rBD5MJF+Ik3BwZyEBQJyNwNczs9/wT5vY
d7zieIOL0dRW0g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:38:47 2026 by rpki-client