Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          Eg+eUuK50RKxx7GrtRktl4Ng728nSnP2+HBy7DeyPvA=
Subject key identifier:   D4:D1:B1:F5:CA:29:61:01:E1:A5:53:CC:6C:9C:28:B5:17:11:8E:D4
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       01A0CE5ABE9B53587EC2F2A38E1413A6E025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          1AAE
Signing time:             Wed 23 Sep 2026 13:00:48 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:48 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:48 +0000
Files and hashes:         1: 02rcOu2oVgYvFKogVTUuhoAU_Z8.roa (hash: t1BzKV6mreRxe6P7rrGXRTjA+HpmupGRMNWHhpbny/Y=)
                          2: 7aqK71miTASMwabVtsHzpubRHDs.roa (hash: yhSFNY/JY9jo3EQSKl2NTB5DScn6tJax7Q4YrTEPg7Y=)
                          3: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: ibVekVwI2+NVfX2lv6kvcJ0vA+iMD92Ms2IO/yaupkI=)
                          4: Sgl0Z64OhrO11r88F-vekHDTFUg.roa (hash: wpZ6eRiAcwvnj+jMwp2huDtJevtVDAQPpwMPlgkG8Ek=)
                          5: VN6p_bTihNH_MdXcvCva6umc71w.roa (hash: hHXGikrxhpHM6seBQ0Nc82OHE5FrPo4aFTc47ssGOfQ=)
                          6: a3290QBUAW6JkZDMQMvV2AmGcpI.roa (hash: U52wU/VVKKrKVnN6L8f5aOo6YSyIS3DGIvhyfpa7ooU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:be:9b:53:58:7e:c2:f2:a3:8e:14:13:a6:e0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: Sep 23 13:00:48 2026 GMT
            Not After : Sep 24 13:00:48 2026 GMT
        Subject: CN=d4d1b1f5ca296101e1a553cc6c9c28b517118ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:49:1b:11:83:e2:09:c9:38:03:33:3b:22:
                    57:dd:7d:4c:d1:f0:b2:50:7c:9b:ed:64:3a:61:ef:
                    8f:fa:e1:5b:03:39:03:59:a0:54:c8:00:f6:10:9c:
                    fd:e9:c7:11:78:1f:68:09:b8:d4:5e:51:16:5c:9c:
                    ea:c1:23:b4:a5:13:e2:3e:72:1e:53:19:e0:c9:88:
                    50:a3:34:61:8e:42:b7:cc:d5:2d:d1:bc:71:f7:ef:
                    9a:80:37:9c:cc:f7:6c:11:d6:d2:ec:a1:1d:61:73:
                    03:fc:9f:7e:af:e2:ab:6b:8c:8a:e3:50:61:b3:17:
                    e5:86:6e:73:95:80:a9:d4:76:7a:84:26:9c:89:0b:
                    f9:26:f1:04:41:61:4b:af:89:51:ac:c2:12:17:5c:
                    a6:16:f8:67:ce:15:b0:ae:86:9e:a9:a8:e7:d6:b0:
                    56:08:f4:28:ea:b6:ca:f6:3f:a4:4a:34:43:40:c2:
                    c9:a0:2b:0d:46:5f:81:83:38:e3:af:57:8c:c0:5f:
                    b8:26:b4:b4:38:77:41:3a:f0:a3:f9:bb:3d:50:a5:
                    8d:40:8d:db:77:f3:27:8a:76:ef:d7:a8:3f:68:d2:
                    82:04:5f:b3:de:6c:8d:f4:75:54:88:b0:06:58:2e:
                    9c:f9:ff:0a:a0:27:bd:ba:12:fc:75:89:87:48:ca:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D1:B1:F5:CA:29:61:01:E1:A5:53:CC:6C:9C:28:B5:17:11:8E:D4
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:48:8b:37:73:77:d2:e9:c9:a0:bf:4f:13:6f:8d:cc:29:d8:
         78:b1:fb:26:06:e3:0c:ad:26:58:af:90:57:f3:52:d3:2f:66:
         ce:22:e3:79:b9:b7:34:da:15:7d:c3:c2:90:21:2b:ff:18:03:
         37:28:a3:fb:63:7a:3b:01:e8:de:fc:e5:19:4b:f0:61:d2:44:
         12:4e:62:cc:2b:8f:5e:30:d1:89:c6:8b:1a:00:4b:56:69:66:
         02:57:92:88:aa:2b:c0:7e:00:3b:33:c7:2d:36:d4:5a:72:c2:
         51:c3:91:00:77:dc:cf:f9:18:6b:6e:bb:38:2c:95:05:fc:e8:
         b5:d9:4b:70:70:75:23:88:11:61:f9:fc:3c:23:6d:74:e6:40:
         ff:5b:bb:8e:a0:f2:18:3d:74:aa:0e:c4:03:37:e9:0f:8c:66:
         4c:9c:4d:28:e0:d8:2a:d4:7d:52:52:ec:55:45:4b:cc:05:95:
         36:e0:a2:05:93:98:71:02:a6:ee:e3:c0:dc:71:28:c4:1f:29:
         a9:89:1a:b1:e0:0c:5a:e2:22:f9:50:d5:e4:3b:97:5c:9e:26:
         13:02:4d:d7:86:61:33:58:66:43:74:b0:e6:d1:88:be:48:e5:
         ff:e5:46:a2:68:1d:29:c9:09:ac:ad:94:56:28:3f:73:24:b0:
         7e:39:77:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWr6bU1h+wvKjjhQTpuAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw
N2VjMDIwHhcNMjYwOTIzMTMwMDQ4WhcNMjYwOTI0MTMwMDQ4WjAzMTEwLwYDVQQD
EyhkNGQxYjFmNWNhMjk2MTAxZTFhNTUzY2M2YzljMjhiNTE3MTE4ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowdJGxGD4gnJOAMzOyJX3X1M0fCy
UHyb7WQ6Ye+P+uFbAzkDWaBUyAD2EJz96ccReB9oCbjUXlEWXJzqwSO0pRPiPnIe
UxngyYhQozRhjkK3zNUt0bxx9++agDeczPdsEdbS7KEdYXMD/J9+r+Kra4yK41Bh
sxflhm5zlYCp1HZ6hCaciQv5JvEEQWFLr4lRrMISF1ymFvhnzhWwroaeqajn1rBW
CPQo6rbK9j+kSjRDQMLJoCsNRl+Bgzjjr1eMwF+4JrS0OHdBOvCj+bs9UKWNQI3b
d/Mninbv16g/aNKCBF+z3myN9HVUiLAGWC6c+f8KoCe9uhL8dYmHSMrbDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTRsfXKKWEB4aVTzGycKLUXEY7UMB8GA1UdIwQY
MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt
MWJiMTdhOGIyNmZlLzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl
LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkiLN3N3
0unJoL9PE2+NzCnYeLH7JgbjDK0mWK+QV/NS0y9mziLjebm3NNoVfcPCkCEr/xgD
Nyij+2N6OwHo3vzlGUvwYdJEEk5izCuPXjDRicaLGgBLVmlmAleSiKorwH4AOzPH
LTbUWnLCUcORAHfcz/kYa267OCyVBfzotdlLcHB1I4gRYfn8PCNtdOZA/1u7jqDy
GD10qg7EAzfpD4xmTJxNKODYKtR9UlLsVUVLzAWVNuCiBZOYcQKm7uPA3HEoxB8p
qYkaseAMWuIi+VDV5DuXXJ4mEwJN14ZhM1hmQ3Sw5tGIvkjl/+VGomgdKckJrK2U
Vig/cySwfjl3Mw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:34:37 2026 by rpki-client