Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          +ACTM5Z60uM/PfDf7KceyFWOXsPBDZCi1KzjixOaiGQ=
Subject key identifier:   F9:59:32:2D:93:7E:BD:7C:BF:2C:A9:08:CF:02:B3:1B:9E:A3:FF:50
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       01A0EF9D579E21C2ECCCCB2F26924776192A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          1A7D
Signing time:             Wed 30 Sep 2026 00:01:01 +0000
Manifest this update:     Wed 30 Sep 2026 00:01:01 +0000
Manifest next update:     Thu 01 Oct 2026 00:01:01 +0000
Files and hashes:         1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=)
                          2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=)
                          3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=)
                          4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=)
                          5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: p3bQ0BzNHoOThzeMHC/dkLJnQ5kL3PP0nqsXrIlszJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 20:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:9d:57:9e:21:c2:ec:cc:cb:2f:26:92:47:76:19:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: Sep 30 00:01:01 2026 GMT
            Not After : Oct  1 00:01:01 2026 GMT
        Subject: CN=f959322d937ebd7cbf2ca908cf02b31b9ea3ff50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:79:c7:04:66:0d:39:73:5f:19:eb:8d:29:
                    d6:ad:de:37:c1:8b:a7:86:72:01:70:0b:6f:10:ba:
                    f1:ab:de:6e:35:2f:27:93:7a:8f:38:9e:81:ab:25:
                    f2:2b:71:ab:b9:47:d8:33:b5:72:13:c3:f4:7f:b3:
                    eb:5e:d9:9b:b5:bc:20:80:f1:72:5b:e9:83:c9:09:
                    1b:32:0b:71:34:e2:a0:3e:27:51:dc:fb:a4:fd:99:
                    11:27:ce:ec:f7:43:fb:b1:64:ed:ed:19:88:aa:19:
                    8c:ce:91:3c:31:e7:4d:73:e2:a0:29:bf:3f:31:70:
                    c0:61:4d:b1:d5:92:6b:cd:8c:d3:3c:00:96:56:12:
                    d2:05:b2:ce:ca:4e:c1:53:9c:9e:73:1b:05:c5:75:
                    69:10:95:ab:d0:6b:cc:7e:d3:9b:17:4e:79:bb:5b:
                    e4:d5:d5:5c:89:da:55:0c:25:07:45:e7:6c:b7:29:
                    5b:51:d6:7f:5d:d1:55:98:a7:93:59:61:fa:71:82:
                    3d:5d:95:f4:e5:62:78:44:1b:13:56:68:d0:28:e4:
                    bf:09:23:0d:07:a9:d0:0c:24:cd:8e:c2:a1:a7:5d:
                    6f:74:4a:ff:43:0c:a3:62:e5:fa:bf:98:79:72:18:
                    2e:44:b6:f5:22:9a:b0:30:a6:9e:e7:53:71:17:9f:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:32:2D:93:7E:BD:7C:BF:2C:A9:08:CF:02:B3:1B:9E:A3:FF:50
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:bb:5f:bd:8c:50:d9:6c:b9:31:e9:c5:af:de:42:b4:ea:69:
         f0:02:ed:a6:08:27:e9:2a:0f:74:73:2a:1e:9c:d8:f5:1c:e2:
         0a:ca:5c:11:9b:ed:03:03:c2:83:e1:91:75:ca:95:16:14:d4:
         5c:42:54:e8:c9:5b:a0:ae:fa:19:14:96:b5:02:cb:ec:7c:36:
         54:05:2b:79:c4:e5:9b:4b:2e:af:84:c9:c9:fc:38:c2:f8:87:
         24:37:6d:8b:ef:d1:35:b6:4f:93:51:f8:bf:55:d6:f9:1e:44:
         8e:a7:87:6c:67:1d:c3:43:d2:b9:ab:e0:57:c6:7b:af:a5:ce:
         1a:80:cd:28:99:e8:9f:b4:a2:ec:cd:2a:81:50:f7:a0:0d:93:
         34:d8:31:07:fe:d0:b5:5b:81:45:2a:07:7d:82:9b:56:af:f0:
         15:33:65:dc:d6:5f:e4:8d:62:e6:0c:86:a4:9e:4f:18:28:69:
         96:bb:fa:8f:81:55:dc:48:0c:f9:ee:34:fb:8d:ac:39:16:84:
         4a:96:84:01:d7:c0:f5:e8:b1:61:af:bf:24:63:42:bf:e1:78:
         dc:1a:71:e6:9b:c9:31:32:66:8b:94:10:2d:c0:82:94:e1:aa:
         ec:b1:ca:db:2d:7e:5c:f9:db:a4:9d:de:0e:9f:91:16:5f:83:
         c8:49:b8:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDvnVeeIcLszMsvJpJHdhkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2
NDAxYjQwHhcNMjYwOTMwMDAwMTAxWhcNMjYxMDAxMDAwMTAxWjAzMTEwLwYDVQQD
EyhmOTU5MzIyZDkzN2ViZDdjYmYyY2E5MDhjZjAyYjMxYjllYTNmZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/V5xwRmDTlzXxnrjSnWrd43wYun
hnIBcAtvELrxq95uNS8nk3qPOJ6BqyXyK3GruUfYM7VyE8P0f7PrXtmbtbwggPFy
W+mDyQkbMgtxNOKgPidR3Puk/ZkRJ87s90P7sWTt7RmIqhmMzpE8MedNc+KgKb8/
MXDAYU2x1ZJrzYzTPACWVhLSBbLOyk7BU5yecxsFxXVpEJWr0GvMftObF055u1vk
1dVcidpVDCUHRedstylbUdZ/XdFVmKeTWWH6cYI9XZX05WJ4RBsTVmjQKOS/CSMN
B6nQDCTNjsKhp11vdEr/QwyjYuX6v5h5chguRLb1IpqwMKae51NxF598OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlZMi2Tfr18vyypCM8Csxueo/9QMB8GA1UdIwQY
MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt
NDZiMzAyOGEwM2IwLzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw
LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7tfvYxQ
2Wy5MenFr95CtOpp8ALtpggn6SoPdHMqHpzY9RziCspcEZvtAwPCg+GRdcqVFhTU
XEJU6MlboK76GRSWtQLL7Hw2VAUrecTlm0sur4TJyfw4wviHJDdti+/RNbZPk1H4
v1XW+R5EjqeHbGcdw0PSuavgV8Z7r6XOGoDNKJnon7Si7M0qgVD3oA2TNNgxB/7Q
tVuBRSoHfYKbVq/wFTNl3NZf5I1i5gyGpJ5PGChplrv6j4FV3EgM+e40+42sORaE
SpaEAdfA9eixYa+/JGNCv+F43Bpx5pvJMTJmi5QQLcCClOGq7LHK2y1+XPnbpJ3e
Dp+RFl+DyEm4EQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 08:20:38 2026 by rpki-client