Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File:                     97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier:          smm1kpmsw9vmJ1B+UfhrnZk8x8TyaMhMbMzrhtrtUyg=
Subject key identifier:   7F:EF:EE:06:FF:AD:71:E3:94:04:3E:F8:A5:BD:4E:FC:19:E9:1C:2E
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer:       /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial:       01A0D0489C222C889FF9AE83B2C683475B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number:          0761
Signing time:             Wed 23 Sep 2026 22:00:14 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:14 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:14 +0000
Files and hashes:         1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: MAUaQqMptrU6VfFlJ1P4nG6t9bQAPDbhCVEMyqE/3dE=)
                          2: xhl0o4V6-hvD85CUbuSTASM7Pe8.roa (hash: UOzsj8ZtwxxJK1k4oeGehyFJR/EivykYvRbt7Q6K/PA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:9c:22:2c:88:9f:f9:ae:83:b2:c6:83:47:5b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
        Validity
            Not Before: Sep 23 22:00:14 2026 GMT
            Not After : Sep 24 22:00:14 2026 GMT
        Subject: CN=7fefee06ffad71e394043ef8a5bd4efc19e91c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:67:5d:9e:46:75:bf:f9:e7:11:42:a9:19:
                    a3:22:49:71:56:08:cc:69:b1:16:93:70:08:01:6c:
                    db:58:ce:e8:36:5b:e5:ab:13:66:8e:aa:08:b3:fe:
                    a2:d2:d5:de:4a:cf:eb:e8:5a:08:66:c3:4b:93:f7:
                    08:18:4b:e8:08:e2:69:3b:2d:f5:c5:73:ff:60:d8:
                    60:64:79:14:3f:29:3a:20:dd:94:b0:a6:9b:9c:65:
                    73:66:3d:4b:66:6b:78:e3:4b:08:f0:5b:b9:d1:6d:
                    42:07:8f:43:9e:e8:fb:20:bc:61:8d:57:33:03:7c:
                    b7:82:68:09:db:6f:8c:98:c8:31:88:21:2c:b5:d9:
                    1b:3e:6c:bd:04:29:14:2c:01:9d:51:99:07:62:4e:
                    a4:24:b8:17:17:21:fa:81:cb:88:1c:87:86:d2:14:
                    09:bd:ff:3c:fc:ae:fc:06:a7:41:e9:bc:64:6a:79:
                    11:9a:f6:07:93:fa:93:87:64:e7:b3:2a:e8:ff:f5:
                    a4:c2:4b:84:7b:d1:c2:19:c1:1a:01:93:75:06:fe:
                    6e:5c:e7:90:39:df:c4:3d:22:b8:65:7d:c0:c4:cf:
                    b4:24:98:73:d8:45:3f:66:8f:94:dc:b5:1f:48:33:
                    25:56:93:94:e1:c6:68:7e:f4:5d:2d:4a:77:7f:a6:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EF:EE:06:FF:AD:71:E3:94:04:3E:F8:A5:BD:4E:FC:19:E9:1C:2E
            X509v3 Authority Key Identifier:
                keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2d:4e:ab:5c:32:37:a7:a0:9c:73:7a:dd:9d:21:17:68:ff:
         49:c3:33:07:4b:f3:df:7c:e5:18:57:de:a1:fb:2c:a7:b9:88:
         95:e7:75:61:46:4f:5f:c9:f7:c1:33:e7:fc:2f:a0:b1:5e:c4:
         14:e4:d3:62:fd:d9:bd:a8:aa:85:18:3a:c6:fd:61:20:6e:3c:
         6f:dc:59:92:34:2d:f7:0b:88:19:5d:93:00:17:a0:51:1e:f2:
         de:36:de:1f:53:ab:64:29:0a:45:e7:36:52:d0:ed:7e:b3:62:
         58:ce:2d:22:bc:a8:b8:f1:da:2e:00:58:b6:cb:b2:64:1e:34:
         48:27:6c:ce:c8:5c:84:b1:c4:a2:47:f2:1e:cb:29:89:02:84:
         ab:97:90:a1:bb:a9:83:9b:9a:56:84:7c:6c:14:0b:8d:ba:ba:
         79:5a:70:52:f0:7e:98:16:98:f4:00:2f:83:8e:9c:d2:02:d2:
         f3:93:44:6c:a3:9f:8a:3b:10:0a:80:22:9b:c3:f4:85:9f:19:
         e0:bf:ce:47:98:8e:49:a4:0d:a7:e2:9f:f9:a3:b8:42:86:52:
         9f:2e:da:d8:29:37:5b:bf:85:7d:b5:a3:27:9a:7e:9a:70:68:
         22:52:49:2d:78:40:2e:97:de:90:7b:40:b2:59:1f:a6:2b:6d:
         93:03:ef:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSJwiLIif+a6DssaDR1sZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjA2OWQzM2RmMTIyNWE4YjM2NDNhMDEzNjRmMjc5ZGY0
MGQ4NzcwHhcNMjYwOTIzMjIwMDE0WhcNMjYwOTI0MjIwMDE0WjAzMTEwLwYDVQQD
Eyg3ZmVmZWUwNmZmYWQ3MWUzOTQwNDNlZjhhNWJkNGVmYzE5ZTkxYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpdnXZ5Gdb/55xFCqRmjIklxVgjM
abEWk3AIAWzbWM7oNlvlqxNmjqoIs/6i0tXeSs/r6FoIZsNLk/cIGEvoCOJpOy31
xXP/YNhgZHkUPyk6IN2UsKabnGVzZj1LZmt440sI8Fu50W1CB49Dnuj7ILxhjVcz
A3y3gmgJ22+MmMgxiCEstdkbPmy9BCkULAGdUZkHYk6kJLgXFyH6gcuIHIeG0hQJ
vf88/K78BqdB6bxkankRmvYHk/qTh2Tnsyro//WkwkuEe9HCGcEaAZN1Bv5uXOeQ
Od/EPSK4ZX3AxM+0JJhz2EU/Zo+U3LUfSDMlVpOU4cZofvRdLUp3f6bNuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/v7gb/rXHjlAQ++KW9TvwZ6RwuMB8GA1UdIwQY
MBaAFPewadM98SJaizZDoBNk8nnfQNh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMt
NWZkY2I3ODNhNmVjLzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMtNWZkY2I3ODNhNmVj
LzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy1Oq1wy
N6egnHN63Z0hF2j/ScMzB0vz33zlGFfeofssp7mIled1YUZPX8n3wTPn/C+gsV7E
FOTTYv3ZvaiqhRg6xv1hIG48b9xZkjQt9wuIGV2TABegUR7y3jbeH1OrZCkKRec2
UtDtfrNiWM4tIryouPHaLgBYtsuyZB40SCdszshchLHEokfyHsspiQKEq5eQobup
g5uaVoR8bBQLjbq6eVpwUvB+mBaY9AAvg46c0gLS85NEbKOfijsQCoAim8P0hZ8Z
4L/OR5iOSaQNp+Kf+aO4QoZSny7a2Ck3W7+FfbWjJ5p+mnBoIlJJLXhALpfekHtA
slkfpittkwPv8w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:13:08 2026 by rpki-client