Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
File:                     9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft (raw, json)
Hash identifier:          f3gneejrYKOA4VCjnhYd4VGWplDAWsSuIIA/nW89CR0=
Subject key identifier:   F5:77:E5:BD:24:C9:0C:03:3F:09:D4:8A:E3:C9:11:52:EF:11:1D:D9
Authority key identifier: F5:34:D5:C7:66:20:C0:E1:E5:F6:21:A2:46:86:98:F8:2B:95:40:BD
Certificate issuer:       /CN=f534d5c76620c0e1e5f621a2468698f82b9540bd
Certificate serial:       01A0D8A85585EE80B88E97ECB6DBC4EA0519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
Manifest number:          0158
Signing time:             Fri 25 Sep 2026 13:01:45 +0000
Manifest this update:     Fri 25 Sep 2026 13:01:45 +0000
Manifest next update:     Sat 26 Sep 2026 13:01:45 +0000
Files and hashes:         1: 9TTVx2YgwOHl9iGiRoaY-CuVQL0.crl (hash: /cHDKI8AN2q9PmdVWYHrL0wtBJY+HuzpWxQX40v1PWM=)
                          2: h29vQ2yuI6yLfEkgxb-spdNM9_w.roa (hash: p7uQCJb1royhyT7w9wDiqUydmZ9HdADqCZN1mAQcvqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:55:85:ee:80:b8:8e:97:ec:b6:db:c4:ea:05:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f534d5c76620c0e1e5f621a2468698f82b9540bd
        Validity
            Not Before: Sep 25 13:01:45 2026 GMT
            Not After : Sep 26 13:01:45 2026 GMT
        Subject: CN=f577e5bd24c90c033f09d48ae3c91152ef111dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:63:48:c1:c2:c5:02:4b:6f:22:aa:b9:0b:
                    bd:d0:c5:6d:8d:cd:57:44:43:04:04:21:3a:f9:15:
                    ae:a7:33:6d:35:c1:01:a6:4f:ef:03:d3:e0:7b:58:
                    0b:82:2e:5e:4d:40:20:1c:e8:c9:08:da:2e:a8:20:
                    37:a0:18:35:ee:43:2a:fc:40:9a:8a:e7:c8:0a:b7:
                    cd:bc:4b:fd:ed:1c:ee:74:80:53:ee:29:6d:37:79:
                    18:e0:83:ba:d0:41:f9:30:17:8b:5a:ba:76:23:49:
                    40:cd:99:44:0b:48:1d:04:1d:a4:fc:a6:4f:30:ab:
                    93:d1:19:b9:15:b2:76:0c:56:80:13:32:39:aa:cd:
                    60:90:12:e2:d4:c4:30:dc:50:12:f9:21:f5:95:d3:
                    f8:34:38:ab:84:3e:9e:28:23:cd:7c:c4:37:66:eb:
                    07:73:98:66:93:62:69:2d:9c:b5:6f:b0:13:a5:c5:
                    f2:bc:62:a3:10:87:58:f7:7d:a7:c4:4c:4a:8f:68:
                    47:44:de:41:45:5e:aa:c7:9b:df:63:9a:1b:06:a8:
                    af:5e:7f:b1:ca:1e:6e:e5:b5:37:7a:4e:cd:d0:be:
                    f3:f9:da:a9:57:7e:2b:cf:24:01:4d:ee:c6:cf:85:
                    52:3a:2a:bd:8c:46:72:dc:72:9a:b3:9f:0a:00:03:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:77:E5:BD:24:C9:0C:03:3F:09:D4:8A:E3:C9:11:52:EF:11:1D:D9
            X509v3 Authority Key Identifier:
                keyid:F5:34:D5:C7:66:20:C0:E1:E5:F6:21:A2:46:86:98:F8:2B:95:40:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:26:3d:68:1c:c0:a0:fc:73:24:d3:ba:8f:b1:4b:ea:ef:c9:
         95:2f:81:bc:c9:cf:65:3c:6f:49:ad:19:b0:9b:48:d5:64:11:
         01:64:dd:ea:7a:42:19:81:65:93:23:79:83:f2:81:96:1b:a8:
         4f:c4:2a:d5:e2:20:7e:5c:7d:46:81:a4:1b:31:cd:29:59:ec:
         bc:b1:fd:d6:74:b4:d9:6e:37:a1:48:75:72:72:19:03:eb:3b:
         d4:ab:57:e9:09:bc:4d:43:0e:49:0e:11:5b:f7:43:da:79:82:
         0e:cd:a1:a0:fd:51:3a:24:0c:2a:22:ad:0a:f8:d2:4e:12:1e:
         d6:8e:1b:8d:48:54:5c:6e:ab:73:76:2b:34:42:a9:7a:b9:2e:
         a4:b3:7b:16:2c:11:e4:e9:d3:24:58:4a:f3:a6:6a:ac:e9:a2:
         c6:e4:67:57:e4:4a:a1:c5:4f:24:e2:4b:36:a5:f7:ef:19:f9:
         42:f4:36:37:34:b0:e2:31:e8:76:6a:10:00:93:37:40:fb:11:
         0e:50:48:d1:6f:3f:dd:f3:29:de:f0:88:8a:36:ca:65:b4:68:
         1d:59:f7:62:c3:70:29:2c:12:42:d7:be:df:25:e2:d6:66:4f:
         31:7e:81:41:31:71:bc:31:81:4f:e2:7c:4a:39:92:b0:db:ff:
         62:a4:a2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqFWF7oC4jpfsttvE6gUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzRkNWM3NjYyMGMwZTFlNWY2MjFhMjQ2ODY5OGY4MmI5
NTQwYmQwHhcNMjYwOTI1MTMwMTQ1WhcNMjYwOTI2MTMwMTQ1WjAzMTEwLwYDVQQD
EyhmNTc3ZTViZDI0YzkwYzAzM2YwOWQ0OGFlM2M5MTE1MmVmMTExZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtThjSMHCxQJLbyKquQu90MVtjc1X
REMEBCE6+RWupzNtNcEBpk/vA9Pge1gLgi5eTUAgHOjJCNouqCA3oBg17kMq/ECa
iufICrfNvEv97RzudIBT7iltN3kY4IO60EH5MBeLWrp2I0lAzZlEC0gdBB2k/KZP
MKuT0Rm5FbJ2DFaAEzI5qs1gkBLi1MQw3FAS+SH1ldP4NDirhD6eKCPNfMQ3ZusH
c5hmk2JpLZy1b7ATpcXyvGKjEIdY932nxExKj2hHRN5BRV6qx5vfY5obBqivXn+x
yh5u5bU3ek7N0L7z+dqpV34rzyQBTe7Gz4VSOiq9jEZy3HKas58KAAOFCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPV35b0kyQwDPwnUiuPJEVLvER3ZMB8GA1UdIwQY
MBaAFPU01cdmIMDh5fYhokaGmPgrlUC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRUVngyWWd3T0hsOWlHaVJvYVktQ3VWUUwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iMjJkMjAtMGYzMC00ZmJiLWEwMWYt
ZjdmN2Q0NzIzYjVjLzEvOVRUVngyWWd3T0hsOWlHaVJvYVktQ3VWUUwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iMjJkMjAtMGYzMC00ZmJiLWEwMWYtZjdmN2Q0NzIzYjVj
LzEvOVRUVngyWWd3T0hsOWlHaVJvYVktQ3VWUUwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzSY9aBzA
oPxzJNO6j7FL6u/JlS+BvMnPZTxvSa0ZsJtI1WQRAWTd6npCGYFlkyN5g/KBlhuo
T8Qq1eIgflx9RoGkGzHNKVnsvLH91nS02W43oUh1cnIZA+s71KtX6Qm8TUMOSQ4R
W/dD2nmCDs2hoP1ROiQMKiKtCvjSThIe1o4bjUhUXG6rc3YrNEKperkupLN7FiwR
5OnTJFhK86ZqrOmixuRnV+RKocVPJOJLNqX37xn5QvQ2NzSw4jHodmoQAJM3QPsR
DlBI0W8/3fMp3vCIijbKZbRoHVn3YsNwKSwSQte+3yXi1mZPMX6BQTFxvDGBT+J8
SjmSsNv/YqSifg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:13:21 2026 by rpki-client