Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File:                     86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier:          5fCIYXBwbabSA1NosyZIjNuJ9MjRBgoHp2rNulKtZp8=
Subject key identifier:   76:D7:25:75:CA:E0:8C:9F:92:E7:CB:62:48:44:4B:5F:E5:38:B9:9A
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer:       /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial:       01A0D983564725544A85B2004BBFA2FEF821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number:          07B3
Signing time:             Fri 25 Sep 2026 17:00:58 +0000
Manifest this update:     Fri 25 Sep 2026 17:00:58 +0000
Manifest next update:     Sat 26 Sep 2026 17:00:58 +0000
Files and hashes:         1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: NmY66GaJ77XcT3erDjiYYXxMGwg0ljyDhUiKaZnKdwA=)
                          2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:56:47:25:54:4a:85:b2:00:4b:bf:a2:fe:f8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
        Validity
            Not Before: Sep 25 17:00:58 2026 GMT
            Not After : Sep 26 17:00:58 2026 GMT
        Subject: CN=76d72575cae08c9f92e7cb6248444b5fe538b99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:a3:72:b1:f3:35:f7:e9:e4:1b:a7:79:58:
                    1a:f4:54:df:75:37:fe:1b:67:fa:e5:5e:23:03:21:
                    15:58:af:a9:0b:35:26:4a:c3:14:af:9e:c2:f6:a8:
                    95:2e:1d:d2:17:9b:10:b3:e3:1f:38:71:ff:cf:07:
                    71:2a:5c:65:db:19:ce:0a:2c:e3:84:9f:ed:90:13:
                    c4:c4:48:cd:76:d6:c4:0c:bf:75:29:6f:6a:e4:e1:
                    0e:c5:42:13:62:ae:f1:57:8e:3e:db:6b:93:3a:65:
                    36:05:4d:cd:52:ff:a4:f7:05:0e:56:aa:59:8d:ce:
                    8b:40:b7:61:65:9a:d1:3b:4c:10:76:fe:53:b7:7a:
                    7e:9a:94:99:22:c0:13:c9:00:6e:ea:25:1a:7c:13:
                    c4:b7:78:c0:f2:f0:df:4c:99:d4:cd:6f:6c:ad:a5:
                    05:53:4b:6a:29:48:f2:c1:f8:c2:4d:ac:74:a7:4b:
                    ce:c4:dc:86:8a:70:de:a1:1f:2f:76:e0:6b:5d:8d:
                    40:40:4a:53:d8:12:24:51:46:2c:4f:0c:69:ad:c7:
                    3e:85:43:f3:13:66:e2:d4:e6:6f:1e:3e:cf:b8:01:
                    63:eb:ba:ad:db:3a:f7:2d:a0:f4:af:ce:f7:12:5b:
                    77:89:31:0f:08:75:cd:f7:bc:93:83:c1:ef:69:46:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D7:25:75:CA:E0:8C:9F:92:E7:CB:62:48:44:4B:5F:E5:38:B9:9A
            X509v3 Authority Key Identifier:
                keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:6b:5b:3e:0c:b8:7a:c1:bd:7c:51:da:1e:1f:5d:e5:16:a9:
         69:ce:f1:f2:93:fa:de:33:ed:3b:11:c5:14:28:af:42:48:b1:
         42:a9:1a:c5:4d:35:d4:e5:8e:26:2e:7f:62:8e:e2:c3:30:5a:
         0f:91:bd:69:35:33:70:59:50:21:c2:cd:8e:93:f4:d5:55:61:
         ef:fd:43:b9:de:5d:ad:f8:71:65:a2:94:df:44:c0:ca:fe:4c:
         38:59:ba:92:38:13:ac:30:e8:84:e4:e6:6e:8d:19:4b:b4:4a:
         33:8c:4c:e5:72:75:2b:54:43:41:9d:ce:15:62:45:71:67:e7:
         3b:95:0e:d4:f7:e5:33:a5:05:9c:ce:8f:e8:4d:b7:97:14:ed:
         54:98:df:a8:1d:59:1e:3c:ae:0b:5c:b0:be:79:9a:d1:4e:68:
         8a:38:e8:75:32:b1:46:0f:e5:b0:8d:3d:fc:c3:11:be:d4:d6:
         c4:04:1b:70:ba:de:17:1a:bb:be:f7:e9:09:94:b2:76:28:aa:
         9c:bd:2e:bf:72:3c:5b:0c:1e:09:67:c9:c6:10:08:32:02:fc:
         c6:1f:8e:c5:b7:74:63:c2:97:c4:26:f4:4a:f3:6c:e2:97:5d:
         a7:58:61:36:7e:7c:41:7f:fd:41:c9:d4:b1:7c:68:47:9b:5f:
         fa:8d:ad:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg1ZHJVRKhbIAS7+i/vghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk
MWQxN2MwHhcNMjYwOTI1MTcwMDU4WhcNMjYwOTI2MTcwMDU4WjAzMTEwLwYDVQQD
Eyg3NmQ3MjU3NWNhZTA4YzlmOTJlN2NiNjI0ODQ0NGI1ZmU1MzhiOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJqjcrHzNffp5BuneVga9FTfdTf+
G2f65V4jAyEVWK+pCzUmSsMUr57C9qiVLh3SF5sQs+MfOHH/zwdxKlxl2xnOCizj
hJ/tkBPExEjNdtbEDL91KW9q5OEOxUITYq7xV44+22uTOmU2BU3NUv+k9wUOVqpZ
jc6LQLdhZZrRO0wQdv5Tt3p+mpSZIsATyQBu6iUafBPEt3jA8vDfTJnUzW9sraUF
U0tqKUjywfjCTax0p0vOxNyGinDeoR8vduBrXY1AQEpT2BIkUUYsTwxprcc+hUPz
E2bi1OZvHj7PuAFj67qt2zr3LaD0r873Elt3iTEPCHXN97yTg8HvaUZlkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbXJXXK4IyfkufLYkhES1/lOLmaMB8GA1UdIwQY
MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt
MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw
LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWtbPgy4
esG9fFHaHh9d5Rapac7x8pP63jPtOxHFFCivQkixQqkaxU011OWOJi5/Yo7iwzBa
D5G9aTUzcFlQIcLNjpP01VVh7/1Dud5drfhxZaKU30TAyv5MOFm6kjgTrDDohOTm
bo0ZS7RKM4xM5XJ1K1RDQZ3OFWJFcWfnO5UO1PflM6UFnM6P6E23lxTtVJjfqB1Z
HjyuC1ywvnma0U5oijjodTKxRg/lsI09/MMRvtTWxAQbcLreFxq7vvfpCZSydiiq
nL0uv3I8WwweCWfJxhAIMgL8xh+Oxbd0Y8KXxCb0SvNs4pddp1hhNn58QX/9QcnU
sXxoR5tf+o2ttA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:15 2026 by rpki-client