Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
File:                     1-N164S0qN_IarG-Btq9n1mF8oo4.mft (raw, json)
Hash identifier:          UsNFUAMlvOJvFlNRV6iMe6nEv+Mdc3kZermavi2VoPU=
Subject key identifier:   44:2B:98:EB:F7:03:58:54:11:7A:C3:4D:E5:3A:CB:3C:CF:DD:62:FE
Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
Certificate issuer:       /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
Certificate serial:       01A0C7EB15CE745F7DA6BE4040F42467BEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
Manifest number:          109D
Signing time:             Tue 22 Sep 2026 07:01:07 +0000
Manifest this update:     Tue 22 Sep 2026 07:01:07 +0000
Manifest next update:     Wed 23 Sep 2026 07:01:07 +0000
Files and hashes:         1: 1-N164S0qN_IarG-Btq9n1mF8oo4.crl (hash: hbaT5SYpL8spWWhf1+xbUuQOsxN+sWFWL5LXTuzyFYc=)
                          2: SUwxZ5v9b_j8m1u1pD7O8P1Pe7k.roa (hash: IpPr2gWojEstVTNBkraXYCz+z1YTkig1sDhmFGJ2qPE=)
                          3: lcaeC_rCe0YppgUeaDDfYFa7APQ.roa (hash: lbUPIo4FBRLOgfU++DH00nMxTHqUeGn4o2qqnjY9/XM=)
                          4: pl3mSbrSk4MDmDBbIrhCeOd9IiE.roa (hash: ejvjOytSKn/V2pJG8G40zxgC4i1oMPYSgoJkSbOPHPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:eb:15:ce:74:5f:7d:a6:be:40:40:f4:24:67:be:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
        Validity
            Not Before: Sep 22 07:01:07 2026 GMT
            Not After : Sep 23 07:01:07 2026 GMT
        Subject: CN=442b98ebf7035854117ac34de53acb3ccfdd62fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:82:d6:a3:07:a6:f0:e3:a5:c5:2b:0b:06:
                    55:ec:bd:8b:5f:0f:d7:b7:00:86:5a:37:2b:4e:d8:
                    e1:25:01:55:d1:d2:8e:4f:3e:10:5d:68:f3:45:06:
                    bf:95:5b:ab:42:cd:a0:02:18:8a:e1:04:76:4a:3e:
                    59:e5:28:df:62:a6:d4:c9:53:23:2b:07:66:35:b8:
                    43:4e:a5:3d:7f:e9:6c:f8:07:31:1f:98:70:37:6d:
                    9b:2c:09:3b:e4:1d:ed:88:90:c1:b1:10:1f:12:13:
                    53:62:63:b5:93:ef:d8:6e:c1:e4:50:dd:78:68:53:
                    82:49:e8:e4:61:f2:d1:ca:cb:38:f0:9c:96:80:d5:
                    c5:83:75:85:5b:50:e4:9d:00:e4:86:d9:fd:63:a8:
                    13:8a:fa:87:71:da:cc:83:c5:94:66:87:77:4b:04:
                    1b:a6:8d:50:38:43:93:68:32:57:b0:07:f9:9f:29:
                    af:85:16:f3:31:cd:f9:91:ce:58:7d:1a:b9:64:89:
                    c6:22:2b:84:95:97:8d:3a:1f:14:e0:57:58:4b:c4:
                    b0:8a:01:3f:2e:94:82:ee:c9:5a:c4:c9:e3:98:64:
                    0a:e5:ad:cc:44:6b:38:b7:57:54:b4:db:ed:91:d1:
                    ac:59:32:92:e0:4c:2d:ec:ff:e8:21:df:b9:47:39:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2B:98:EB:F7:03:58:54:11:7A:C3:4D:E5:3A:CB:3C:CF:DD:62:FE
            X509v3 Authority Key Identifier:
                keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:87:8b:25:72:95:3d:e0:56:e7:69:d8:c4:f0:6d:ce:69:21:
         21:d2:f1:00:f8:c0:26:47:0f:5a:d3:fc:0c:8b:ad:6b:33:66:
         83:de:35:d9:f5:b4:6b:e1:e9:24:ec:60:26:68:56:bd:f7:6d:
         80:d5:be:0d:39:93:ec:68:14:b9:a7:7d:82:a3:5b:28:41:2a:
         a8:25:31:55:d7:47:f2:32:b5:6d:83:62:bc:30:71:75:8f:67:
         9d:9a:f4:a6:24:40:25:2c:8e:5d:5b:ff:cc:17:55:c6:ac:05:
         18:10:b9:a8:fd:ef:39:38:4b:44:09:e3:02:f2:6e:7d:9a:fb:
         74:f7:db:6c:41:51:3f:ec:83:50:9d:47:d5:98:29:78:4e:8e:
         71:c7:3d:5f:91:2a:3c:0c:6a:28:2b:08:7f:4a:38:4a:c1:05:
         08:12:09:e1:e4:b2:3e:00:22:d5:75:12:b6:d9:15:42:ac:c5:
         78:d6:ac:ab:84:04:09:84:66:4c:94:40:40:fa:3b:96:37:2d:
         5e:c7:c9:84:53:9c:e1:33:3e:04:f9:26:9d:2d:01:0c:a9:68:
         85:b6:3e:5c:14:e5:70:2d:62:34:ff:b3:47:d4:db:a6:3e:84:
         4d:82:61:db:31:8d:ce:87:a1:39:e8:92:f9:86:d4:e9:37:21:
         63:ed:9a:89
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDH6xXOdF99pr5AQPQkZ767MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZGQ3YWUxMmQyYTM3ZjIxYWFjNmY4MWI2YWY2N2Q2NjE3
Y2EyOGUwHhcNMjYwOTIyMDcwMTA3WhcNMjYwOTIzMDcwMTA3WjAzMTEwLwYDVQQD
Eyg0NDJiOThlYmY3MDM1ODU0MTE3YWMzNGRlNTNhY2IzY2NmZGQ2MmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeKC1qMHpvDjpcUrCwZV7L2LXw/X
twCGWjcrTtjhJQFV0dKOTz4QXWjzRQa/lVurQs2gAhiK4QR2Sj5Z5SjfYqbUyVMj
KwdmNbhDTqU9f+ls+AcxH5hwN22bLAk75B3tiJDBsRAfEhNTYmO1k+/YbsHkUN14
aFOCSejkYfLRyss48JyWgNXFg3WFW1DknQDkhtn9Y6gTivqHcdrMg8WUZod3SwQb
po1QOEOTaDJXsAf5nymvhRbzMc35kc5YfRq5ZInGIiuElZeNOh8U4FdYS8SwigE/
LpSC7slaxMnjmGQK5a3MRGs4t1dUtNvtkdGsWTKS4Ewt7P/oId+5RznYOQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEQrmOv3A1hUEXrDTeU6yzzP3WL+MB8GA1UdIwQY
MBaAFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OMTY0UzBxTl9JYXJHLUJ0cTluMW1GOG9vNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNm
LTJiNGEzNTM4YzVlMy8xLzEtTjE2NFMwcU5fSWFyRy1CdHE5bjFtRjhvbzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA2LzJjMGQ4MC0zOTM3LTQ0NTUtYjljZi0yYjRhMzUzOGM1
ZTMvMS8xLU4xNjRTMHFOX0lhckctQnRxOW4xbUY4b280LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYeL
JXKVPeBW52nYxPBtzmkhIdLxAPjAJkcPWtP8DIutazNmg9412fW0a+HpJOxgJmhW
vfdtgNW+DTmT7GgUuad9gqNbKEEqqCUxVddH8jK1bYNivDBxdY9nnZr0piRAJSyO
XVv/zBdVxqwFGBC5qP3vOThLRAnjAvJufZr7dPfbbEFRP+yDUJ1H1ZgpeE6Occc9
X5EqPAxqKCsIf0o4SsEFCBIJ4eSyPgAi1XUSttkVQqzFeNasq4QECYRmTJRAQPo7
ljctXsfJhFOc4TM+BPkmnS0BDKlohbY+XBTlcC1iNP+zR9Tbpj6ETYJh2zGNzoeh
OeiS+YbU6TchY+2aiQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:49 2026 by rpki-client