Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File:                     9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier:          kVa3pkeT5zoSTau7SfVp3kQVGbqysyLY0ikOjoBhoc8=
Subject key identifier:   37:9C:36:CB:62:75:7B:84:52:29:FD:B0:CA:7D:58:60:F4:1D:92:9F
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer:       /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial:       01A11898CD00864DD967817BDDCA23082D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number:          1A92
Signing time:             Wed 07 Oct 2026 23:00:29 +0000
Manifest this update:     Wed 07 Oct 2026 23:00:29 +0000
Manifest next update:     Thu 08 Oct 2026 23:00:29 +0000
Files and hashes:         1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: Cy590vMGU66+UvazZf2F5Az4LzrS5JiA34d80Gmxwfs=)
                          2: sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa (hash: svJIfKZ/TOmm8xXRzXlM/7QXfhtfTNna41fpYKpF970=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:98:cd:00:86:4d:d9:67:81:7b:dd:ca:23:08:2d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
        Validity
            Not Before: Oct  7 23:00:29 2026 GMT
            Not After : Oct  8 23:00:29 2026 GMT
        Subject: CN=379c36cb62757b845229fdb0ca7d5860f41d929f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:4d:2e:fc:66:1d:5a:7b:7d:76:ac:fc:91:
                    c6:a7:52:90:56:b4:d7:77:bd:06:59:e4:7e:95:ca:
                    44:0f:80:dc:89:b8:51:2a:3a:25:2f:76:eb:1f:ca:
                    92:b6:6f:20:af:4c:66:63:29:23:c9:02:32:b5:64:
                    5a:05:d1:d6:a1:1a:1d:62:3a:1c:ee:f2:0b:88:85:
                    2a:44:47:b4:cb:9f:8b:f0:fb:98:a2:e3:fa:31:73:
                    a9:8a:9a:36:12:3f:32:8c:06:39:a1:e8:bd:5a:4e:
                    e5:46:7e:b9:09:02:86:44:51:4c:2d:4a:8f:ed:51:
                    94:6e:20:80:df:1e:25:50:b9:3e:4f:be:55:91:68:
                    9a:87:f0:ca:a0:aa:ef:12:f6:af:eb:1c:ce:51:ec:
                    19:57:ab:df:f2:db:3b:67:88:94:de:8b:4e:82:c7:
                    08:2f:34:02:e3:6b:79:85:7c:88:e1:6e:9b:a9:1c:
                    98:5a:f2:01:01:16:3f:51:3c:c8:fc:84:fe:44:48:
                    c4:1c:30:3a:15:71:57:01:dd:15:dc:c3:95:fa:30:
                    16:d3:30:b1:91:a0:cc:7b:a5:ce:17:eb:99:25:b2:
                    6a:b2:c5:37:57:f1:00:3c:ec:b5:29:8a:a8:83:54:
                    76:3c:63:27:36:a2:d2:14:8b:89:d5:23:ec:24:d5:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9C:36:CB:62:75:7B:84:52:29:FD:B0:CA:7D:58:60:F4:1D:92:9F
            X509v3 Authority Key Identifier:
                keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:6a:c3:ce:e8:d4:8e:93:5d:28:fa:bd:90:ab:89:3e:3a:
         d6:72:74:b3:37:70:af:ae:7c:99:aa:f3:3c:bc:22:f2:a3:1b:
         07:07:31:18:19:2b:5e:de:b7:0c:ac:3d:46:12:53:09:02:97:
         d5:c0:34:7b:e8:e5:c0:af:de:1e:ce:10:bb:eb:be:ea:4d:65:
         54:30:f6:65:5f:96:cb:ce:aa:7d:d0:86:36:9f:dc:db:19:dd:
         d3:cc:1b:08:3f:d4:03:dc:cf:cc:2d:17:89:73:03:a9:e7:86:
         b4:17:0d:95:f8:0c:ad:bf:3d:57:a1:d5:9c:22:09:83:95:79:
         26:fa:ec:1e:55:89:e9:75:eb:25:2e:4b:ed:ab:42:a8:c2:38:
         51:e8:ea:0e:2b:90:b6:81:fa:76:42:c9:66:d8:9a:e3:b7:4f:
         74:31:ac:53:04:a6:d1:11:e8:7c:8d:c2:73:e2:28:52:42:08:
         1e:b8:19:56:02:12:5d:f6:1a:47:0c:13:65:d0:7a:19:39:31:
         b6:71:da:15:8b:5c:e2:0c:27:98:3a:89:0e:ba:5b:19:7f:30:
         9c:88:5e:6a:6b:60:30:d5:02:59:94:68:eb:09:2a:c2:b3:d6:
         8e:e5:d0:5a:bf:73:db:df:30:1b:b4:78:f3:9c:72:1c:b9:16:
         88:1d:7b:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYmM0Ahk3ZZ4F73cojCC1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmJhNTVlMWYwYmY4NjEzZWE5YmJiZTI5N2EyODFiM2M4
MzgxODAwHhcNMjYxMDA3MjMwMDI5WhcNMjYxMDA4MjMwMDI5WjAzMTEwLwYDVQQD
EygzNzljMzZjYjYyNzU3Yjg0NTIyOWZkYjBjYTdkNTg2MGY0MWQ5MjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrJNLvxmHVp7fXas/JHGp1KQVrTX
d70GWeR+lcpED4DcibhRKjolL3brH8qStm8gr0xmYykjyQIytWRaBdHWoRodYjoc
7vILiIUqREe0y5+L8PuYouP6MXOpipo2Ej8yjAY5oei9Wk7lRn65CQKGRFFMLUqP
7VGUbiCA3x4lULk+T75VkWiah/DKoKrvEvav6xzOUewZV6vf8ts7Z4iU3otOgscI
LzQC42t5hXyI4W6bqRyYWvIBARY/UTzI/IT+REjEHDA6FXFXAd0V3MOV+jAW0zCx
kaDMe6XOF+uZJbJqssU3V/EAPOy1KYqog1R2PGMnNqLSFIuJ1SPsJNX40QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDecNstidXuEUin9sMp9WGD0HZKfMB8GA1UdIwQY
MBaAFPW7pV4fC/hhPqm7vil6KBs8g4GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2Ut
ZjViOTdjMGYwZjI0LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2UtZjViOTdjMGYwZjI0
LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbRqw87o
1I6TXSj6vZCriT461nJ0szdwr658marzPLwi8qMbBwcxGBkrXt63DKw9RhJTCQKX
1cA0e+jlwK/eHs4Qu+u+6k1lVDD2ZV+Wy86qfdCGNp/c2xnd08wbCD/UA9zPzC0X
iXMDqeeGtBcNlfgMrb89V6HVnCIJg5V5JvrsHlWJ6XXrJS5L7atCqMI4UejqDiuQ
toH6dkLJZtia47dPdDGsUwSm0RHofI3Cc+IoUkIIHrgZVgISXfYaRwwTZdB6GTkx
tnHaFYtc4gwnmDqJDrpbGX8wnIheamtgMNUCWZRo6wkqwrPWjuXQWr9z298wG7R4
85xyHLkWiB17Bw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:31:52 2026 by rpki-client