Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File:                     71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier:          U/AFQ7/TbQDrsKSgBHy9t7+oVEOa5GjtrrWPtEPSSWU=
Subject key identifier:   E9:AC:CC:FA:C2:3F:44:AC:92:17:A7:63:DC:D6:FC:14:42:09:72:54
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       01A0C3328C9425290645C64E7C53789D52FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number:          0751
Signing time:             Mon 21 Sep 2026 09:01:04 +0000
Manifest this update:     Mon 21 Sep 2026 09:01:04 +0000
Manifest next update:     Tue 22 Sep 2026 09:01:04 +0000
Files and hashes:         1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: uTZdgyyYYtbQrbFUCVYIW0sDfnNN9kvXQgzv9V+GE4k=)
                          2: 9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa (hash: SoSvqfnQLKFn05LffsfjlMnv43OqaQmrvJqr1M8+Itw=)
                          3: Du79ji7HHfBba4InbN4bIGS0_iA.roa (hash: tcL+qNRXPaCLc8dP3FfLSCO8N4UwsOC7d+xUqdSxXTQ=)
                          4: RKdFVmXrgBUxVrb-m3ssg9G89V8.asa (hash: moQVYKRLDWz1bETxxHsk0fqtvaRGwzZCLCS/RcVGIHI=)
                          5: rkM9Dkk27e7GrxAxgpwlexYfMwo.asa (hash: z9mDNW7ukOPcxH+u/vWCCay6OznLkVvoVt6PHopHPgo=)
                          6: yoNR3031t1c5fIpSVbBNiZg-fgU.roa (hash: WFBkEZbt/RtOe+ZGOFWHx7RKyRoySV4z75BvLA08kjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:32:8c:94:25:29:06:45:c6:4e:7c:53:78:9d:52:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Sep 21 09:01:04 2026 GMT
            Not After : Sep 22 09:01:04 2026 GMT
        Subject: CN=e9acccfac23f44ac9217a763dcd6fc1442097254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:68:49:43:72:a4:4b:63:94:d7:68:a7:d5:
                    a8:73:1f:53:99:9a:e4:d7:1e:d8:4b:29:cb:58:5c:
                    44:66:6b:75:6e:5e:19:e7:7e:9d:f8:c9:11:ad:ae:
                    70:17:d1:08:26:d9:bb:0e:88:0e:08:d9:07:af:a8:
                    4e:92:a2:13:82:7a:f0:67:81:18:5f:13:78:d3:a2:
                    fb:19:f2:e1:7b:8a:4a:2f:ec:eb:3a:43:44:e9:f4:
                    1c:e6:fe:df:2a:13:68:71:16:d0:c8:66:4d:05:7f:
                    4d:28:83:55:1d:42:26:92:d9:f7:fd:5c:36:3c:57:
                    0c:ec:24:1f:a0:ba:11:47:11:ad:3e:0e:ea:05:53:
                    19:4e:c8:1c:3c:e2:d3:4a:3c:a5:74:a0:30:04:df:
                    4c:12:ab:cb:d1:d7:a8:7d:71:ff:ae:f5:b7:39:9f:
                    71:cf:48:b1:d4:f9:a5:ae:f3:9f:d1:b5:cc:a9:3d:
                    fd:26:36:de:34:6d:0b:25:b0:c9:40:16:02:e6:58:
                    eb:03:d7:53:0a:07:be:5d:62:70:01:bc:1d:da:85:
                    b1:bf:f4:28:5a:c0:da:44:ab:00:42:76:98:f8:5d:
                    e0:5d:83:3e:7f:29:67:fd:83:c7:ff:e1:78:eb:e6:
                    1b:dc:32:60:2d:33:a5:44:0b:67:70:80:7d:56:d5:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:CC:FA:C2:3F:44:AC:92:17:A7:63:DC:D6:FC:14:42:09:72:54
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d4:d6:ec:0b:4c:3d:c1:37:0a:fe:56:7b:ce:c4:f9:bb:a2:
         d7:53:4a:0d:31:19:34:38:28:02:30:f7:f6:df:8d:dd:82:71:
         49:70:be:05:df:de:0f:90:b1:bf:87:90:e7:b1:4f:75:ec:2d:
         3a:c7:6b:20:02:ca:5b:12:fc:53:cc:8d:1b:be:97:9c:a0:e8:
         5a:61:16:a9:e4:0a:a6:9e:6c:d7:bd:f5:87:7a:7a:d9:1f:fe:
         4d:8d:ea:81:54:fe:0c:d6:27:7b:19:ce:38:64:f3:be:3b:57:
         69:b9:a7:ad:45:e2:2e:31:c8:b4:78:11:20:dc:05:da:bb:b5:
         3f:83:ce:d9:dd:4c:8d:8c:4d:6a:a7:6b:49:c7:7b:d1:e6:5c:
         14:9b:fb:36:cb:ad:d2:58:f8:c9:4c:f1:69:00:c8:6a:4d:1d:
         f1:01:dc:af:82:4e:c7:fe:52:88:89:58:f8:e0:9e:a8:44:fc:
         cd:99:c4:4a:d0:49:49:23:f8:c5:84:30:df:ee:88:1e:55:c1:
         94:26:7c:2d:0c:90:50:4e:e2:e4:43:b2:f2:c2:b0:79:f6:ca:
         4b:94:5f:fb:f4:bd:25:84:cf:da:09:c4:ee:1b:ac:5f:77:33:
         09:7e:ef:92:6a:26:d4:6c:e7:49:3e:69:c6:9c:a8:23:aa:e8:
         f1:29:fb:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMoyUJSkGRcZOfFN4nVL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTU0NTk2NDU5NzljNDEzZDBiYzZmNzQ1NGYwZDM2ZTQw
ZTk5ZjkwHhcNMjYwOTIxMDkwMTA0WhcNMjYwOTIyMDkwMTA0WjAzMTEwLwYDVQQD
EyhlOWFjY2NmYWMyM2Y0NGFjOTIxN2E3NjNkY2Q2ZmMxNDQyMDk3MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrZoSUNypEtjlNdop9Wocx9TmZrk
1x7YSynLWFxEZmt1bl4Z536d+MkRra5wF9EIJtm7DogOCNkHr6hOkqITgnrwZ4EY
XxN406L7GfLhe4pKL+zrOkNE6fQc5v7fKhNocRbQyGZNBX9NKINVHUImktn3/Vw2
PFcM7CQfoLoRRxGtPg7qBVMZTsgcPOLTSjyldKAwBN9MEqvL0deofXH/rvW3OZ9x
z0ix1PmlrvOf0bXMqT39JjbeNG0LJbDJQBYC5ljrA9dTCge+XWJwAbwd2oWxv/Qo
WsDaRKsAQnaY+F3gXYM+fyln/YPH/+F46+Yb3DJgLTOlRAtncIB9VtWryQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmszPrCP0SskhenY9zW/BRCCXJUMB8GA1UdIwQY
MBaAFO9VRZZFl5xBPQvG90VPDTbkDpn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQt
ODI1MzFlOWM3ODA0LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQtODI1MzFlOWM3ODA0
LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdTW7AtM
PcE3Cv5We87E+bui11NKDTEZNDgoAjD39t+N3YJxSXC+Bd/eD5Cxv4eQ57FPdewt
OsdrIALKWxL8U8yNG76XnKDoWmEWqeQKpp5s1731h3p62R/+TY3qgVT+DNYnexnO
OGTzvjtXabmnrUXiLjHItHgRINwF2ru1P4PO2d1MjYxNaqdrScd70eZcFJv7Nsut
0lj4yUzxaQDIak0d8QHcr4JOx/5SiIlY+OCeqET8zZnEStBJSSP4xYQw3+6IHlXB
lCZ8LQyQUE7i5EOy8sKwefbKS5Rf+/S9JYTP2gnE7husX3czCX7vkmom1GznST5p
xpyoI6ro8Sn7zA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:23:59 2026 by rpki-client