Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File:                     AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier:          l7xKr79YNhFPjF5PzJezu4ymRa65rMhLVxImuSfgTWg=
Subject key identifier:   EE:27:84:28:85:14:8C:3F:AA:0F:9C:82:68:78:9B:34:C4:73:71:88
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer:       /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial:       01A0C82125BF56BF1A8582A8AD390D3ADA96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number:          132A
Signing time:             Tue 22 Sep 2026 08:00:10 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:10 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:10 +0000
Files and hashes:         1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: jftULn+L0ltnQh7fyvILbq6ii83OjBIZaVosfnel+ns=)
                          2: mIZXI4mZrRbzXPh4YmTsjubQ1Zc.roa (hash: bzN5/dHvXtXSM/Oh2+pMoFqPyzgsKGPGMLfbcUvulmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:25:bf:56:bf:1a:85:82:a8:ad:39:0d:3a:da:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
        Validity
            Not Before: Sep 22 08:00:10 2026 GMT
            Not After : Sep 23 08:00:10 2026 GMT
        Subject: CN=ee27842885148c3faa0f9c8268789b34c4737188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:47:a9:aa:5a:32:3c:05:f0:20:42:bd:91:
                    20:74:55:f7:8a:28:a5:ff:69:4c:49:52:77:11:4b:
                    fd:6e:80:38:45:8b:76:ec:12:99:41:e8:3b:e9:8d:
                    5e:a8:42:c5:21:35:02:2f:38:83:e4:7a:65:ca:c4:
                    0d:81:85:fa:a3:94:ac:6b:d4:fa:38:50:55:ea:18:
                    67:c9:5e:a1:83:15:d1:45:3d:96:5f:35:b1:97:95:
                    15:d5:8d:0a:f3:c6:99:18:37:9b:85:a5:89:13:b0:
                    e8:83:30:13:60:e7:92:dd:2c:5c:8e:d1:f3:5b:58:
                    84:df:6c:2f:64:01:f4:4b:50:aa:94:63:13:f6:80:
                    bf:9f:b2:f4:38:1d:d6:08:f2:78:4f:0e:26:b8:c8:
                    60:cf:51:13:2c:e6:1a:a9:9d:60:f7:fb:2a:cc:3e:
                    69:4e:1f:0f:e3:5c:0e:be:75:8b:d1:69:e5:22:b5:
                    4c:21:12:32:a4:fb:48:d6:2a:44:72:37:67:ab:f7:
                    9e:90:5a:a4:4c:b9:5d:28:a4:ba:f3:92:ea:f3:b7:
                    d2:33:39:b3:df:3f:22:b4:8e:87:d5:7e:1b:5d:7d:
                    a2:ae:5b:db:65:a2:a9:29:05:4c:a0:fc:9e:b7:c7:
                    4e:33:d6:45:2b:75:f6:4b:6a:12:d2:49:18:cb:08:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:27:84:28:85:14:8C:3F:AA:0F:9C:82:68:78:9B:34:C4:73:71:88
            X509v3 Authority Key Identifier:
                keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:92:50:0d:38:6c:a1:54:25:20:98:15:8a:7f:e0:40:4c:e9:
         03:2d:18:cf:67:1b:f8:39:3d:8b:ae:0a:e4:ba:7f:86:cf:3e:
         da:c6:6d:10:10:58:9f:47:7b:68:0a:55:9f:16:92:59:a1:f5:
         a2:aa:12:b7:9b:48:d9:a4:4d:63:a5:3b:0f:42:c8:2c:3a:3c:
         19:27:c9:82:00:da:06:12:f1:be:cd:c0:5e:2e:fb:a1:92:68:
         3d:7a:52:bd:0f:13:be:1d:45:64:d7:d5:82:6b:9f:57:5c:92:
         3c:88:4a:9c:65:4f:a7:61:8e:d8:35:c0:27:e1:23:33:93:79:
         06:cb:af:9b:ef:04:ce:6f:ac:dc:11:94:44:39:f8:f7:e0:86:
         02:28:ab:b6:eb:d7:6c:f6:b8:4f:5a:52:45:f4:e8:3e:6d:1d:
         0b:1f:45:1d:dc:cd:d0:f1:b4:ed:8e:cd:e3:fd:9f:c9:d8:f5:
         17:28:c8:4b:d8:95:d2:b6:d7:53:36:b7:1f:6e:2b:2b:fa:a8:
         26:fb:4b:e5:88:d3:cf:fa:f5:97:29:4c:3b:c5:58:e6:28:9f:
         c0:75:58:94:ae:48:1d:e1:29:86:f9:1f:26:88:63:11:1e:11:
         e1:3a:10:d4:71:db:02:be:1f:a1:ec:42:fa:2b:23:43:75:66:
         93:09:e3:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIISW/Vr8ahYKorTkNOtqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDFlZjQ0MzYxNDI1MDZmMjY1OTM4M2MxNmViZGExZTI5
YjRmODYwHhcNMjYwOTIyMDgwMDEwWhcNMjYwOTIzMDgwMDEwWjAzMTEwLwYDVQQD
EyhlZTI3ODQyODg1MTQ4YzNmYWEwZjljODI2ODc4OWIzNGM0NzM3MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W1HqapaMjwF8CBCvZEgdFX3iiil
/2lMSVJ3EUv9boA4RYt27BKZQeg76Y1eqELFITUCLziD5HplysQNgYX6o5Ssa9T6
OFBV6hhnyV6hgxXRRT2WXzWxl5UV1Y0K88aZGDebhaWJE7DogzATYOeS3SxcjtHz
W1iE32wvZAH0S1CqlGMT9oC/n7L0OB3WCPJ4Tw4muMhgz1ETLOYaqZ1g9/sqzD5p
Th8P41wOvnWL0WnlIrVMIRIypPtI1ipEcjdnq/eekFqkTLldKKS685Lq87fSMzmz
3z8itI6H1X4bXX2irlvbZaKpKQVMoPyet8dOM9ZFK3X2S2oS0kkYywjucQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4nhCiFFIw/qg+cgmh4mzTEc3GIMB8GA1UdIwQY
MBaAFAJB70Q2FCUG8mWTg8FuvaHim0+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEt
OWZkZjRjMTVmOWE2LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEtOWZkZjRjMTVmOWE2
LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJJQDThs
oVQlIJgVin/gQEzpAy0Yz2cb+Dk9i64K5Lp/hs8+2sZtEBBYn0d7aApVnxaSWaH1
oqoSt5tI2aRNY6U7D0LILDo8GSfJggDaBhLxvs3AXi77oZJoPXpSvQ8Tvh1FZNfV
gmufV1ySPIhKnGVPp2GO2DXAJ+EjM5N5Bsuvm+8Ezm+s3BGURDn49+CGAiirtuvX
bPa4T1pSRfToPm0dCx9FHdzN0PG07Y7N4/2fydj1FyjIS9iV0rbXUza3H24rK/qo
JvtL5YjTz/r1lylMO8VY5iifwHVYlK5IHeEphvkfJohjER4R4ToQ1HHbAr4foexC
+isjQ3Vmkwnjaw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:31:28 2026 by rpki-client