Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
File:                     m_RXG73K1sGXqwWraa_s_yq0M94.mft (raw, json)
Hash identifier:          IQktSJKefFRRp2gUM2RbhGFmqMrXR2FjUGT+T6euN+M=
Subject key identifier:   81:D1:05:49:72:E0:4E:41:FA:05:F3:1E:A3:1C:5C:60:43:97:94:92
Authority key identifier: 9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE
Certificate issuer:       /CN=9bf4571bbdcad6c197ab05ab69afecff2ab433de
Certificate serial:       01A0BE0C1FABACBD06ABABD0B7092D5043BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
Manifest number:          74
Signing time:             Sun 20 Sep 2026 09:01:00 +0000
Manifest this update:     Sun 20 Sep 2026 09:01:00 +0000
Manifest next update:     Mon 21 Sep 2026 09:01:00 +0000
Files and hashes:         1: 2W10fbTAd8yGwEuKaeH7ybl8CDc.asa (hash: rzKp0oJWkHk92yLQerR5K/0WpCTmrJTmvjZ7huqWfKg=)
                          2: m_RXG73K1sGXqwWraa_s_yq0M94.crl (hash: 2TuRbxqOKdBGI/11wLvyWr4Ee7CFUtDbIbb0woUeVIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:0c:1f:ab:ac:bd:06:ab:ab:d0:b7:09:2d:50:43:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bf4571bbdcad6c197ab05ab69afecff2ab433de
        Validity
            Not Before: Sep 20 09:01:00 2026 GMT
            Not After : Sep 21 09:01:00 2026 GMT
        Subject: CN=81d1054972e04e41fa05f31ea31c5c6043979492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:6d:a5:fd:7b:a0:fb:06:ef:27:15:c7:80:
                    b5:5a:6c:9e:50:af:0b:a2:66:11:c2:86:f8:f3:7a:
                    ae:46:a2:55:aa:6d:b7:3a:82:ab:34:e5:eb:22:4f:
                    2d:33:f3:8f:23:93:32:5c:a7:0e:6c:7f:0c:dd:9e:
                    f2:b0:f7:52:cd:74:b0:14:c3:22:81:65:87:d7:eb:
                    d1:13:17:1e:70:ef:2e:9b:6d:39:98:27:b3:20:d1:
                    17:56:7e:72:41:97:bd:cb:13:d4:06:d9:17:d8:08:
                    40:94:c6:da:cb:f2:5e:09:71:c2:92:cc:5d:23:fa:
                    45:5a:35:ae:94:2b:f5:06:d6:0f:d8:2a:6c:56:6b:
                    e2:0e:e5:12:8c:c6:ff:4a:de:2c:67:80:ec:e2:0d:
                    fa:b2:75:bb:cc:ef:ae:6e:78:4e:86:26:a5:dd:a6:
                    f8:54:95:c4:c2:5d:18:d4:fc:db:23:d2:3b:71:dc:
                    77:49:f7:b1:bf:17:df:29:e9:0d:d7:c9:23:ba:ca:
                    86:0f:9d:27:81:0f:6c:c4:88:c3:09:34:53:ec:c0:
                    fa:12:94:93:e7:3f:5f:12:d0:6b:83:53:f8:06:75:
                    98:0f:fe:7d:69:d1:e8:f0:29:b1:87:b2:ce:13:a8:
                    7a:56:2b:be:d4:09:27:83:9a:ef:c8:23:8e:aa:30:
                    56:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D1:05:49:72:E0:4E:41:FA:05:F3:1E:A3:1C:5C:60:43:97:94:92
            X509v3 Authority Key Identifier:
                keyid:9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b0:cd:ed:a3:df:c2:bc:35:de:54:c8:b9:6e:76:24:ed:23:
         2a:d6:14:e2:a1:5c:32:23:79:04:4f:4d:33:af:31:fb:9f:3e:
         c9:c7:b2:9f:55:6c:25:1a:82:50:71:44:ad:de:6b:ec:65:72:
         1f:a0:5d:38:b9:13:ab:41:4f:87:0a:73:17:fe:48:f1:1a:7e:
         90:d8:12:bf:5f:f4:44:57:43:83:be:56:ed:3f:6c:f7:61:d6:
         9f:d6:2c:dc:0d:8c:2c:23:07:b1:5b:d9:2e:10:fd:8b:d5:50:
         95:36:e4:5f:c9:97:b1:27:e0:db:3d:9d:b9:9c:21:5f:43:06:
         c8:89:70:8e:11:de:7b:c7:1a:2b:52:62:a4:db:6c:d9:31:3c:
         fd:88:a0:92:b3:c6:d2:02:8a:70:48:3a:14:c3:9d:cd:6e:3b:
         22:e5:d8:40:de:9b:cf:d8:f1:15:21:96:81:69:db:45:71:5e:
         b2:06:cc:fb:dd:a2:3f:2c:e1:55:85:dc:47:b9:d7:30:c9:65:
         6d:89:0f:e4:c8:1d:48:1e:a2:a2:9f:de:35:f5:c8:df:f8:bc:
         b4:76:3f:a3:51:62:5b:6f:fa:06:86:a8:ee:6e:bf:64:e0:14:
         c9:43:51:be:96:6a:db:1a:a3:22:3e:b4:e6:ad:4c:16:df:0d:
         51:b7:dd:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+DB+rrL0Gq6vQtwktUEO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZjQ1NzFiYmRjYWQ2YzE5N2FiMDVhYjY5YWZlY2ZmMmFi
NDMzZGUwHhcNMjYwOTIwMDkwMTAwWhcNMjYwOTIxMDkwMTAwWjAzMTEwLwYDVQQD
Eyg4MWQxMDU0OTcyZTA0ZTQxZmEwNWYzMWVhMzFjNWM2MDQzOTc5NDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeZtpf17oPsG7ycVx4C1WmyeUK8L
omYRwob483quRqJVqm23OoKrNOXrIk8tM/OPI5MyXKcObH8M3Z7ysPdSzXSwFMMi
gWWH1+vRExcecO8um205mCezINEXVn5yQZe9yxPUBtkX2AhAlMbay/JeCXHCksxd
I/pFWjWulCv1BtYP2CpsVmviDuUSjMb/St4sZ4Ds4g36snW7zO+ubnhOhial3ab4
VJXEwl0Y1PzbI9I7cdx3SfexvxffKekN18kjusqGD50ngQ9sxIjDCTRT7MD6EpST
5z9fEtBrg1P4BnWYD/59adHo8Cmxh7LOE6h6Viu+1Akng5rvyCOOqjBWKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHRBUly4E5B+gXzHqMcXGBDl5SSMB8GA1UdIwQY
MBaAFJv0Vxu9ytbBl6sFq2mv7P8qtDPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV9SWEc3M0sxc0dYcXdXcmFhX3NfeXEwTTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81MGVkZjEtY2NhYS00ZDNhLTg2ZDkt
NGRkMjQ0MWMyY2IyLzEvbV9SWEc3M0sxc0dYcXdXcmFhX3NfeXEwTTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81MGVkZjEtY2NhYS00ZDNhLTg2ZDktNGRkMjQ0MWMyY2Iy
LzEvbV9SWEc3M0sxc0dYcXdXcmFhX3NfeXEwTTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7DN7aPf
wrw13lTIuW52JO0jKtYU4qFcMiN5BE9NM68x+58+yceyn1VsJRqCUHFErd5r7GVy
H6BdOLkTq0FPhwpzF/5I8Rp+kNgSv1/0RFdDg75W7T9s92HWn9Ys3A2MLCMHsVvZ
LhD9i9VQlTbkX8mXsSfg2z2duZwhX0MGyIlwjhHee8caK1JipNts2TE8/YigkrPG
0gKKcEg6FMOdzW47IuXYQN6bz9jxFSGWgWnbRXFesgbM+92iPyzhVYXcR7nXMMll
bYkP5MgdSB6iop/eNfXI3/i8tHY/o1FiW2/6Boao7m6/ZOAUyUNRvpZq2xqjIj60
5q1MFt8NUbfdmw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:28 2026 by rpki-client