Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File:                     0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier:          DAUwOgnJ4K/NUpkiPdQCf6ARbiI08y7YbYbymScDHfk=
Subject key identifier:   B2:29:D2:F6:59:92:63:9E:77:1D:E9:DA:27:4E:CD:D0:E1:C8:A4:91
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer:       /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial:       01A0C1E819E057827279695A69C867D09403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number:          0391
Signing time:             Mon 21 Sep 2026 03:00:08 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:08 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:08 +0000
Files and hashes:         1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: muZdBEPeaWRTqfRqQq6RgFXrj7oCdkenzSIbSpRs/nk=)
                          2: BMvBIwftHVjOq-ECziUj7FT9eNs.roa (hash: VyJ9dmhC8T/OTxMz+hnV4q4zH9/xxLGMFMd7o25VL7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 03:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:19:e0:57:82:72:79:69:5a:69:c8:67:d0:94:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
        Validity
            Not Before: Sep 21 03:00:08 2026 GMT
            Not After : Sep 22 03:00:08 2026 GMT
        Subject: CN=b229d2f65992639e771de9da274ecdd0e1c8a491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:19:1c:77:e5:97:f8:59:e5:f4:f3:7e:8f:2a:
                    4c:e0:cc:8c:81:55:a9:45:2e:52:64:2b:0b:3d:7d:
                    ff:54:6f:1b:b5:e6:7e:84:1e:93:f0:9d:d3:83:3d:
                    bd:04:09:f2:ab:15:61:d7:07:6c:de:8d:6b:03:b7:
                    ef:d3:ef:3d:91:c5:69:e5:e4:87:42:b9:f7:58:83:
                    d4:3f:c4:6e:c5:f5:a5:f8:76:74:4a:16:f1:1a:2a:
                    d2:e4:7d:35:f3:08:63:fc:18:db:de:23:fe:2c:a4:
                    72:28:7c:8a:20:e7:38:32:cc:dd:a7:82:0e:84:31:
                    e6:5c:89:cc:02:82:d2:af:f1:82:52:a2:cd:18:64:
                    5a:48:d1:6a:6e:52:12:d7:3f:bf:c4:0c:d0:ba:f0:
                    a6:9d:fc:d1:42:88:02:2f:7c:c2:6f:77:88:db:65:
                    00:9b:08:75:56:6e:b6:08:c5:ed:76:b3:4f:97:f7:
                    4c:51:0c:de:27:af:3b:8f:4d:7b:e4:b0:65:f1:42:
                    4c:cc:14:de:77:a2:34:88:cc:74:8f:d9:be:53:1e:
                    20:ba:6a:5a:4c:2f:a7:67:92:80:07:48:8d:d1:4e:
                    2a:8d:26:f0:df:c8:6d:c6:d5:e5:58:06:09:e4:8c:
                    f3:bd:59:a9:9b:7b:2d:18:9e:4e:1d:85:fb:af:ef:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:29:D2:F6:59:92:63:9E:77:1D:E9:DA:27:4E:CD:D0:E1:C8:A4:91
            X509v3 Authority Key Identifier:
                keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b8:ae:7d:80:31:04:41:d3:52:3b:23:5b:99:1d:01:28:a9:
         ae:64:94:73:fb:91:e7:67:08:1e:b1:1e:e1:a6:15:56:46:52:
         49:05:97:23:4d:20:22:8b:90:4f:b3:78:cd:9a:94:cd:57:9b:
         a2:9c:82:89:72:79:44:ea:e4:85:c5:1b:c6:13:e5:e3:e2:5c:
         39:4f:16:80:b2:a1:73:40:4a:35:ba:2d:29:e8:da:05:d1:cb:
         74:54:07:2b:f4:8c:ff:2a:62:2e:72:da:bc:c0:65:59:c2:d1:
         8b:de:ae:d2:4a:ca:cc:d2:ad:c3:ac:fc:1e:5f:a9:c9:91:b7:
         3b:d7:2a:03:e9:5b:f9:66:0c:8b:de:04:dd:7b:4b:ff:a3:d3:
         1d:30:ac:ae:aa:aa:bb:a0:04:aa:3f:de:76:0b:3b:b5:69:fd:
         d2:09:0b:50:32:42:10:5d:1e:5e:c0:eb:33:28:72:9c:10:0c:
         45:8e:75:e4:cb:25:9f:ae:0d:f6:b3:0f:f7:50:6d:97:3f:ae:
         03:4b:3e:a9:76:98:e8:e2:17:57:60:27:50:15:de:c7:8a:6d:
         91:25:b9:a0:96:d9:4e:e2:fa:22:58:4a:b3:3e:43:19:0a:1f:
         44:ad:15:8f:ee:7c:92:32:fd:ec:98:2d:a7:6f:d0:8f:b8:ee:
         3f:54:28:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6BngV4JyeWlaachn0JQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZWQ2NjRmNGFmMmY4ZTExOWI4N2EyNjhjNWQ0MzAzZmJi
MzYxMTYwHhcNMjYwOTIxMDMwMDA4WhcNMjYwOTIyMDMwMDA4WjAzMTEwLwYDVQQD
EyhiMjI5ZDJmNjU5OTI2MzllNzcxZGU5ZGEyNzRlY2RkMGUxYzhhNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xkcd+WX+Fnl9PN+jypM4MyMgVWp
RS5SZCsLPX3/VG8bteZ+hB6T8J3Tgz29BAnyqxVh1wds3o1rA7fv0+89kcVp5eSH
Qrn3WIPUP8RuxfWl+HZ0ShbxGirS5H018whj/Bjb3iP+LKRyKHyKIOc4Mszdp4IO
hDHmXInMAoLSr/GCUqLNGGRaSNFqblIS1z+/xAzQuvCmnfzRQogCL3zCb3eI22UA
mwh1Vm62CMXtdrNPl/dMUQzeJ687j0175LBl8UJMzBTed6I0iMx0j9m+Ux4gumpa
TC+nZ5KAB0iN0U4qjSbw38htxtXlWAYJ5IzzvVmpm3stGJ5OHYX7r+9+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIp0vZZkmOedx3p2idOzdDhyKSRMB8GA1UdIwQY
MBaAFNHtZk9K8vjhGbh6JoxdQwP7s2EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2Mt
NGI5NTI5YjQ4Y2VhLzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2MtNGI5NTI5YjQ4Y2Vh
LzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLiufYAx
BEHTUjsjW5kdASiprmSUc/uR52cIHrEe4aYVVkZSSQWXI00gIouQT7N4zZqUzVeb
opyCiXJ5ROrkhcUbxhPl4+JcOU8WgLKhc0BKNbotKejaBdHLdFQHK/SM/ypiLnLa
vMBlWcLRi96u0krKzNKtw6z8Hl+pyZG3O9cqA+lb+WYMi94E3XtL/6PTHTCsrqqq
u6AEqj/edgs7tWn90gkLUDJCEF0eXsDrMyhynBAMRY515Msln64N9rMP91Btlz+u
A0s+qXaY6OIXV2AnUBXex4ptkSW5oJbZTuL6IlhKsz5DGQofRK0Vj+58kjL97Jgt
p2/Qj7juP1QoqA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:18:04 2026 by rpki-client