Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File:                     9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier:          pnGleLfnKs2RTA0XR6py4nC4kkrbfU/HyCs98dX1Dcg=
Subject key identifier:   81:F6:AB:18:FC:27:FF:B5:DB:A3:64:5B:AB:F2:86:F8:1D:4F:2B:5D
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer:       /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial:       01A0C2FACC1861CC195C39D89EAD1A2B67DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number:          0D7B
Signing time:             Mon 21 Sep 2026 08:00:11 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:11 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:11 +0000
Files and hashes:         1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: o0TXiga6GltP2qdZ044rgg1OqUyPuOgidEqEJYF8rCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fa:cc:18:61:cc:19:5c:39:d8:9e:ad:1a:2b:67:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
        Validity
            Not Before: Sep 21 08:00:11 2026 GMT
            Not After : Sep 22 08:00:11 2026 GMT
        Subject: CN=81f6ab18fc27ffb5dba3645babf286f81d4f2b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:0d:54:9b:42:7c:25:26:14:bc:b1:9f:f1:
                    fd:5f:32:f9:ad:d2:28:26:b0:01:d1:7f:07:be:14:
                    33:da:41:aa:a1:03:ad:d6:40:b8:1d:ec:04:70:7f:
                    19:e0:b9:2b:8b:47:a9:45:0f:4b:4e:a4:48:a7:11:
                    a7:94:30:4f:a1:78:97:4c:c2:9a:36:52:db:79:1e:
                    6a:f0:c1:60:37:88:f9:25:19:30:c6:37:fb:54:8f:
                    08:90:54:cc:4c:41:ee:62:32:8f:43:99:24:90:8e:
                    7f:b9:09:05:9b:b3:21:6f:ca:1e:54:47:63:d1:1d:
                    be:87:0c:53:e4:8b:34:37:d0:6d:94:9e:02:d1:b2:
                    6a:07:47:9c:0a:1a:f8:5c:9a:b1:0b:cd:fe:52:59:
                    81:3b:86:e7:49:3a:e7:af:e2:eb:ee:25:9b:e9:78:
                    42:b7:a6:19:2c:b9:c7:08:93:98:c3:98:c4:8b:ba:
                    23:16:44:6c:7a:8d:07:70:23:8c:65:b9:c2:40:eb:
                    0a:8f:74:07:05:54:9e:01:1a:89:b8:c0:71:0b:b1:
                    9f:9f:87:ec:0e:e7:07:70:b4:71:d9:4c:df:d1:51:
                    33:4a:c3:5e:dd:02:b2:97:17:4e:67:78:f7:61:bf:
                    0e:1d:47:fc:76:e0:e8:80:e8:6a:e3:a4:3b:27:83:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F6:AB:18:FC:27:FF:B5:DB:A3:64:5B:AB:F2:86:F8:1D:4F:2B:5D
            X509v3 Authority Key Identifier:
                keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0b:ba:13:b4:8a:02:be:1a:a4:bb:3c:a1:e4:0f:e6:9e:79:
         a7:06:39:f6:5d:52:99:53:36:13:d3:d5:f8:76:3b:fb:a0:24:
         19:5d:a6:91:46:b2:aa:2e:75:ee:3b:0f:75:42:5c:05:00:3f:
         da:c5:62:a4:1e:a7:45:1e:30:7d:c2:7d:ae:3e:0a:26:3d:58:
         3b:e6:09:5c:70:6b:25:9d:34:46:df:2c:0a:ca:50:58:44:58:
         35:d2:ad:61:82:7c:b8:fd:51:76:da:a8:07:dc:d5:f2:be:e2:
         b2:41:29:ec:ed:08:c2:d9:09:cc:a1:f7:84:47:1f:c5:c4:bc:
         5a:1e:35:bb:a8:8e:21:84:07:5c:1f:79:73:1a:a7:5d:69:a3:
         5c:cf:31:6c:17:77:a8:d4:d7:b2:7f:82:ea:f5:60:33:3a:b8:
         5c:53:54:05:78:6e:b3:b0:00:19:54:8d:50:f3:25:15:12:a3:
         43:f8:e1:85:0f:8a:50:00:2b:80:53:39:70:42:7c:d9:80:12:
         f8:50:a3:44:14:b2:09:d2:ee:93:1e:28:30:0e:ec:6e:51:4c:
         a5:fc:0e:4e:95:e9:e8:cc:d1:96:89:a4:be:f2:93:e4:32:af:
         9b:d3:89:5e:f1:0d:6c:1d:db:fd:5a:4f:35:95:ed:b5:ee:52:
         2a:92:b9:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+swYYcwZXDnYnq0aK2fbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MjcyYWMwNDIzZmIwOTc1ODNjNjg3MjU2N2Q4NGNhZTQx
MGM4OWIwHhcNMjYwOTIxMDgwMDExWhcNMjYwOTIyMDgwMDExWjAzMTEwLwYDVQQD
Eyg4MWY2YWIxOGZjMjdmZmI1ZGJhMzY0NWJhYmYyODZmODFkNGYyYjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAINVJtCfCUmFLyxn/H9XzL5rdIo
JrAB0X8HvhQz2kGqoQOt1kC4HewEcH8Z4Lkri0epRQ9LTqRIpxGnlDBPoXiXTMKa
NlLbeR5q8MFgN4j5JRkwxjf7VI8IkFTMTEHuYjKPQ5kkkI5/uQkFm7Mhb8oeVEdj
0R2+hwxT5Is0N9BtlJ4C0bJqB0ecChr4XJqxC83+UlmBO4bnSTrnr+Lr7iWb6XhC
t6YZLLnHCJOYw5jEi7ojFkRseo0HcCOMZbnCQOsKj3QHBVSeARqJuMBxC7Gfn4fs
DucHcLRx2Uzf0VEzSsNe3QKylxdOZ3j3Yb8OHUf8duDogOhq46Q7J4OyUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH2qxj8J/+126NkW6vyhvgdTytdMB8GA1UdIwQY
MBaAFPQnKsBCP7CXWDxoclZ9hMrkEMibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEt
NDdlZGRkZTJhMzcyLzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEtNDdlZGRkZTJhMzcy
LzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwu6E7SK
Ar4apLs8oeQP5p55pwY59l1SmVM2E9PV+HY7+6AkGV2mkUayqi517jsPdUJcBQA/
2sVipB6nRR4wfcJ9rj4KJj1YO+YJXHBrJZ00Rt8sCspQWERYNdKtYYJ8uP1Rdtqo
B9zV8r7iskEp7O0IwtkJzKH3hEcfxcS8Wh41u6iOIYQHXB95cxqnXWmjXM8xbBd3
qNTXsn+C6vVgMzq4XFNUBXhus7AAGVSNUPMlFRKjQ/jhhQ+KUAArgFM5cEJ82YAS
+FCjRBSyCdLukx4oMA7sblFMpfwOTpXp6MzRlomkvvKT5DKvm9OJXvENbB3b/VpP
NZXtte5SKpK5Jw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:00:09 2026 by rpki-client