Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File:                     IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier:          o0amiEnX+k5NCqrvOXrmVp/Q3oGmlvj96GCSMD2JWxY=
Subject key identifier:   D1:04:F4:23:A8:D8:BA:5D:C5:EB:86:6B:ED:20:05:54:09:0C:78:77
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer:       /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial:       01A0E8890F9CAA090B8332273CB696AE94F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number:          07B5
Signing time:             Mon 28 Sep 2026 15:01:31 +0000
Manifest this update:     Mon 28 Sep 2026 15:01:31 +0000
Manifest next update:     Tue 29 Sep 2026 15:01:31 +0000
Files and hashes:         1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: ewxbgV48kTNy3T+zixrgCGiGsnj0+rM4CTKYHVIIKxI=)
                          2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:89:0f:9c:aa:09:0b:83:32:27:3c:b6:96:ae:94:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
        Validity
            Not Before: Sep 28 15:01:31 2026 GMT
            Not After : Sep 29 15:01:31 2026 GMT
        Subject: CN=d104f423a8d8ba5dc5eb866bed200554090c7877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:4f:82:03:34:c1:0c:e0:c5:16:3a:83:ce:
                    c0:a1:e8:d0:ec:05:06:03:fb:83:ea:f3:04:09:2b:
                    07:b8:44:50:e1:84:b3:ca:23:02:ee:62:75:d1:1d:
                    1a:f6:61:4c:4b:be:b2:ed:ce:f7:6f:99:41:a1:cc:
                    ae:42:68:b7:c1:0a:60:ec:ef:cc:e4:d8:f1:ee:18:
                    3c:c2:19:53:0d:99:87:4c:4a:f6:9f:87:5b:73:c0:
                    59:4f:dd:93:6c:2d:41:22:e6:f8:3e:cd:71:c3:69:
                    ae:f6:5d:f7:5c:b4:cd:30:fb:cd:c4:ca:65:4f:30:
                    7f:9e:f8:a9:5d:31:76:b2:15:bd:ac:a8:9f:9b:c5:
                    20:19:01:15:8e:81:6b:bc:10:70:02:12:f4:9a:2b:
                    fa:4a:28:d3:2e:05:fa:76:06:da:4d:b1:69:13:69:
                    9d:74:92:81:3a:4e:91:4e:65:d5:2b:27:2c:a2:18:
                    2f:a1:59:77:b7:74:67:50:3f:0f:ef:0b:2d:a4:2c:
                    fb:59:30:c6:c3:91:74:80:a7:07:9e:cf:93:bd:70:
                    ad:4e:53:5f:4b:6e:ab:b9:e2:c6:0c:42:62:b8:4e:
                    89:a0:cf:c5:5c:5f:2b:5b:fd:27:50:1b:30:99:d0:
                    1a:56:bf:1d:9d:bb:6d:3e:14:ed:f1:7d:d5:f4:10:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:04:F4:23:A8:D8:BA:5D:C5:EB:86:6B:ED:20:05:54:09:0C:78:77
            X509v3 Authority Key Identifier:
                keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2d:61:03:8f:0d:53:c5:37:da:bc:48:b1:28:ff:f2:9c:82:
         5d:05:55:42:1a:b2:1c:de:3c:61:08:8a:e0:da:bf:e8:89:96:
         f7:90:d0:0c:16:f9:c4:8a:91:c2:b9:b1:bf:b7:d6:9e:d2:47:
         c7:22:bb:dd:6e:6a:df:17:9d:f5:35:bd:39:9e:dd:b9:db:e5:
         08:05:35:b8:93:35:ef:7c:4c:43:34:42:8b:6f:99:e7:29:17:
         90:e2:d6:86:e7:40:79:13:4a:86:ab:9a:99:f5:37:7b:f8:f3:
         9d:d6:ce:70:26:46:15:4c:6d:3b:3b:26:9d:f5:bd:e8:f9:92:
         44:3a:0b:6f:b9:2f:63:0f:e0:51:4c:55:71:c4:3a:5a:ee:fa:
         bd:8a:0c:a3:a1:58:bb:e0:01:10:59:d4:0b:8f:28:df:5a:e8:
         94:fc:0d:47:60:0e:02:54:a5:f7:49:b2:d9:3f:91:a8:b4:a6:
         9e:7a:a2:8c:ac:61:b4:bf:3e:22:b8:63:ad:7f:25:15:b6:06:
         84:a4:17:ad:dd:c7:a9:c6:63:d0:a6:e5:a5:97:d0:d5:a0:ed:
         b5:88:b6:1c:0c:c2:b3:d6:2d:68:75:d5:ef:99:f1:60:9e:84:
         0c:e1:fb:33:5b:59:33:c5:00:0f:60:71:7f:35:86:3f:da:7a:
         8f:bb:1c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoiQ+cqgkLgzInPLaWrpT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDUxMjE1ZjZmMWJkMjI3ZGI3ZjQwZGY3NDhkNjRjMTA2
Zjg0YTMwHhcNMjYwOTI4MTUwMTMxWhcNMjYwOTI5MTUwMTMxWjAzMTEwLwYDVQQD
EyhkMTA0ZjQyM2E4ZDhiYTVkYzVlYjg2NmJlZDIwMDU1NDA5MGM3ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtNPggM0wQzgxRY6g87AoejQ7AUG
A/uD6vMECSsHuERQ4YSzyiMC7mJ10R0a9mFMS76y7c73b5lBocyuQmi3wQpg7O/M
5Njx7hg8whlTDZmHTEr2n4dbc8BZT92TbC1BIub4Ps1xw2mu9l33XLTNMPvNxMpl
TzB/nvipXTF2shW9rKifm8UgGQEVjoFrvBBwAhL0miv6SijTLgX6dgbaTbFpE2md
dJKBOk6RTmXVKycsohgvoVl3t3RnUD8P7wstpCz7WTDGw5F0gKcHns+TvXCtTlNf
S26rueLGDEJiuE6JoM/FXF8rW/0nUBswmdAaVr8dnbttPhTt8X3V9BCiGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEE9COo2LpdxeuGa+0gBVQJDHh3MB8GA1UdIwQY
MBaAFCMFEhX28b0ifbf0DfdI1kwQb4SjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2It
NmM2ZjBlMzE5Y2ExLzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2ItNmM2ZjBlMzE5Y2Ex
LzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAji1hA48N
U8U32rxIsSj/8pyCXQVVQhqyHN48YQiK4Nq/6ImW95DQDBb5xIqRwrmxv7fWntJH
xyK73W5q3xed9TW9OZ7dudvlCAU1uJM173xMQzRCi2+Z5ykXkOLWhudAeRNKhqua
mfU3e/jzndbOcCZGFUxtOzsmnfW96PmSRDoLb7kvYw/gUUxVccQ6Wu76vYoMo6FY
u+ABEFnUC48o31rolPwNR2AOAlSl90my2T+RqLSmnnqijKxhtL8+IrhjrX8lFbYG
hKQXrd3HqcZj0KblpZfQ1aDttYi2HAzCs9YtaHXV75nxYJ6EDOH7M1tZM8UAD2Bx
fzWGP9p6j7scRA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:20:48 2026 by rpki-client