Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
File:                     96Sm-g_D47k2V-7xCu2sD7LEU4w.mft (raw, json)
Hash identifier:          YqJt6KUeXRHiZ0gal1PMHWlllTCeg66mlQJEhel0/u8=
Subject key identifier:   25:07:C0:B3:74:FA:86:B6:B7:6D:BF:6F:40:FC:DC:0B:84:B7:AB:C1
Authority key identifier: F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
Certificate issuer:       /CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Certificate serial:       01A0D15C25C494A81C2568E95ACD59B6A2FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
Manifest number:          07CF
Signing time:             Thu 24 Sep 2026 03:01:12 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:12 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:12 +0000
Files and hashes:         1: 96Sm-g_D47k2V-7xCu2sD7LEU4w.crl (hash: hDHXYKQmHYoJ5bP8IypcRRkOJwm3/Gitm6dfHfHZKCw=)
                          2: d4KrySsXtgR3TbJYSM5N4Uqx4KU.roa (hash: EHWSR+qUf6znYV7HsqlNW+Vcbs+/lAqwQEe/T0CiYVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:25:c4:94:a8:1c:25:68:e9:5a:cd:59:b6:a2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
        Validity
            Not Before: Sep 24 03:01:12 2026 GMT
            Not After : Sep 25 03:01:12 2026 GMT
        Subject: CN=2507c0b374fa86b6b76dbf6f40fcdc0b84b7abc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:64:19:5f:7c:1e:bf:f5:5d:31:7d:4b:4e:4f:
                    8c:85:c6:4e:60:58:1b:35:3c:97:fd:1b:86:39:bc:
                    3d:3a:c0:ef:71:b8:77:f9:70:da:76:20:38:a8:f9:
                    3e:ff:9c:34:7d:96:5a:1a:75:9d:71:fa:10:af:23:
                    93:23:f4:8c:85:ab:2d:3a:0f:8a:5e:e1:3b:f1:c9:
                    cb:ab:ce:c7:3a:cb:fe:1a:f9:47:d6:8b:f4:1a:36:
                    d6:ed:8e:d5:5a:d8:3b:94:3d:30:8c:7e:32:c9:6a:
                    0e:fb:fe:8b:03:04:c9:6f:54:f3:07:47:d1:54:aa:
                    e3:e8:6d:aa:7d:cc:2d:c7:4f:d8:38:bf:b5:7f:21:
                    08:da:52:85:31:a4:99:1b:26:46:47:7d:55:49:13:
                    67:58:92:50:b5:a5:92:c3:ac:0d:d8:9e:db:a5:f7:
                    df:cb:77:05:a0:78:10:f2:c2:f1:ce:9e:f6:51:3d:
                    ea:fc:ca:d4:f8:30:49:90:76:14:6d:38:f2:8e:83:
                    5f:cb:1e:80:99:7a:38:4c:dd:38:bb:79:a0:fa:e5:
                    99:b7:0f:41:97:08:7f:6e:e2:ef:3f:b5:52:2d:04:
                    09:8c:fa:93:d8:16:ce:21:7f:e7:22:5d:47:f5:2c:
                    a6:53:ae:7e:96:ea:00:8e:a2:30:60:c5:45:24:5a:
                    39:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:07:C0:B3:74:FA:86:B6:B7:6D:BF:6F:40:FC:DC:0B:84:B7:AB:C1
            X509v3 Authority Key Identifier:
                keyid:F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6c:ac:1b:0b:d9:3a:86:e8:dc:75:85:26:3d:df:76:37:13:
         c0:89:47:7d:98:af:01:24:72:ed:ee:ff:8f:31:22:18:d0:fc:
         01:77:49:93:3f:09:0b:bc:85:91:9d:80:d2:c3:4e:4c:a6:a9:
         85:b8:75:ef:02:48:59:76:e0:f1:ac:8d:f9:77:be:a4:ec:e3:
         e3:3b:7a:03:63:a4:39:7e:ea:19:ec:5f:64:57:9a:b3:91:10:
         8a:52:75:a3:57:d5:aa:26:fd:9d:f4:18:f9:76:97:d2:1c:cf:
         05:cc:1b:47:5b:c9:dd:c2:73:56:b4:4a:c6:13:16:4e:23:f6:
         7b:53:a3:df:b5:94:b8:cc:b2:fd:a9:55:2a:2e:b2:f5:a8:f1:
         f4:70:a1:e9:bc:56:b3:5f:5d:a4:20:2e:0d:90:b0:8b:b8:1a:
         81:f4:00:86:61:fb:05:33:59:a7:ac:62:41:cf:11:01:6a:04:
         67:64:d6:fc:35:b6:31:ab:83:19:74:b2:f9:cf:07:bb:7f:e2:
         bc:2b:88:dd:68:31:c1:77:13:50:a0:ce:eb:3b:55:8a:27:89:
         9e:84:d2:5b:c2:4f:e1:91:8b:7d:00:89:35:6e:85:c3:4e:f2:
         14:63:48:7f:28:0c:21:93:63:0a:4b:2c:9a:c0:f4:52:46:b5:
         a2:52:0f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRXCXElKgcJWjpWs1ZtqL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YTRhNmZhMGZjM2UzYjkzNjU3ZWVmMTBhZWRhYzBmYjJj
NDUzOGMwHhcNMjYwOTI0MDMwMTEyWhcNMjYwOTI1MDMwMTEyWjAzMTEwLwYDVQQD
EygyNTA3YzBiMzc0ZmE4NmI2Yjc2ZGJmNmY0MGZjZGMwYjg0YjdhYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2QZX3wev/VdMX1LTk+MhcZOYFgb
NTyX/RuGObw9OsDvcbh3+XDadiA4qPk+/5w0fZZaGnWdcfoQryOTI/SMhastOg+K
XuE78cnLq87HOsv+GvlH1ov0GjbW7Y7VWtg7lD0wjH4yyWoO+/6LAwTJb1TzB0fR
VKrj6G2qfcwtx0/YOL+1fyEI2lKFMaSZGyZGR31VSRNnWJJQtaWSw6wN2J7bpfff
y3cFoHgQ8sLxzp72UT3q/MrU+DBJkHYUbTjyjoNfyx6AmXo4TN04u3mg+uWZtw9B
lwh/buLvP7VSLQQJjPqT2BbOIX/nIl1H9SymU65+luoAjqIwYMVFJFo5UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUHwLN0+oa2t22/b0D83AuEt6vBMB8GA1UdIwQY
MBaAFPekpvoPw+O5Nlfu8QrtrA+yxFOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZTbS1nX0Q0N2syVi03eEN1MnNEN0xFVTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MDRiYTUtYzQ2Ni00M2MzLWE2MTYt
OWUwNDA3NjI2NjY3LzEvOTZTbS1nX0Q0N2syVi03eEN1MnNEN0xFVTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MDRiYTUtYzQ2Ni00M2MzLWE2MTYtOWUwNDA3NjI2NjY3
LzEvOTZTbS1nX0Q0N2syVi03eEN1MnNEN0xFVTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWysGwvZ
Oobo3HWFJj3fdjcTwIlHfZivASRy7e7/jzEiGND8AXdJkz8JC7yFkZ2A0sNOTKap
hbh17wJIWXbg8ayN+Xe+pOzj4zt6A2OkOX7qGexfZFeas5EQilJ1o1fVqib9nfQY
+XaX0hzPBcwbR1vJ3cJzVrRKxhMWTiP2e1Oj37WUuMyy/alVKi6y9ajx9HCh6bxW
s19dpCAuDZCwi7gagfQAhmH7BTNZp6xiQc8RAWoEZ2TW/DW2MauDGXSy+c8Hu3/i
vCuI3WgxwXcTUKDO6ztViieJnoTSW8JP4ZGLfQCJNW6Fw07yFGNIfygMIZNjCkss
msD0Uka1olIPgg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:10:49 2026 by rpki-client