Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier:          XJdBcmOiDUWQaKxBj9UNhbE9/ieGUxTL8gDaC8lkGRk=
Subject key identifier:   C2:E8:65:CE:72:73:C7:DA:B1:C7:B8:BC:3A:3E:E6:3D:2A:A7:07:B9
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer:       /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial:       01A0D614C9AF57672728A179661A78C4DC10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number:          0A53
Signing time:             Fri 25 Sep 2026 01:01:21 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:21 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:21 +0000
Files and hashes:         1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: eLHU08FBveN+Dc9UPeJ60MIrhqNfgR0dppKWCpzNh0o=)
                          2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:14:c9:af:57:67:27:28:a1:79:66:1a:78:c4:dc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
        Validity
            Not Before: Sep 25 01:01:21 2026 GMT
            Not After : Sep 26 01:01:21 2026 GMT
        Subject: CN=c2e865ce7273c7dab1c7b8bc3a3ee63d2aa707b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2c:a9:d3:31:0f:0b:fa:ee:85:54:30:06:30:
                    e8:83:72:08:0a:a7:99:71:44:f9:f4:4e:6a:6b:ec:
                    06:04:bc:bc:95:a5:bd:35:fa:36:96:71:fa:9f:88:
                    b0:75:49:b9:17:3f:ab:57:c8:4e:17:b0:45:0b:45:
                    3e:14:c0:ac:36:d2:d0:25:e2:d4:95:a5:5f:c1:cd:
                    89:18:d7:4a:54:70:41:25:f3:85:dc:5f:d5:3a:0f:
                    84:e3:27:54:6d:c4:15:b5:93:50:29:53:2c:26:61:
                    3b:d5:0e:45:0a:ae:69:ee:cd:17:aa:0a:96:4c:21:
                    e9:40:19:cb:86:4a:1b:51:25:10:20:3c:49:cc:22:
                    86:6a:54:44:fe:20:f0:28:7d:04:2b:db:21:77:5c:
                    4a:76:f5:3b:64:80:f2:1c:46:c2:d2:46:21:7c:3c:
                    d2:cd:b9:a7:a4:50:13:86:13:f0:5b:a6:e2:2e:c3:
                    98:55:a7:63:5e:48:2f:76:53:e2:0b:c3:c1:6a:40:
                    bb:b0:78:b8:ce:5c:5f:55:12:13:04:0b:d8:a4:73:
                    bc:ef:d5:aa:49:d9:b9:5a:1f:65:54:22:c9:d1:9b:
                    8d:c4:49:e6:fd:25:75:b6:ad:e9:b6:ee:73:ad:4d:
                    26:17:25:89:f3:d2:61:49:52:92:e2:a5:c8:dc:36:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E8:65:CE:72:73:C7:DA:B1:C7:B8:BC:3A:3E:E6:3D:2A:A7:07:B9
            X509v3 Authority Key Identifier:
                keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:52:6d:49:bb:a0:a3:e0:3f:bd:c6:25:41:44:84:6c:eb:
         b9:61:50:14:f9:32:09:aa:8c:47:be:75:8f:d1:cd:fd:65:29:
         5b:4b:39:4f:f4:4a:82:ef:25:81:3f:1f:d3:bb:29:24:19:e2:
         ed:17:f8:c9:81:ad:26:6a:dc:4d:c1:4b:76:6e:c7:9b:0f:cd:
         47:ee:ab:ad:ad:93:a6:93:04:05:7a:a4:dc:f8:04:a8:eb:ef:
         a0:5b:bb:f5:f1:fb:1c:54:9d:e8:a5:7a:c6:c3:64:93:01:89:
         aa:83:dd:64:d7:e8:6f:0f:68:a7:df:de:01:7e:4e:b6:09:10:
         d5:93:e0:87:0a:7a:70:6b:1e:cb:c4:0b:2f:89:cf:5b:9d:f2:
         c1:ed:b9:d7:e0:34:7a:42:d9:21:53:08:37:03:c4:af:5c:51:
         2c:69:11:73:eb:44:55:ff:6b:12:83:3d:ed:42:1d:25:7f:33:
         23:5e:20:44:f0:ec:42:3e:02:d1:4d:b4:a7:41:10:e8:69:cd:
         73:03:ae:08:49:95:cd:1b:27:22:ed:59:03:d7:76:8f:99:d2:
         64:7f:6c:6e:d5:76:90:43:de:53:5c:93:ca:33:00:f4:3a:6d:
         b8:06:49:d4:3b:06:45:b5:97:9b:69:c9:70:43:87:86:6e:37:
         a0:05:54:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFMmvV2cnKKF5Zhp4xNwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3
MWNkNTQwHhcNMjYwOTI1MDEwMTIxWhcNMjYwOTI2MDEwMTIxWjAzMTEwLwYDVQQD
EyhjMmU4NjVjZTcyNzNjN2RhYjFjN2I4YmMzYTNlZTYzZDJhYTcwN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCyp0zEPC/ruhVQwBjDog3IICqeZ
cUT59E5qa+wGBLy8laW9Nfo2lnH6n4iwdUm5Fz+rV8hOF7BFC0U+FMCsNtLQJeLU
laVfwc2JGNdKVHBBJfOF3F/VOg+E4ydUbcQVtZNQKVMsJmE71Q5FCq5p7s0XqgqW
TCHpQBnLhkobUSUQIDxJzCKGalRE/iDwKH0EK9shd1xKdvU7ZIDyHEbC0kYhfDzS
zbmnpFAThhPwW6biLsOYVadjXkgvdlPiC8PBakC7sHi4zlxfVRITBAvYpHO879Wq
Sdm5Wh9lVCLJ0ZuNxEnm/SV1tq3ptu5zrU0mFyWJ89JhSVKS4qXI3DZ4vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLoZc5yc8fasce4vDo+5j0qpwe5MB8GA1UdIwQY
MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt
OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx
LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONBSbUm7
oKPgP73GJUFEhGzruWFQFPkyCaqMR751j9HN/WUpW0s5T/RKgu8lgT8f07spJBni
7Rf4yYGtJmrcTcFLdm7Hmw/NR+6rra2TppMEBXqk3PgEqOvvoFu79fH7HFSd6KV6
xsNkkwGJqoPdZNfobw9op9/eAX5OtgkQ1ZPghwp6cGsey8QLL4nPW53ywe251+A0
ekLZIVMINwPEr1xRLGkRc+tEVf9rEoM97UIdJX8zI14gRPDsQj4C0U20p0EQ6GnN
cwOuCEmVzRsnIu1ZA9d2j5nSZH9sbtV2kEPeU1yTyjMA9DptuAZJ1DsGRbWXm2nJ
cEOHhm43oAVUiA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:35:13 2026 by rpki-client