Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          E7luREQUEYa7EdSVi+FNvcO+1dokd9BD8qTQO2vzlmY=
Subject key identifier:   72:0B:16:CA:CE:49:EB:59:CA:77:15:1F:FA:13:D8:C4:75:48:25:04
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       01A0C77CA635F45554521EC8C6400C43AAA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          06CE
Signing time:             Tue 22 Sep 2026 05:00:29 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:29 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:29 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: ahKllzOn5veh9cixHhZiD5tOs3PsY5XKv2dhn0nYODA=)
                          2: Q1BIazUMtU491Kfp1prxFz4oeuU.roa (hash: sJo8b2jgePbm04v5Oh4sG6+LqF87DEVfl2ISH3CHQlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:a6:35:f4:55:54:52:1e:c8:c6:40:0c:43:aa:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: Sep 22 05:00:29 2026 GMT
            Not After : Sep 23 05:00:29 2026 GMT
        Subject: CN=720b16cace49eb59ca77151ffa13d8c475482504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:ec:48:aa:1d:83:19:33:a2:c3:60:65:a8:
                    3c:f0:7a:94:be:13:7b:c5:59:ad:58:b9:56:18:0a:
                    ee:3b:46:fa:78:45:c3:d6:c2:6d:42:58:cd:a6:17:
                    f7:22:30:c1:12:79:a8:49:32:a2:04:11:49:1d:a1:
                    00:08:5d:a2:3e:6c:fd:39:29:7a:4e:ee:2a:65:b7:
                    6e:cb:96:76:93:cc:d9:8e:74:b2:32:2f:90:91:da:
                    5c:39:de:6b:35:22:f6:20:4b:9a:b9:13:a1:ab:c9:
                    64:c1:b6:79:30:5c:31:89:1b:af:ce:56:1c:7a:ac:
                    16:60:f9:03:bc:60:55:b9:55:5f:8e:29:30:e4:fd:
                    1a:b1:96:47:17:ab:6c:bb:58:64:94:0e:4d:2a:ae:
                    86:d9:23:83:70:6f:52:e4:aa:67:67:e2:d8:68:55:
                    b7:a1:9f:6f:ee:1a:d1:cd:1c:87:28:86:67:bd:fe:
                    94:81:59:b7:bb:4c:9b:66:79:d0:b5:41:18:9a:fb:
                    23:9b:06:38:b9:9b:70:5b:af:82:1c:df:e4:e9:98:
                    1c:8d:f8:0c:29:08:b2:dc:65:07:0b:a6:11:d4:19:
                    c7:e5:48:cb:74:7f:6c:73:c1:12:e9:26:6d:b4:f1:
                    0e:27:4b:4d:e7:14:84:3d:10:60:c1:ff:0d:95:78:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0B:16:CA:CE:49:EB:59:CA:77:15:1F:FA:13:D8:C4:75:48:25:04
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:6e:e9:eb:31:87:68:ff:a2:37:62:17:dd:c9:1d:60:a0:
         68:37:82:30:2f:ac:59:aa:9e:92:63:f5:df:7e:cd:68:5a:37:
         2c:46:b7:03:2f:99:f4:3f:c6:d3:92:18:7e:88:42:29:ff:b4:
         5e:68:a7:8f:3b:c8:35:93:5f:5a:f2:4b:e4:7d:8d:3f:2a:98:
         48:6d:89:70:b3:2e:f2:73:9f:05:3f:da:b8:e5:23:6d:7f:d4:
         17:1f:53:32:9c:f2:3f:a6:7b:64:24:a5:66:94:57:e2:0e:d3:
         4a:b7:fc:b4:e4:82:5e:cd:a0:aa:ea:ce:d8:8f:8a:3a:8d:3f:
         3e:85:2e:26:58:e2:9c:fb:8c:85:16:51:f0:71:88:5f:e2:96:
         1f:a5:48:a6:fb:e0:10:c9:99:2b:3a:c9:03:bc:e2:48:aa:03:
         a8:e3:06:db:9d:00:94:e8:14:e0:03:64:b5:39:e4:47:52:9e:
         60:2a:fb:5b:dc:ff:39:47:5c:f5:a0:e3:09:bb:0e:ff:5f:bf:
         46:5e:cd:2b:0d:aa:1f:49:e1:f0:c2:52:26:5c:10:38:2e:c5:
         3b:76:e2:82:5b:af:d7:ec:d1:f0:62:bf:9c:29:22:96:76:c6:
         b2:9d:5d:f3:e5:4d:c2:6a:f4:1a:af:27:de:ef:27:e6:3b:ca:
         f2:8e:43:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfKY19FVUUh7IxkAMQ6qlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjQ5YmZiMmEwYjgyNDQ2MDYwYzdmYzkwNzgxMGU1MTg3
MDU5MzYwHhcNMjYwOTIyMDUwMDI5WhcNMjYwOTIzMDUwMDI5WjAzMTEwLwYDVQQD
Eyg3MjBiMTZjYWNlNDllYjU5Y2E3NzE1MWZmYTEzZDhjNDc1NDgyNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP7sSKodgxkzosNgZag88HqUvhN7
xVmtWLlWGAruO0b6eEXD1sJtQljNphf3IjDBEnmoSTKiBBFJHaEACF2iPmz9OSl6
Tu4qZbduy5Z2k8zZjnSyMi+QkdpcOd5rNSL2IEuauROhq8lkwbZ5MFwxiRuvzlYc
eqwWYPkDvGBVuVVfjikw5P0asZZHF6tsu1hklA5NKq6G2SODcG9S5KpnZ+LYaFW3
oZ9v7hrRzRyHKIZnvf6UgVm3u0ybZnnQtUEYmvsjmwY4uZtwW6+CHN/k6ZgcjfgM
KQiy3GUHC6YR1BnH5UjLdH9sc8ES6SZttPEOJ0tN5xSEPRBgwf8NlXgxcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHILFsrOSetZyncVH/oT2MR1SCUEMB8GA1UdIwQY
MBaAFPb0m/sqC4JEYGDH/JB4EOUYcFk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTIt
MzNhNTZmNDU5YmMwLzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTItMzNhNTZmNDU5YmMw
LzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1pu6esx
h2j/ojdiF93JHWCgaDeCMC+sWaqekmP1337NaFo3LEa3Ay+Z9D/G05IYfohCKf+0
XminjzvINZNfWvJL5H2NPyqYSG2JcLMu8nOfBT/auOUjbX/UFx9TMpzyP6Z7ZCSl
ZpRX4g7TSrf8tOSCXs2gqurO2I+KOo0/PoUuJljinPuMhRZR8HGIX+KWH6VIpvvg
EMmZKzrJA7ziSKoDqOMG250AlOgU4ANktTnkR1KeYCr7W9z/OUdc9aDjCbsO/1+/
Rl7NKw2qH0nh8MJSJlwQOC7FO3bigluv1+zR8GK/nCkilnbGsp1d8+VNwmr0Gq8n
3u8n5jvK8o5DJg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:07:35 2026 by rpki-client