Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File:                     0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier:          ou7Bskr+3t31bpuqZBBDflsqFN+Sfq/VVyiA8+PEWeo=
Subject key identifier:   00:F8:FB:D2:E8:88:11:B5:28:E0:EA:7C:A1:0A:2C:3F:C3:E0:8E:2A
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer:       /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial:       01A0CB59BDBCD5C6605A5524EF72ACCEC34C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number:          18FE
Signing time:             Tue 22 Sep 2026 23:00:51 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:51 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:51 +0000
Files and hashes:         1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: rLOhQVf83RTjAkQ7jO3QGcTtDcIm53/kTVsXd/3dVkA=)
                          2: CuoNMY7Qq37VOjNaS3NSAgeASU8.roa (hash: oV7Za3ljWN5/ELZ5W0IrtTxHnlCCtRf76iTFx/48w6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:bd:bc:d5:c6:60:5a:55:24:ef:72:ac:ce:c3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
        Validity
            Not Before: Sep 22 23:00:51 2026 GMT
            Not After : Sep 23 23:00:51 2026 GMT
        Subject: CN=00f8fbd2e88811b528e0ea7ca10a2c3fc3e08e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:98:05:58:9e:c9:ac:d7:f8:49:14:72:c3:f4:
                    40:d3:32:45:3d:63:15:59:c4:5d:5e:54:7d:44:66:
                    42:a7:b2:e1:a2:e2:57:b9:6e:16:0a:5e:a8:f1:f9:
                    cb:e5:89:9b:87:9a:49:ee:0f:62:c2:d7:df:c7:d1:
                    52:2b:5d:77:af:d0:8f:b6:9b:fe:0b:43:39:d6:19:
                    ab:eb:4a:96:d9:e7:52:cc:80:36:d0:a9:94:37:06:
                    ea:49:f9:3f:15:f0:b2:6d:ef:5b:b6:50:ed:7a:0f:
                    1f:9b:3a:40:2e:f4:3f:f9:4e:2f:7a:5c:d0:b8:8f:
                    7e:f2:0e:af:e8:d2:b3:52:c2:8d:3d:32:59:6c:b9:
                    67:4c:49:fd:45:66:65:f3:5f:7b:63:1a:61:3e:cb:
                    c7:4f:9a:ac:1c:7c:2c:4a:ea:e6:84:76:b2:fc:cc:
                    93:64:dd:b3:7f:53:4b:c7:ed:6e:ee:dc:10:a7:5d:
                    3a:f3:81:d2:66:19:37:e1:fa:36:86:7d:a4:7f:38:
                    17:f9:02:e1:6a:56:27:79:61:b7:33:cb:5e:70:3e:
                    20:70:ad:1e:f2:be:40:7d:33:10:c2:4d:23:e7:09:
                    4b:f9:09:89:3c:48:9a:c1:db:3a:fa:6b:c8:53:fb:
                    7b:27:ae:5c:a6:7e:e9:2a:26:eb:a3:1d:f7:2a:90:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:FB:D2:E8:88:11:B5:28:E0:EA:7C:A1:0A:2C:3F:C3:E0:8E:2A
            X509v3 Authority Key Identifier:
                keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:f1:d1:b1:fa:f8:7f:37:1f:21:ec:9c:43:8f:27:ff:5d:
         32:f2:d8:93:76:c5:78:eb:65:2d:06:83:f5:61:a6:57:4f:b0:
         32:9f:f5:96:93:14:f8:4f:a4:1a:74:a6:7e:0b:09:c4:c7:bd:
         14:c7:15:28:ed:74:fb:9f:b4:8a:82:3e:6c:f6:ef:5e:ae:ad:
         13:7f:3c:67:65:52:46:24:b0:ea:da:e7:f2:db:09:a0:9d:d1:
         fe:d9:10:5d:a4:c8:e3:ec:e1:49:cc:d8:f7:fb:c8:6b:f0:50:
         4e:ec:f7:ca:2b:c8:53:66:c3:44:89:e9:fa:e9:5c:86:a3:ac:
         64:5b:15:7d:35:2a:3f:87:6a:dd:38:ea:5c:40:77:d2:04:a2:
         04:1f:2b:29:4c:10:c9:1c:35:d3:de:4d:47:d4:e8:29:a8:b2:
         d6:ad:f3:c9:10:ae:8a:1f:99:53:7a:1d:75:fb:1e:75:27:38:
         3d:3f:57:72:5d:c1:5b:3a:f7:12:12:71:ba:5f:54:2f:fd:f9:
         c9:8d:6b:fb:49:66:c2:ab:a6:10:8b:47:fb:59:25:04:93:06:
         d5:bd:5d:28:c8:78:36:33:2d:25:4a:87:23:72:72:b5:d2:53:
         8f:ee:4f:67:85:72:6c:be:e3:87:ab:2d:b4:4e:02:e1:c3:26:
         59:e0:e8:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWb281cZgWlUk73KszsNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYmJjOTA1NTVkNmQwZDM0MzJiYWJiOTViNjBjZGVlZWE1
ODBmNTgwHhcNMjYwOTIyMjMwMDUxWhcNMjYwOTIzMjMwMDUxWjAzMTEwLwYDVQQD
EygwMGY4ZmJkMmU4ODgxMWI1MjhlMGVhN2NhMTBhMmMzZmMzZTA4ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JgFWJ7JrNf4SRRyw/RA0zJFPWMV
WcRdXlR9RGZCp7LhouJXuW4WCl6o8fnL5Ymbh5pJ7g9iwtffx9FSK113r9CPtpv+
C0M51hmr60qW2edSzIA20KmUNwbqSfk/FfCybe9btlDteg8fmzpALvQ/+U4velzQ
uI9+8g6v6NKzUsKNPTJZbLlnTEn9RWZl8197YxphPsvHT5qsHHwsSurmhHay/MyT
ZN2zf1NLx+1u7twQp10684HSZhk34fo2hn2kfzgX+QLhalYneWG3M8tecD4gcK0e
8r5AfTMQwk0j5wlL+QmJPEiawds6+mvIU/t7J65cpn7pKibrox33KpCtNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAD4+9LoiBG1KODqfKEKLD/D4I4qMB8GA1UdIwQY
MBaAFNK7yQVV1tDTQyuruVtgze7qWA9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgt
N2JjMWU0ZjU2Yzg4LzEvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgtN2JjMWU0ZjU2Yzg4
LzEvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5rx0bH6
+H83HyHsnEOPJ/9dMvLYk3bFeOtlLQaD9WGmV0+wMp/1lpMU+E+kGnSmfgsJxMe9
FMcVKO10+5+0ioI+bPbvXq6tE388Z2VSRiSw6trn8tsJoJ3R/tkQXaTI4+zhSczY
9/vIa/BQTuz3yivIU2bDRInp+ulchqOsZFsVfTUqP4dq3TjqXEB30gSiBB8rKUwQ
yRw1095NR9ToKaiy1q3zyRCuih+ZU3oddfsedSc4PT9Xcl3BWzr3EhJxul9UL/35
yY1r+0lmwqumEItH+1klBJMG1b1dKMh4NjMtJUqHI3JytdJTj+5PZ4VybL7jh6st
tE4C4cMmWeDoDw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:24:51 2026 by rpki-client