Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File:                     9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier:          v7UqEDHXND7WuctrQRVI7mrO9chPOHclkDD3B2+XVdw=
Subject key identifier:   55:CC:05:F3:46:ED:AD:EB:98:50:32:17:09:79:60:7E:72:E4:E1:1D
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer:       /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial:       01A0C5209654CE3EC69AABE5EE8A9994D3E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number:          0689
Signing time:             Mon 21 Sep 2026 18:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:42 +0000
Files and hashes:         1: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: 2DySI2G89vFJrgN3K8lPJWEajAh8c7iz2nst8JvWuc8=)
                          2: Z5Bt0mcpjuYCBhTBe_0r3j_HEOE.roa (hash: CQtnMCBgc31J7ELcq2ticHIWUxTxloi8VsRDj7ga9wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:96:54:ce:3e:c6:9a:ab:e5:ee:8a:99:94:d3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
        Validity
            Not Before: Sep 21 18:00:42 2026 GMT
            Not After : Sep 22 18:00:42 2026 GMT
        Subject: CN=55cc05f346edadeb985032170979607e72e4e11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d1:3b:e1:07:05:33:d3:27:a2:8b:59:ba:38:
                    e8:c6:66:8f:a8:e8:3e:fb:bc:04:e7:3a:bd:b0:bd:
                    5d:98:3e:d3:16:59:58:14:74:ad:a1:06:b9:b0:bd:
                    0e:b2:88:40:19:ad:e5:7f:c6:7e:a7:9c:26:8b:5d:
                    4b:1c:62:de:a1:cc:99:5e:66:10:7d:48:ef:fd:1e:
                    55:3b:e1:fc:f0:76:95:10:8d:bd:1a:ba:dc:45:19:
                    78:a3:f1:69:98:db:26:88:0c:01:27:a6:ab:ef:a4:
                    92:7b:05:8f:2a:78:2c:cc:d2:1c:25:c0:b0:68:69:
                    c7:27:35:e3:19:a4:ca:79:84:20:ba:0c:b6:a8:8d:
                    e7:cc:de:b8:71:1f:c8:67:1e:cc:b3:48:fb:b4:25:
                    f7:ed:e1:d9:75:7a:da:9f:da:41:3f:74:d5:e4:03:
                    8d:ea:af:f9:5d:69:c5:c9:44:98:67:9e:55:92:75:
                    e9:33:92:a1:2b:c3:52:a2:7f:28:f7:66:1a:10:91:
                    e4:ba:49:90:ae:0c:67:51:94:64:c3:e3:d8:61:51:
                    f3:31:0c:ca:2d:c9:f5:9c:21:28:90:85:81:45:50:
                    60:e6:c2:34:89:ee:86:ae:51:e3:be:25:96:ec:61:
                    44:c9:fd:a5:69:c6:02:1a:02:61:43:1c:b3:1b:3d:
                    b4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CC:05:F3:46:ED:AD:EB:98:50:32:17:09:79:60:7E:72:E4:E1:1D
            X509v3 Authority Key Identifier:
                keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:cf:d2:f8:39:13:bd:f0:bc:3f:bf:a9:b2:81:6a:57:d2:9e:
         38:bc:da:51:86:ca:8b:56:5d:65:f2:42:b5:30:77:75:fc:6a:
         f0:ef:09:34:fa:5f:24:fa:98:d7:3f:0e:c8:79:2d:d9:12:ea:
         37:28:fc:db:c7:ac:77:f6:62:2b:b7:4d:f5:37:09:f5:a1:0c:
         91:73:cf:46:6f:49:aa:ea:b2:30:c2:06:81:0a:f8:94:88:3a:
         c7:a0:8a:78:f4:68:75:5e:bc:fe:64:c8:7c:ea:61:68:e9:9a:
         d8:9e:d9:28:fc:da:20:ca:6f:b3:8a:6e:c4:40:99:da:dd:9b:
         c1:d6:2a:62:6c:a1:73:6d:8c:9d:a4:2b:f1:17:86:c8:51:44:
         9e:9d:a4:0c:08:21:9f:61:d4:9e:cc:7f:b9:f4:a8:bf:96:e1:
         c9:3a:17:8a:69:4c:ae:e8:2e:38:85:d4:8b:1b:81:51:38:a2:
         55:a5:1c:a8:6a:29:ab:0f:b8:83:a2:67:84:86:ef:4c:1d:78:
         6c:05:64:f1:af:ff:99:d5:5f:f5:24:db:7f:fd:9b:cd:4c:92:
         de:d6:eb:44:d9:ea:dc:7a:6c:17:52:fb:07:19:1c:df:7b:8b:
         4c:5b:71:43:24:55:8e:f6:64:6d:a3:82:f6:5d:21:6d:d7:6f:
         46:a5:54:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFIJZUzj7Gmqvl7oqZlNPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWZiMjRjZTY3YzIxMTI5N2IwNjVjNjdmMWI4MjA5Yjk5
NDRiMGYwHhcNMjYwOTIxMTgwMDQyWhcNMjYwOTIyMTgwMDQyWjAzMTEwLwYDVQQD
Eyg1NWNjMDVmMzQ2ZWRhZGViOTg1MDMyMTcwOTc5NjA3ZTcyZTRlMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9E74QcFM9MnootZujjoxmaPqOg+
+7wE5zq9sL1dmD7TFllYFHStoQa5sL0OsohAGa3lf8Z+p5wmi11LHGLeocyZXmYQ
fUjv/R5VO+H88HaVEI29GrrcRRl4o/FpmNsmiAwBJ6ar76SSewWPKngszNIcJcCw
aGnHJzXjGaTKeYQgugy2qI3nzN64cR/IZx7Ms0j7tCX37eHZdXran9pBP3TV5AON
6q/5XWnFyUSYZ55VknXpM5KhK8NSon8o92YaEJHkukmQrgxnUZRkw+PYYVHzMQzK
Lcn1nCEokIWBRVBg5sI0ie6GrlHjviWW7GFEyf2lacYCGgJhQxyzGz20bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXMBfNG7a3rmFAyFwl5YH5y5OEdMB8GA1UdIwQY
MBaAFPafskzmfCESl7Blxn8bggm5lEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMt
OWU1MTM4ZTEyMGM5LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMtOWU1MTM4ZTEyMGM5
LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArM/S+DkT
vfC8P7+psoFqV9KeOLzaUYbKi1ZdZfJCtTB3dfxq8O8JNPpfJPqY1z8OyHkt2RLq
Nyj828esd/ZiK7dN9TcJ9aEMkXPPRm9JquqyMMIGgQr4lIg6x6CKePRodV68/mTI
fOphaOma2J7ZKPzaIMpvs4puxECZ2t2bwdYqYmyhc22MnaQr8ReGyFFEnp2kDAgh
n2HUnsx/ufSov5bhyToXimlMruguOIXUixuBUTiiVaUcqGopqw+4g6JnhIbvTB14
bAVk8a//mdVf9STbf/2bzUyS3tbrRNnq3HpsF1L7Bxkc33uLTFtxQyRVjvZkbaOC
9l0hbddvRqVUxA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:38:09 2026 by rpki-client