Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File:                     iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier:          OSPrtYbJ5sc8z6/KHQv+rvfVLOoEYLiOQyIHaEYi8Vs=
Subject key identifier:   97:ED:A6:B1:BE:A3:CF:80:10:4B:87:D0:EB:54:5B:55:D3:B0:8B:D6
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer:       /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial:       01A0CC358072CBB2C422BAAF7A7EC2689831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number:          0B9B
Signing time:             Wed 23 Sep 2026 03:00:53 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:53 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:53 +0000
Files and hashes:         1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
                          2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: H0fqSRqTtGUEQRI0si0JpU4NpMZqaz45ALkaU6S3plk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:80:72:cb:b2:c4:22:ba:af:7a:7e:c2:68:98:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
        Validity
            Not Before: Sep 23 03:00:53 2026 GMT
            Not After : Sep 24 03:00:53 2026 GMT
        Subject: CN=97eda6b1bea3cf80104b87d0eb545b55d3b08bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:36:56:d1:23:51:ff:3b:85:6e:31:57:ea:
                    84:a2:e7:d7:7b:f3:7d:6e:53:90:d1:f8:a6:7a:0d:
                    ab:08:8a:b0:9e:98:53:2d:59:75:88:1a:c1:0f:a2:
                    02:df:5a:db:52:fa:31:31:6f:f6:97:32:6e:18:2f:
                    6e:c3:3f:e6:45:0b:a0:4b:5a:44:55:01:3e:b3:1b:
                    14:0f:ce:78:d3:61:a0:f4:43:38:e9:28:6c:5f:b4:
                    ca:8e:d1:48:a9:59:43:b1:c8:8c:45:d7:77:d2:7b:
                    39:32:1e:1c:d6:68:10:c1:4d:32:01:d1:bc:48:f5:
                    3c:74:89:5f:d5:d2:00:6b:1e:7b:0f:19:d2:55:87:
                    c8:a0:be:96:63:9c:78:d3:5b:fa:1a:6a:ce:b6:d0:
                    0b:db:21:e0:3e:0e:b6:e3:ab:5e:39:d8:52:6a:30:
                    14:f9:b7:56:d6:5c:9e:be:0e:a4:15:cb:1e:30:0c:
                    56:25:e0:af:97:ba:b5:2b:33:b2:f1:d7:3b:46:43:
                    cf:1b:95:93:8f:4e:6f:77:c6:ff:9d:03:88:70:c3:
                    8e:30:8f:65:b7:50:65:cd:0a:80:73:9a:a1:01:67:
                    e8:5a:cb:47:93:2a:19:d1:2f:68:0e:af:c9:09:66:
                    79:a8:29:8a:f6:c2:c1:61:26:46:ce:52:42:69:67:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:ED:A6:B1:BE:A3:CF:80:10:4B:87:D0:EB:54:5B:55:D3:B0:8B:D6
            X509v3 Authority Key Identifier:
                keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:e1:c6:cb:04:cd:15:c1:52:c8:a7:38:b7:10:f0:34:9e:
         f3:ab:f4:4a:5e:d5:39:16:9a:a9:2a:07:ba:fe:de:61:20:45:
         d6:cc:04:e4:f6:e7:d4:7d:1f:65:33:33:20:8e:7a:08:d6:d3:
         ec:51:ff:7e:43:8e:62:d3:34:2a:31:09:23:1f:be:6d:52:dd:
         ac:70:90:c9:78:8c:ae:24:bb:a2:22:08:42:2e:dc:5b:d8:a2:
         9c:45:13:5d:c2:a7:f3:ac:56:04:ad:40:fa:d2:c3:c7:9c:6b:
         46:41:0a:85:5e:d2:ce:09:a0:bf:50:1a:14:c7:22:26:10:68:
         2c:fb:7b:32:ab:a2:f4:95:17:16:95:87:d8:b6:41:42:84:33:
         b1:e0:32:78:99:fd:a4:6d:33:e6:fa:c1:a7:d0:eb:6f:cf:a7:
         3d:19:56:a4:da:18:c1:2a:b3:2e:77:81:61:63:6b:eb:58:84:
         13:c1:b1:1f:e3:90:2d:2c:1d:ab:ba:8e:0c:f9:1d:04:92:19:
         d2:65:35:2f:6d:ee:f8:77:b5:b2:dd:8d:a6:a1:ce:57:8b:b2:
         a6:fb:59:39:c2:4a:75:7a:03:69:48:6a:c3:82:a1:4a:1b:c8:
         4d:e6:db:44:8f:e3:8d:6a:88:0a:ae:b6:3c:bc:3b:51:b7:20:
         0f:93:7e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNYByy7LEIrqven7CaJgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDEyOWE3Yzc4ZmI2NmQwNzczYmM5OTAwODM1N2U1MDdj
MWU3YmUwHhcNMjYwOTIzMDMwMDUzWhcNMjYwOTI0MDMwMDUzWjAzMTEwLwYDVQQD
Eyg5N2VkYTZiMWJlYTNjZjgwMTA0Yjg3ZDBlYjU0NWI1NWQzYjA4YmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1w2VtEjUf87hW4xV+qEoufXe/N9
blOQ0fimeg2rCIqwnphTLVl1iBrBD6IC31rbUvoxMW/2lzJuGC9uwz/mRQugS1pE
VQE+sxsUD85402Gg9EM46ShsX7TKjtFIqVlDsciMRdd30ns5Mh4c1mgQwU0yAdG8
SPU8dIlf1dIAax57DxnSVYfIoL6WY5x401v6GmrOttAL2yHgPg6246teOdhSajAU
+bdW1lyevg6kFcseMAxWJeCvl7q1KzOy8dc7RkPPG5WTj05vd8b/nQOIcMOOMI9l
t1BlzQqAc5qhAWfoWstHkyoZ0S9oDq/JCWZ5qCmK9sLBYSZGzlJCaWeBxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJftprG+o8+AEEuH0OtUW1XTsIvWMB8GA1UdIwQY
MBaAFIjRKafHj7ZtB3O8mQCDV+UHwee+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUt
ODU5ZjdmYWNlNjk1LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUtODU5ZjdmYWNlNjk1
LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9DhxssE
zRXBUsinOLcQ8DSe86v0Sl7VORaaqSoHuv7eYSBF1swE5Pbn1H0fZTMzII56CNbT
7FH/fkOOYtM0KjEJIx++bVLdrHCQyXiMriS7oiIIQi7cW9iinEUTXcKn86xWBK1A
+tLDx5xrRkEKhV7Szgmgv1AaFMciJhBoLPt7Mqui9JUXFpWH2LZBQoQzseAyeJn9
pG0z5vrBp9Drb8+nPRlWpNoYwSqzLneBYWNr61iEE8GxH+OQLSwdq7qODPkdBJIZ
0mU1L23u+He1st2NpqHOV4uypvtZOcJKdXoDaUhqw4KhShvITebbRI/jjWqICq62
PLw7UbcgD5N+ZQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:31:59 2026 by rpki-client