Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File:                     M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier:          amJHvGhysTC9lsEbucukCrCymYDriLAqzCLAba4SaQI=
Subject key identifier:   A8:5F:12:39:22:AE:2E:18:7B:C8:E0:2E:1E:40:9A:4E:C1:DF:29:CE
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer:       /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial:       01A135C800C87002AA7CD28CA747620590B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number:          1A06
Signing time:             Tue 13 Oct 2026 15:01:02 +0000
Manifest this update:     Tue 13 Oct 2026 15:01:02 +0000
Manifest next update:     Wed 14 Oct 2026 15:01:02 +0000
Files and hashes:         1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: J3e0HzDIFKlIuFLU5TAYqVv4Y6lAxjyMviHl/WRD2Ms=)
                          2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:c8:00:c8:70:02:aa:7c:d2:8c:a7:47:62:05:90:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
        Validity
            Not Before: Oct 13 15:01:02 2026 GMT
            Not After : Oct 14 15:01:02 2026 GMT
        Subject: CN=a85f123922ae2e187bc8e02e1e409a4ec1df29ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:21:2e:bc:84:cd:28:9e:a0:eb:ee:f2:fc:
                    f2:ed:01:72:31:3d:0e:c3:bb:a9:c2:4c:46:78:cc:
                    f4:f6:6a:4d:3d:fb:75:44:2a:c5:d3:53:e0:03:98:
                    61:7e:70:0e:98:50:2b:f2:e5:87:b7:cc:18:60:a6:
                    db:dd:c3:b0:ec:1f:33:8a:ea:f3:c6:2c:31:6e:1e:
                    fe:f2:1f:fb:bd:8b:87:61:79:aa:eb:a5:c0:dc:e1:
                    3a:aa:0d:e7:aa:c8:bc:20:d7:55:d8:9f:92:00:3c:
                    8d:e3:a9:1e:a0:04:26:46:02:ca:19:cb:05:69:8d:
                    5f:aa:8d:17:0b:98:92:49:19:c1:81:16:dd:00:60:
                    5a:dd:96:85:84:2b:85:66:a0:83:0f:88:07:3d:15:
                    ce:88:f8:ec:fa:62:e7:9f:fd:b9:0d:04:7c:5f:7b:
                    7e:8d:de:5e:1d:d9:72:ef:c3:41:a3:5b:9c:d9:b0:
                    c6:1f:96:d1:c8:76:58:0d:5d:ad:f3:0f:ff:1a:64:
                    da:a3:40:f2:a0:1a:09:c1:66:90:f9:c5:e6:94:12:
                    b6:57:ac:a5:31:78:fb:7c:44:9d:5d:d0:be:76:e2:
                    62:85:3d:08:6a:88:30:76:d7:c2:97:c3:03:b8:9d:
                    15:9e:56:2d:3c:e7:00:fe:e3:38:71:da:5c:dc:b8:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5F:12:39:22:AE:2E:18:7B:C8:E0:2E:1E:40:9A:4E:C1:DF:29:CE
            X509v3 Authority Key Identifier:
                keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:ca:bf:00:bc:9d:c1:53:a1:c8:32:35:2f:e0:cf:67:43:
         5d:5e:ef:15:c4:da:d5:6e:85:71:c5:9a:b1:44:e1:ff:aa:f9:
         49:58:14:cd:d2:9d:b9:c9:fe:9c:b1:1a:8d:10:29:bc:1c:1b:
         92:90:57:b9:e3:8e:23:1b:c1:42:b6:9f:ea:0b:84:b2:53:6d:
         48:9d:f8:2b:5f:f4:0a:90:02:40:99:a4:d4:fa:04:f7:43:9d:
         f3:fc:83:84:31:07:43:78:e0:c9:50:c4:01:97:40:8d:43:c8:
         b3:4a:e5:ec:36:e2:6a:66:74:61:c0:72:95:ae:b7:78:60:a7:
         94:5d:23:0e:ed:4a:88:40:0f:4d:4f:c6:00:02:43:a5:b3:e2:
         14:b9:72:7d:d3:1f:7f:6f:6e:6a:2d:ae:ea:2d:7c:65:5d:83:
         2f:ab:2b:03:7c:2f:43:6d:2f:84:c7:84:7c:78:d7:61:23:b7:
         30:7a:cd:f4:6e:58:14:67:17:e2:d1:7e:0f:03:58:34:8f:a9:
         51:3d:c7:d2:1e:8b:cc:5f:57:f0:77:c3:d6:b1:f0:62:9c:67:
         09:f8:6e:b2:ac:c2:93:72:b9:be:14:b0:7d:bf:d1:d1:8d:68:
         cd:51:a8:a3:68:b3:e8:31:6b:4a:8d:49:2c:b6:ff:18:81:69:
         42:1a:da:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1yADIcAKqfNKMp0diBZC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZDJkODg1NDc3ZDAyODAyNjRlNDU4ZWIwNzFmNDVkOTE2
OTE1MjAwHhcNMjYxMDEzMTUwMTAyWhcNMjYxMDE0MTUwMTAyWjAzMTEwLwYDVQQD
EyhhODVmMTIzOTIyYWUyZTE4N2JjOGUwMmUxZTQwOWE0ZWMxZGYyOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6khLryEzSieoOvu8vzy7QFyMT0O
w7upwkxGeMz09mpNPft1RCrF01PgA5hhfnAOmFAr8uWHt8wYYKbb3cOw7B8ziurz
xiwxbh7+8h/7vYuHYXmq66XA3OE6qg3nqsi8INdV2J+SADyN46keoAQmRgLKGcsF
aY1fqo0XC5iSSRnBgRbdAGBa3ZaFhCuFZqCDD4gHPRXOiPjs+mLnn/25DQR8X3t+
jd5eHdly78NBo1uc2bDGH5bRyHZYDV2t8w//GmTao0DyoBoJwWaQ+cXmlBK2V6yl
MXj7fESdXdC+duJihT0IaogwdtfCl8MDuJ0VnlYtPOcA/uM4cdpc3LgFKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhfEjkiri4Ye8jgLh5Amk7B3ynOMB8GA1UdIwQY
MBaAFDPS2IVHfQKAJk5FjrBx9F2RaRUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTIt
YjI2NDEyYWViM2FlLzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTItYjI2NDEyYWViM2Fl
LzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAvKvwC8
ncFTocgyNS/gz2dDXV7vFcTa1W6FccWasUTh/6r5SVgUzdKducn+nLEajRApvBwb
kpBXueOOIxvBQraf6guEslNtSJ34K1/0CpACQJmk1PoE90Od8/yDhDEHQ3jgyVDE
AZdAjUPIs0rl7DbiamZ0YcByla63eGCnlF0jDu1KiEAPTU/GAAJDpbPiFLlyfdMf
f29uai2u6i18ZV2DL6srA3wvQ20vhMeEfHjXYSO3MHrN9G5YFGcX4tF+DwNYNI+p
UT3H0h6LzF9X8HfD1rHwYpxnCfhusqzCk3K5vhSwfb/R0Y1ozVGoo2iz6DFrSo1J
LLb/GIFpQhraCw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:53:18 2026 by rpki-client