Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File:                     27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier:          yJHDB7j5kyUQAP6apzCxMdxNzUPy3/i472rjzfSKcKE=
Subject key identifier:   50:A9:03:07:72:22:CF:E0:D8:A0:B3:C2:6E:F2:72:8D:1A:7B:59:1C
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer:       /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial:       01A0C1B1C28AEA42126C3DC0F169D7BF1E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number:          14E9
Signing time:             Mon 21 Sep 2026 02:00:47 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:47 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:47 +0000
Files and hashes:         1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
                          2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: OweaxNY4/uaHm9Swz57qNxlYnhBlvKGEmu8mQv7YDOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:c2:8a:ea:42:12:6c:3d:c0:f1:69:d7:bf:1e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
        Validity
            Not Before: Sep 21 02:00:47 2026 GMT
            Not After : Sep 22 02:00:47 2026 GMT
        Subject: CN=50a903077222cfe0d8a0b3c26ef2728d1a7b591c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:ba:37:8c:5d:49:4f:d1:a8:6e:c8:03:6f:
                    99:b2:f0:ac:fe:b2:ff:85:4f:52:e3:91:ca:02:ad:
                    5d:76:53:72:32:25:ee:80:20:dc:77:0d:10:13:34:
                    66:22:03:f4:7d:e7:6f:f6:64:9a:48:f8:a2:c0:c9:
                    33:0a:4f:25:d9:a1:22:78:a2:f2:5a:1f:da:57:84:
                    3f:96:59:41:32:a2:a0:fc:e9:77:a8:f4:43:1c:b4:
                    5e:51:c9:a8:a2:9f:b7:91:dc:24:df:de:bd:72:c3:
                    d9:c9:67:d4:c3:c1:b7:03:47:bc:04:f6:b8:3c:48:
                    fa:5d:7a:13:56:63:bc:6f:08:e6:cd:d8:99:73:2e:
                    84:48:1e:b3:5c:85:1b:12:b1:16:f4:41:29:58:5b:
                    60:69:22:8d:ce:f3:c3:7e:11:7e:4e:5d:7f:e4:12:
                    bf:2f:ca:8a:d8:df:6b:fd:9f:f5:ef:86:36:0f:d1:
                    ac:62:57:c7:d3:1e:bd:76:2a:be:15:a9:77:e0:8d:
                    2b:b1:ae:11:40:1b:ba:f9:d6:b8:5f:7f:87:25:e1:
                    9d:7f:75:66:41:87:a9:bf:ee:80:48:86:62:e9:a0:
                    e3:62:c0:9b:6b:74:20:ab:a6:0f:bc:a6:ac:a0:6c:
                    be:10:37:c0:71:31:c0:3c:9f:77:60:a5:c4:75:4c:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A9:03:07:72:22:CF:E0:D8:A0:B3:C2:6E:F2:72:8D:1A:7B:59:1C
            X509v3 Authority Key Identifier:
                keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b3:f4:2a:b0:31:da:8a:ba:b5:e3:b8:89:05:18:60:94:04:
         ec:7c:08:7e:d3:38:82:6d:02:fb:0f:69:67:63:bb:39:79:71:
         fd:c1:97:0c:a8:91:b5:1c:92:62:18:97:70:b8:3f:a7:1e:2f:
         92:c6:ac:b6:8c:70:ce:db:29:f8:8f:54:70:96:3e:c4:5f:85:
         ab:78:3f:7e:04:63:34:d5:52:83:c7:a1:4f:fd:f1:39:f1:43:
         ca:83:fc:24:52:e7:cc:d2:e9:56:c5:c1:04:bc:ee:1d:0a:95:
         c6:20:b1:f0:25:28:8d:e6:a5:b2:58:6e:bb:54:6c:7c:b0:56:
         ca:11:c7:81:f8:9e:39:69:91:b0:6d:84:ae:37:6f:0a:ef:40:
         6f:7a:1b:f4:fa:89:0e:75:6b:83:cc:35:41:40:03:93:9f:08:
         aa:fc:0a:b5:15:fa:d1:27:f7:f0:e1:7a:ac:8c:c9:61:65:de:
         6c:30:4d:22:6e:c3:56:85:cb:fb:7d:66:0d:4a:59:5b:5c:e7:
         5a:69:d7:42:f8:41:14:c4:e4:c1:27:4e:af:74:90:be:61:95:
         bb:f4:78:2c:b9:b7:1c:ec:06:5a:b6:57:5a:4b:04:61:e5:60:
         93:57:f9:af:7c:dd:0f:ec:0d:e2:fb:07:57:70:b1:92:16:7c:
         48:2c:e1:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBscKK6kISbD3A8WnXvx57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl
YjEwZmQwHhcNMjYwOTIxMDIwMDQ3WhcNMjYwOTIyMDIwMDQ3WjAzMTEwLwYDVQQD
Eyg1MGE5MDMwNzcyMjJjZmUwZDhhMGIzYzI2ZWYyNzI4ZDFhN2I1OTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Eu6N4xdSU/RqG7IA2+ZsvCs/rL/
hU9S45HKAq1ddlNyMiXugCDcdw0QEzRmIgP0fedv9mSaSPiiwMkzCk8l2aEieKLy
Wh/aV4Q/lllBMqKg/Ol3qPRDHLReUcmoop+3kdwk3969csPZyWfUw8G3A0e8BPa4
PEj6XXoTVmO8bwjmzdiZcy6ESB6zXIUbErEW9EEpWFtgaSKNzvPDfhF+Tl1/5BK/
L8qK2N9r/Z/174Y2D9GsYlfH0x69diq+Fal34I0rsa4RQBu6+da4X3+HJeGdf3Vm
QYepv+6ASIZi6aDjYsCba3Qgq6YPvKasoGy+EDfAcTHAPJ93YKXEdUy9xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCpAwdyIs/g2KCzwm7yco0ae1kcMB8GA1UdIwQY
MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt
NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk
LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrP0KrAx
2oq6teO4iQUYYJQE7HwIftM4gm0C+w9pZ2O7OXlx/cGXDKiRtRySYhiXcLg/px4v
ksastoxwztsp+I9UcJY+xF+Fq3g/fgRjNNVSg8ehT/3xOfFDyoP8JFLnzNLpVsXB
BLzuHQqVxiCx8CUojealslhuu1RsfLBWyhHHgfieOWmRsG2ErjdvCu9Ab3ob9PqJ
DnVrg8w1QUADk58IqvwKtRX60Sf38OF6rIzJYWXebDBNIm7DVoXL+31mDUpZW1zn
WmnXQvhBFMTkwSdOr3SQvmGVu/R4LLm3HOwGWrZXWksEYeVgk1f5r3zdD+wN4vsH
V3CxkhZ8SCzhTw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:52:19 2026 by rpki-client