Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File:                     m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier:          8cU/RFyi1gFij7agASo++fod1IQpts0qG5vIZ43L+8g=
Subject key identifier:   81:53:63:C0:54:B9:16:A4:37:36:C3:29:30:B6:C6:70:FA:0D:49:E4
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer:       /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial:       01A13290C65A05CA767929F3D7A61AED27F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number:          1A9D
Signing time:             Tue 13 Oct 2026 00:01:51 +0000
Manifest this update:     Tue 13 Oct 2026 00:01:51 +0000
Manifest next update:     Wed 14 Oct 2026 00:01:51 +0000
Files and hashes:         1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
                          2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: yvUGIkkoe6xhmXeszY4sg9SGOdOQuVw7V4HOm1xVQY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:90:c6:5a:05:ca:76:79:29:f3:d7:a6:1a:ed:27:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
        Validity
            Not Before: Oct 13 00:01:51 2026 GMT
            Not After : Oct 14 00:01:51 2026 GMT
        Subject: CN=815363c054b916a43736c32930b6c670fa0d49e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:48:1b:23:9b:e4:bc:65:2c:49:e1:a4:7a:f9:
                    d8:91:c3:f4:2e:4e:be:52:9d:e2:b4:bb:b1:ec:aa:
                    88:24:3e:88:61:8e:89:ea:55:77:f1:23:04:80:ae:
                    cf:fc:dc:70:e0:24:9e:55:0c:88:74:8b:73:ce:e2:
                    92:7b:3a:e6:f2:9a:de:df:9c:a7:f9:7f:94:7c:9e:
                    40:5f:79:8b:fa:48:ed:0e:6c:33:bf:66:4a:ac:ed:
                    8f:c4:fc:81:5b:9b:7f:f4:6d:87:f2:d8:f9:c7:16:
                    fc:d3:60:02:ef:f8:c1:f8:33:ea:00:c1:71:0d:e0:
                    58:f0:93:e2:db:b6:15:bc:91:f1:ab:83:7f:84:1d:
                    7b:8c:82:e2:58:60:a0:be:a7:a3:9e:c4:3c:31:05:
                    0b:ec:6f:9a:fa:9a:93:cb:59:d2:11:f9:3a:a9:ca:
                    ad:a4:b7:f1:af:af:be:c9:77:2b:5a:11:bf:52:cc:
                    e0:db:0a:67:61:e4:da:5c:f3:33:c8:c0:ed:4f:6d:
                    4e:2d:92:a3:51:05:9e:01:34:f2:f7:b6:b7:8d:21:
                    6f:21:88:72:1c:2f:f4:24:89:0e:0b:70:0c:72:ea:
                    a4:e9:cd:95:2a:26:2c:5f:7f:f7:65:5e:02:52:09:
                    99:cd:81:f9:9f:45:66:ed:91:99:46:85:b6:95:14:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:53:63:C0:54:B9:16:A4:37:36:C3:29:30:B6:C6:70:FA:0D:49:E4
            X509v3 Authority Key Identifier:
                keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:8f:a0:08:45:6f:c6:d5:90:5f:ac:08:e3:5e:16:09:f8:
         df:07:00:8b:37:1e:d8:24:90:ae:43:7f:78:49:b6:25:40:7e:
         28:bf:0b:0b:02:45:99:37:f0:e1:6e:fc:3d:53:f3:7b:40:82:
         de:07:6a:82:9c:78:bf:00:ef:8f:cc:67:2b:4a:9a:a6:dd:6b:
         7a:43:26:0b:1c:c5:e2:ff:0f:1b:a8:18:a7:c4:04:d5:9d:76:
         cf:a6:d3:89:2f:df:f8:46:d4:34:b4:e3:2c:87:f0:a4:1e:b2:
         0f:87:b5:de:b2:89:eb:8f:54:fb:36:dd:37:5f:70:ff:e1:9d:
         9d:ea:56:af:76:a4:d7:17:f7:2a:23:0b:8c:7a:7d:0a:45:a3:
         e0:11:c4:6b:f4:d3:5f:15:6d:d0:97:08:23:e3:fe:6b:1c:60:
         ef:5d:2a:d2:ad:57:2c:dc:8f:a7:f0:52:44:5c:09:8c:51:d4:
         52:ff:78:54:7e:fd:fc:ed:fb:ee:ea:ce:75:66:1b:b8:fd:d3:
         a0:3c:18:e1:c8:c6:b3:20:62:c5:13:8d:c4:de:4f:07:ab:40:
         d4:13:28:e4:5a:01:9d:da:52:c8:d3:50:4a:cc:92:94:94:a9:
         dd:79:3c:c8:b4:ce:90:4a:3b:5f:f0:4f:7e:12:cf:76:15:55:
         7b:32:2e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEykMZaBcp2eSnz16Ya7SfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2
ZjA4YzIwHhcNMjYxMDEzMDAwMTUxWhcNMjYxMDE0MDAwMTUxWjAzMTEwLwYDVQQD
Eyg4MTUzNjNjMDU0YjkxNmE0MzczNmMzMjkzMGI2YzY3MGZhMGQ0OWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60gbI5vkvGUsSeGkevnYkcP0Lk6+
Up3itLux7KqIJD6IYY6J6lV38SMEgK7P/Nxw4CSeVQyIdItzzuKSezrm8pre35yn
+X+UfJ5AX3mL+kjtDmwzv2ZKrO2PxPyBW5t/9G2H8tj5xxb802AC7/jB+DPqAMFx
DeBY8JPi27YVvJHxq4N/hB17jILiWGCgvqejnsQ8MQUL7G+a+pqTy1nSEfk6qcqt
pLfxr6++yXcrWhG/Uszg2wpnYeTaXPMzyMDtT21OLZKjUQWeATTy97a3jSFvIYhy
HC/0JIkOC3AMcuqk6c2VKiYsX3/3ZV4CUgmZzYH5n0Vm7ZGZRoW2lRTOPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFTY8BUuRakNzbDKTC2xnD6DUnkMB8GA1UdIwQY
MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt
YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3
LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7KPoAhF
b8bVkF+sCONeFgn43wcAizce2CSQrkN/eEm2JUB+KL8LCwJFmTfw4W78PVPze0CC
3gdqgpx4vwDvj8xnK0qapt1rekMmCxzF4v8PG6gYp8QE1Z12z6bTiS/f+EbUNLTj
LIfwpB6yD4e13rKJ649U+zbdN19w/+GdnepWr3ak1xf3KiMLjHp9CkWj4BHEa/TT
XxVt0JcII+P+axxg710q0q1XLNyPp/BSRFwJjFHUUv94VH79/O377urOdWYbuP3T
oDwY4cjGsyBixRONxN5PB6tA1BMo5FoBndpSyNNQSsySlJSp3Xk8yLTOkEo7X/BP
fhLPdhVVezIurg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:23:07 2026 by rpki-client