Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File:                     1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier:          Lt5FZxZLj8IOnTFbpkzLoPKXWtGSNaMrT3AHis+mpvY=
Subject key identifier:   03:19:15:EF:29:D4:2C:A8:DD:ED:29:15:55:02:C8:2A:0E:A6:44:3C
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer:       /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial:       01A0E1E22EBD84C5596C06B395368EE2B919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number:          0708
Signing time:             Sun 27 Sep 2026 08:01:31 +0000
Manifest this update:     Sun 27 Sep 2026 08:01:31 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:31 +0000
Files and hashes:         1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: ggadlqXGLuiOmzaHD3zY5ptPm9uAhHTz50ZmqE1bHck=)
                          2: IebKw_yiTfK_V4_z25ukLjaMeWQ.roa (hash: MAvIvWJqafppESV+KP67qNLbvZAyKKXSx7PlRQfGNY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e2:2e:bd:84:c5:59:6c:06:b3:95:36:8e:e2:b9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
        Validity
            Not Before: Sep 27 08:01:31 2026 GMT
            Not After : Sep 28 08:01:31 2026 GMT
        Subject: CN=031915ef29d42ca8dded29155502c82a0ea6443c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0f:7b:a8:6a:86:2c:b4:2e:26:c0:c6:bd:c3:
                    6e:c8:56:3c:94:a5:11:55:28:4b:da:61:3f:8c:42:
                    f0:9e:b9:9c:37:6a:80:94:12:8d:99:75:21:b6:66:
                    5d:7b:94:88:83:d9:db:0f:46:8e:57:c7:ee:4d:dc:
                    cb:b0:ea:d1:bf:2d:0a:ce:ba:cf:e7:60:28:d8:e6:
                    ce:03:b2:fd:d0:b9:4f:f8:93:3b:5a:3d:c0:18:fe:
                    75:71:d6:19:23:e2:e1:fb:bf:36:49:97:91:60:10:
                    26:3a:df:be:96:47:30:96:16:5b:ef:26:eb:d2:df:
                    a1:96:42:70:db:dc:00:f6:ed:44:cb:a5:d4:e3:47:
                    c9:b3:b6:70:5e:20:46:76:50:42:fe:01:70:f5:08:
                    f4:0b:5c:1b:e2:eb:9a:ad:23:62:8a:74:29:79:e9:
                    23:48:ed:d2:e5:68:70:bb:b4:13:a2:e9:ef:2e:76:
                    8a:df:7c:2a:72:3f:e1:39:7e:79:49:54:36:e8:b6:
                    e0:be:48:0b:2a:ed:3b:c4:b3:15:ee:bb:fb:9d:30:
                    6a:62:df:10:db:20:c9:5b:ea:5a:f9:47:0f:88:47:
                    16:20:31:7b:5a:63:a6:aa:ed:ab:96:8d:de:ad:b7:
                    76:e7:41:bf:29:2d:1d:8a:59:c1:a8:8e:32:81:a5:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:19:15:EF:29:D4:2C:A8:DD:ED:29:15:55:02:C8:2A:0E:A6:44:3C
            X509v3 Authority Key Identifier:
                keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d8:cc:86:9e:c3:19:51:88:63:32:b8:a0:3f:7d:65:91:43:
         52:cb:76:87:49:35:ac:8c:cf:8a:fe:7a:da:70:b3:e5:46:1a:
         47:57:70:b1:08:44:0a:fd:66:74:cb:18:ec:24:f3:d8:35:9c:
         f5:58:f7:82:80:41:3b:60:0d:3d:86:9f:e0:b3:e7:8e:b6:81:
         21:ca:9e:69:a2:5d:50:5e:ed:1f:9d:cf:3a:54:94:1e:b8:28:
         cf:f6:af:9f:81:14:81:87:5f:61:1d:cd:eb:73:30:32:86:b6:
         cd:c0:6c:e9:bf:92:50:93:5c:aa:ee:73:a1:a2:98:77:66:86:
         9b:fe:c9:1f:2c:46:80:5f:f0:10:bd:91:a9:cc:e9:c3:ae:5b:
         f2:ed:5b:a8:0a:8c:ac:01:a1:59:86:f9:45:18:17:14:bc:ac:
         c9:0a:5b:56:52:c1:bc:39:fe:aa:13:ab:bb:ee:cf:f3:29:c2:
         29:ab:d0:92:dd:ba:d8:3d:68:15:a3:84:84:6e:9f:2d:66:7a:
         68:51:6f:fd:75:d3:cc:46:b2:56:e2:e2:78:da:e5:79:3b:c4:
         b6:83:a2:9d:cc:a2:26:fc:ea:73:78:5f:55:42:97:09:ac:3b:
         9a:85:3d:32:b7:1f:04:37:fb:cc:b1:c0:0b:d6:ee:b6:90:4c:
         7c:c8:6d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDh4i69hMVZbAazlTaO4rkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5
NTU0NmQwHhcNMjYwOTI3MDgwMTMxWhcNMjYwOTI4MDgwMTMxWjAzMTEwLwYDVQQD
EygwMzE5MTVlZjI5ZDQyY2E4ZGRlZDI5MTU1NTAyYzgyYTBlYTY0NDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A97qGqGLLQuJsDGvcNuyFY8lKUR
VShL2mE/jELwnrmcN2qAlBKNmXUhtmZde5SIg9nbD0aOV8fuTdzLsOrRvy0KzrrP
52Ao2ObOA7L90LlP+JM7Wj3AGP51cdYZI+Lh+782SZeRYBAmOt++lkcwlhZb7ybr
0t+hlkJw29wA9u1Ey6XU40fJs7ZwXiBGdlBC/gFw9Qj0C1wb4uuarSNiinQpeekj
SO3S5Whwu7QTounvLnaK33wqcj/hOX55SVQ26LbgvkgLKu07xLMV7rv7nTBqYt8Q
2yDJW+pa+UcPiEcWIDF7WmOmqu2rlo3erbd250G/KS0dilnBqI4ygaWi2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMZFe8p1Cyo3e0pFVUCyCoOpkQ8MB8GA1UdIwQY
MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt
MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw
LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9jMhp7D
GVGIYzK4oD99ZZFDUst2h0k1rIzPiv562nCz5UYaR1dwsQhECv1mdMsY7CTz2DWc
9Vj3goBBO2ANPYaf4LPnjraBIcqeaaJdUF7tH53POlSUHrgoz/avn4EUgYdfYR3N
63MwMoa2zcBs6b+SUJNcqu5zoaKYd2aGm/7JHyxGgF/wEL2Rqczpw65b8u1bqAqM
rAGhWYb5RRgXFLysyQpbVlLBvDn+qhOru+7P8ynCKavQkt262D1oFaOEhG6fLWZ6
aFFv/XXTzEayVuLieNrleTvEtoOincyiJvzqc3hfVUKXCaw7moU9MrcfBDf7zLHA
C9butpBMfMhtdw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:26:53 2026 by rpki-client