Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File:                     9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier:          wBOTcqXTMtmcjP3AFfBM8Xetv/hhu82ujj86Rn532yE=
Subject key identifier:   FE:E7:CC:9E:D1:95:A3:3C:6C:95:8A:D1:BD:75:03:2D:00:51:09:E8
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer:       /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial:       01A0C2C442F55828095F7B2D6BE28453A577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number:          1A92
Signing time:             Mon 21 Sep 2026 07:00:37 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:37 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:37 +0000
Files and hashes:         1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: DR5781cW+y+YPaUsyE7jKinoPSBjQ4ogwO6LtB9xC1A=)
                          2: C3Hj7ROPeIpwRmBzpRFfxI_qvb0.roa (hash: vveg8RifsnaImkmfopb5PhQkcmujHs/iYhIU7WeY+b0=)
                          3: GP_DUV0faWuK0jHjXr1g_eRLzwA.roa (hash: IUdACoDW0rE/n6kZcocEWVzhGKES4IEE0jvO7MJrLYo=)
                          4: P-rRYVXCTixpE8G0uFs42zL11uM.roa (hash: gGvo9uFElsBmxmc2f57ugvUF8fRFbGjjhlaZ3XTHPxM=)
                          5: TZb0pwqKAULgiO7MxUXFvu2eCDY.roa (hash: xx3QLAhALsGor/waOfuSlLQuXwnX4zFtt11tExzIAAg=)
                          6: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
                          7: qhW018nLYKkbveq_JNyETo7B_Ow.roa (hash: 03M+6gjp2KbZhQBCv2SYcsFpAN+DiQPSPmjd2q66jUU=)
                          8: rxWTpB1cBDAasdpeCd_eBF1w0wk.roa (hash: aF9Mb+BB8Tjqy6FAH1rJtXHNbhARNFUNI1crgBVxf6Y=)
                          9: ys3yCdHJ9a3MjZY25yxTfQSZph0.roa (hash: KFDraXJKQVMV1BXHcMi/qwrvrU0UgboWj1cSJoeNNfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:42:f5:58:28:09:5f:7b:2d:6b:e2:84:53:a5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
        Validity
            Not Before: Sep 21 07:00:37 2026 GMT
            Not After : Sep 22 07:00:37 2026 GMT
        Subject: CN=fee7cc9ed195a33c6c958ad1bd75032d005109e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:1e:60:44:90:1d:4e:7f:a2:83:fa:87:c0:
                    d2:40:72:04:7c:19:61:30:77:d0:2a:b8:51:ac:9d:
                    35:26:43:e4:2c:25:d1:54:c9:75:4f:9a:68:6a:d4:
                    fa:a2:85:89:c6:9e:3f:a5:88:c8:23:a1:82:9f:50:
                    cf:1b:7d:fa:92:32:3d:c1:98:62:25:25:1a:c1:42:
                    e9:d6:11:0a:c4:da:4d:8f:3d:c5:af:62:a7:55:82:
                    e4:9d:bf:57:78:36:20:da:af:f4:c4:17:04:67:ea:
                    a7:f2:f5:09:ce:02:21:8e:d4:51:40:ca:84:62:c3:
                    7f:89:e2:a8:e5:c4:a8:17:42:2a:0d:15:c8:7c:49:
                    ba:f8:d8:b0:58:5f:55:a6:23:c4:33:f9:53:0f:07:
                    d9:53:57:67:f3:dc:a5:aa:b6:fe:84:8f:91:68:f0:
                    f3:f0:bf:fe:54:32:17:7e:79:f5:96:4b:db:e1:a4:
                    e7:69:5c:7e:65:10:b1:12:d2:80:ea:17:a2:53:18:
                    c5:3e:f7:9f:9e:56:12:0a:66:7f:50:40:c9:cf:a6:
                    93:85:5d:d4:0c:5a:dd:6c:f6:ab:a2:11:0f:a2:f0:
                    26:5a:80:77:2e:6d:e9:ce:c3:24:db:26:45:bc:b9:
                    24:86:12:1c:65:29:22:7a:13:a9:32:b5:ab:8b:97:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:CC:9E:D1:95:A3:3C:6C:95:8A:D1:BD:75:03:2D:00:51:09:E8
            X509v3 Authority Key Identifier:
                keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:36:e5:ea:d7:62:d0:90:e7:5f:ec:6d:e3:cb:53:6a:22:dc:
         ed:61:ca:86:cd:34:0e:ab:be:70:42:2c:5f:e5:63:83:b5:a8:
         eb:0d:51:6c:2e:6c:f4:74:c2:27:d2:07:31:af:6f:d8:bc:c5:
         49:32:53:5c:84:c2:68:63:56:c7:09:ec:d0:3f:99:44:aa:9b:
         cf:fd:86:04:b7:0f:f7:01:ce:53:cd:b6:4a:24:55:f9:8a:74:
         d8:02:c5:e6:17:5c:a2:1f:04:7f:64:68:2b:be:e5:60:89:70:
         79:3d:a3:7f:9a:c3:af:c2:ae:97:c4:b6:89:75:e0:e5:d0:4d:
         76:b3:e1:61:3f:21:ec:b0:96:80:57:ae:30:4b:8c:2c:22:f0:
         0d:26:94:cf:b1:29:e9:1a:da:cc:6b:ea:dc:ad:bd:f8:31:f0:
         cf:4b:95:af:6d:35:19:5e:f5:26:c6:18:00:4e:3b:f8:71:4f:
         b8:fe:e1:9c:25:5d:aa:35:d9:5a:48:81:52:9d:70:7e:01:f4:
         d4:75:e5:29:da:07:ea:8d:a3:09:e5:5a:ea:0e:b1:e6:8e:e7:
         af:69:13:25:a9:4f:5b:e0:14:31:55:61:96:6f:66:7e:01:e0:
         31:6e:04:68:3c:2f:af:01:d6:d1:3e:fb:2f:fc:10:e6:17:1a:
         d7:c6:b2:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxEL1WCgJX3sta+KEU6V3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzFiYmYxZDNkM2MwZWZlMzZkZTExMDM5MmJlMGM3YWM0
NDdhODQwHhcNMjYwOTIxMDcwMDM3WhcNMjYwOTIyMDcwMDM3WjAzMTEwLwYDVQQD
EyhmZWU3Y2M5ZWQxOTVhMzNjNmM5NThhZDFiZDc1MDMyZDAwNTEwOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm0eYESQHU5/ooP6h8DSQHIEfBlh
MHfQKrhRrJ01JkPkLCXRVMl1T5poatT6ooWJxp4/pYjII6GCn1DPG336kjI9wZhi
JSUawULp1hEKxNpNjz3Fr2KnVYLknb9XeDYg2q/0xBcEZ+qn8vUJzgIhjtRRQMqE
YsN/ieKo5cSoF0IqDRXIfEm6+NiwWF9VpiPEM/lTDwfZU1dn89ylqrb+hI+RaPDz
8L/+VDIXfnn1lkvb4aTnaVx+ZRCxEtKA6heiUxjFPvefnlYSCmZ/UEDJz6aThV3U
DFrdbParohEPovAmWoB3Lm3pzsMk2yZFvLkkhhIcZSkiehOpMrWri5eYhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7nzJ7RlaM8bJWK0b11Ay0AUQnoMB8GA1UdIwQY
MBaAFPVxu/HT08Dv423hEDkr4MesRHqEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYt
YTk2NTdlYjFmOGQ3LzEvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYtYTk2NTdlYjFmOGQ3
LzEvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDbl6tdi
0JDnX+xt48tTaiLc7WHKhs00Dqu+cEIsX+Vjg7Wo6w1RbC5s9HTCJ9IHMa9v2LzF
STJTXITCaGNWxwns0D+ZRKqbz/2GBLcP9wHOU822SiRV+Yp02ALF5hdcoh8Ef2Ro
K77lYIlweT2jf5rDr8Kul8S2iXXg5dBNdrPhYT8h7LCWgFeuMEuMLCLwDSaUz7Ep
6RrazGvq3K29+DHwz0uVr201GV71JsYYAE47+HFPuP7hnCVdqjXZWkiBUp1wfgH0
1HXlKdoH6o2jCeVa6g6x5o7nr2kTJalPW+AUMVVhlm9mfgHgMW4EaDwvrwHW0T77
L/wQ5hca18ayiA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:07 2026 by rpki-client