Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File:                     7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier:          LXFtEbgyxwqx3b46Vxrf8dfn/Zer9M84ev9PKwPnH/Q=
Subject key identifier:   6F:4E:56:0F:67:40:94:68:84:BA:14:6A:ED:D4:4B:B9:5C:7F:CE:80
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer:       /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial:       01A0C8584CC7AA0D157C217A506395075127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number:          1A65
Signing time:             Tue 22 Sep 2026 09:00:24 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:24 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:24 +0000
Files and hashes:         1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
                          2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: UIwgGjmatIu6IAJv3QyqQ2M7zfcjbyK+fIOKaYDIo1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:4c:c7:aa:0d:15:7c:21:7a:50:63:95:07:51:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
        Validity
            Not Before: Sep 22 09:00:24 2026 GMT
            Not After : Sep 23 09:00:24 2026 GMT
        Subject: CN=6f4e560f6740946884ba146aedd44bb95c7fce80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:9f:f4:16:55:ac:9f:40:9e:26:d7:74:49:
                    e7:17:89:02:76:e9:72:93:59:90:57:c3:85:d8:93:
                    ac:41:b2:ce:0d:20:77:30:7f:93:26:a1:41:0e:6c:
                    f2:3b:bc:14:5e:55:97:a6:45:ee:56:99:28:3b:20:
                    0b:cf:0e:cd:aa:2f:77:d4:9d:dd:9d:44:ec:8d:44:
                    30:df:c2:66:cd:67:d2:27:5a:b9:2f:9b:2d:f8:93:
                    c0:87:36:ee:33:84:15:77:34:ba:58:f6:f7:9a:75:
                    67:19:42:80:a1:6b:6d:40:a7:40:db:18:ab:77:56:
                    30:3a:9d:6b:3c:36:7b:dc:ce:27:c0:b2:64:6e:21:
                    78:f2:c6:63:fb:69:cb:47:89:3e:13:e8:23:74:3a:
                    d2:47:e4:b7:1f:d3:45:00:6d:26:f2:d0:e6:3e:08:
                    72:aa:69:ab:46:e6:cb:7c:2e:da:ab:3e:92:25:1e:
                    10:32:bb:33:be:68:8c:b6:01:9d:c0:d3:e9:a8:b1:
                    34:5a:9c:e8:dc:e4:36:1e:06:5a:aa:90:02:16:4c:
                    f0:a4:32:af:c0:e5:a9:1d:9f:21:23:bd:df:0f:06:
                    85:9c:14:c2:66:cd:97:c2:12:c9:3b:4e:ce:58:77:
                    7c:e1:11:6d:e5:94:3c:77:c4:88:c9:a1:18:bb:34:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4E:56:0F:67:40:94:68:84:BA:14:6A:ED:D4:4B:B9:5C:7F:CE:80
            X509v3 Authority Key Identifier:
                keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d0:c3:75:c1:b7:57:f7:50:94:33:a2:2b:4f:a0:77:09:dd:
         2a:b7:d1:6e:55:6a:b6:01:6f:ff:71:5d:e4:af:fc:92:ef:0f:
         c9:cf:92:80:1a:c3:1c:f4:62:3f:50:fd:e6:6a:a4:de:97:fe:
         21:60:16:f2:71:c7:fb:67:70:b6:69:1c:bc:87:4c:27:0d:6b:
         45:99:36:9e:a2:2b:25:ba:4c:e6:91:5d:b4:17:c5:3f:b0:00:
         7e:38:35:c5:4a:61:a6:e0:81:77:fa:68:e5:28:88:d3:c4:4b:
         7e:74:6b:5c:2f:9a:e1:36:81:82:79:6d:40:cc:aa:0b:0a:d6:
         6a:5d:4e:57:43:49:ab:53:50:82:6b:db:3e:b9:e9:2c:3e:30:
         04:c6:a0:6f:c6:4e:ea:33:7a:1d:e8:98:6a:1d:de:40:26:ce:
         16:57:44:01:87:1d:fb:ee:db:02:af:6f:14:98:52:70:ff:12:
         00:4d:0f:de:3f:13:21:5a:bf:39:60:bf:84:29:1a:76:7a:6e:
         1d:f5:46:4d:2e:30:13:a6:bf:ea:a5:58:89:dc:2f:b3:2e:c8:
         c5:c8:f7:4f:e2:8c:0d:64:fe:1e:4f:f5:59:0a:59:c1:33:f2:
         dc:f6:46:3e:ff:da:c1:b9:f8:a2:87:ae:33:9c:15:94:c0:69:
         b9:8d:d3:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWEzHqg0VfCF6UGOVB1EnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjN2Y0YTMzODdkYjgzOGNkYTgzN2FiOTJhNmNlOGY2ZmZj
M2M5OTAwHhcNMjYwOTIyMDkwMDI0WhcNMjYwOTIzMDkwMDI0WjAzMTEwLwYDVQQD
Eyg2ZjRlNTYwZjY3NDA5NDY4ODRiYTE0NmFlZGQ0NGJiOTVjN2ZjZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgmf9BZVrJ9AnibXdEnnF4kCduly
k1mQV8OF2JOsQbLODSB3MH+TJqFBDmzyO7wUXlWXpkXuVpkoOyALzw7Nqi931J3d
nUTsjUQw38JmzWfSJ1q5L5st+JPAhzbuM4QVdzS6WPb3mnVnGUKAoWttQKdA2xir
d1YwOp1rPDZ73M4nwLJkbiF48sZj+2nLR4k+E+gjdDrSR+S3H9NFAG0m8tDmPghy
qmmrRubLfC7aqz6SJR4QMrszvmiMtgGdwNPpqLE0Wpzo3OQ2HgZaqpACFkzwpDKv
wOWpHZ8hI73fDwaFnBTCZs2XwhLJO07OWHd84RFt5ZQ8d8SIyaEYuzRm+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9OVg9nQJRohLoUau3US7lcf86AMB8GA1UdIwQY
MBaAFOx/SjOH24OM2oN6uSps6Pb/w8mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUt
OGE4NjVmZDYyMWM4LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUtOGE4NjVmZDYyMWM4
LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9DDdcG3
V/dQlDOiK0+gdwndKrfRblVqtgFv/3Fd5K/8ku8Pyc+SgBrDHPRiP1D95mqk3pf+
IWAW8nHH+2dwtmkcvIdMJw1rRZk2nqIrJbpM5pFdtBfFP7AAfjg1xUphpuCBd/po
5SiI08RLfnRrXC+a4TaBgnltQMyqCwrWal1OV0NJq1NQgmvbPrnpLD4wBMagb8ZO
6jN6HeiYah3eQCbOFldEAYcd++7bAq9vFJhScP8SAE0P3j8TIVq/OWC/hCkadnpu
HfVGTS4wE6a/6qVYidwvsy7Ixcj3T+KMDWT+Hk/1WQpZwTPy3PZGPv/awbn4ooeu
M5wVlMBpuY3Tsw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:06:02 2026 by rpki-client