Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File:                     Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier:          pLd8Wc4NLETl7GRioVGReqsICf5PJxUEK4eULf3ns+Q=
Subject key identifier:   21:3D:FE:08:B2:AC:13:E4:C9:6F:3F:76:73:7C:5C:F3:FC:60:9C:99
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer:       /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial:       01A0C8FD844E595E945F89208963804B0782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number:          0EFC
Signing time:             Tue 22 Sep 2026 12:00:52 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:52 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:52 +0000
Files and hashes:         1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: lmGJEKJ6M4hsb8iTK3MSqP0esStD1mpuaR45wtFLX+Y=)
                          2: vGbYlgAHGuxAtkX_gF1BeSRqyBw.roa (hash: AoXRDljrLO0qQScHnB2yMCrZvRd/l+376wR7c+Uavms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:84:4e:59:5e:94:5f:89:20:89:63:80:4b:07:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
        Validity
            Not Before: Sep 22 12:00:52 2026 GMT
            Not After : Sep 23 12:00:52 2026 GMT
        Subject: CN=213dfe08b2ac13e4c96f3f76737c5cf3fc609c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:af:17:a8:86:1a:6c:c0:7e:7d:eb:94:e4:02:
                    02:ef:29:a4:61:a3:96:0c:55:23:09:39:01:4f:50:
                    ef:55:0f:37:ec:fc:b6:d9:7c:4b:5b:6e:b2:b7:15:
                    56:9f:62:47:f2:a5:81:5c:86:3f:13:ef:e6:2c:81:
                    3b:26:34:e5:6d:2b:9b:a0:eb:0c:c2:73:97:64:48:
                    af:b0:a9:a3:be:1e:88:4e:4f:8e:50:29:ac:16:6a:
                    b9:79:32:f6:4e:db:e0:5a:82:e6:6d:b5:1b:14:1d:
                    dc:ee:5f:f5:d2:dc:a6:47:f2:0a:27:86:76:e5:34:
                    8b:23:c1:7a:9f:b5:f4:1b:57:a2:06:d1:6e:0c:a2:
                    d3:45:9a:45:46:7d:cd:4a:63:a0:c8:4b:26:e5:75:
                    9d:d3:48:c6:30:e6:41:a7:d7:66:52:64:b1:27:a0:
                    ca:8a:ad:d2:27:84:c0:9f:fd:11:29:7d:8b:ca:8e:
                    64:35:f7:4a:24:c7:02:1b:a5:a7:d2:8a:57:a1:98:
                    d3:14:6f:32:77:bc:ac:2a:e6:b6:69:0c:a4:46:26:
                    8e:9d:93:24:c6:a8:f3:ba:20:11:c1:45:a8:b8:e9:
                    22:a4:82:70:c8:35:f0:6c:a0:4e:5b:c7:39:42:95:
                    f5:f2:46:28:41:dc:54:7f:3e:11:0a:25:2d:49:56:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:FE:08:B2:AC:13:E4:C9:6F:3F:76:73:7C:5C:F3:FC:60:9C:99
            X509v3 Authority Key Identifier:
                keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f8:c1:93:3e:8a:b1:5f:d0:3f:f4:f5:31:27:de:68:98:e3:
         4d:5d:be:64:28:f8:8f:4a:95:5e:76:92:11:1b:6d:c1:dc:08:
         a5:47:0e:ad:0b:9b:da:74:31:d8:89:12:c4:31:82:92:93:c3:
         33:ba:26:51:d3:87:07:c9:72:c2:35:c9:91:19:eb:32:40:cc:
         fd:2f:5e:e4:9a:51:50:be:8a:5c:8d:b6:f5:d8:60:99:12:69:
         e5:6f:b9:20:5d:5d:68:96:db:e1:50:b7:79:d8:9a:8d:32:d1:
         18:4d:22:22:a3:73:f8:5a:de:c3:d7:23:51:59:b5:5d:8e:3e:
         0a:76:20:a7:8d:9e:37:64:17:b0:4e:4a:6a:de:7c:4d:da:5b:
         c6:40:74:94:af:6a:91:4a:25:79:73:31:ad:f9:78:c8:2b:6f:
         b5:65:e4:9a:8c:90:5b:a8:8c:84:b8:e5:a7:d0:e6:ec:2a:b3:
         86:a9:87:34:cb:81:3c:e1:eb:a9:d8:46:a7:c2:5b:8e:81:4e:
         86:da:d5:54:85:98:da:ac:9b:35:6a:06:ad:50:ed:3e:fe:f1:
         3c:b9:aa:06:c3:c8:16:54:be:d8:ed:75:0b:00:0a:f2:b8:14:
         bc:f0:b1:c8:49:e3:a9:25:a8:85:65:8c:20:bf:96:6d:20:11:
         e7:5c:52:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/YROWV6UX4kgiWOASweCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZmU5ZDY2NjU1YjVmZDI3YjJjMTdjYTk2ODU2NTBkNTNm
M2JiMGEwHhcNMjYwOTIyMTIwMDUyWhcNMjYwOTIzMTIwMDUyWjAzMTEwLwYDVQQD
EygyMTNkZmUwOGIyYWMxM2U0Yzk2ZjNmNzY3MzdjNWNmM2ZjNjA5Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh68XqIYabMB+feuU5AIC7ymkYaOW
DFUjCTkBT1DvVQ837Py22XxLW26ytxVWn2JH8qWBXIY/E+/mLIE7JjTlbSuboOsM
wnOXZEivsKmjvh6ITk+OUCmsFmq5eTL2TtvgWoLmbbUbFB3c7l/10tymR/IKJ4Z2
5TSLI8F6n7X0G1eiBtFuDKLTRZpFRn3NSmOgyEsm5XWd00jGMOZBp9dmUmSxJ6DK
iq3SJ4TAn/0RKX2Lyo5kNfdKJMcCG6Wn0opXoZjTFG8yd7ysKua2aQykRiaOnZMk
xqjzuiARwUWouOkipIJwyDXwbKBOW8c5QpX18kYoQdxUfz4RCiUtSVbqhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE9/giyrBPkyW8/dnN8XPP8YJyZMB8GA1UdIwQY
MBaAFAr+nWZlW1/SeywXypaFZQ1T87sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWIt
YmRjMjQ4YTZmNTY1LzEvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWItYmRjMjQ4YTZmNTY1
LzEvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPjBkz6K
sV/QP/T1MSfeaJjjTV2+ZCj4j0qVXnaSERttwdwIpUcOrQub2nQx2IkSxDGCkpPD
M7omUdOHB8lywjXJkRnrMkDM/S9e5JpRUL6KXI229dhgmRJp5W+5IF1daJbb4VC3
ediajTLRGE0iIqNz+Frew9cjUVm1XY4+CnYgp42eN2QXsE5Kat58TdpbxkB0lK9q
kUoleXMxrfl4yCtvtWXkmoyQW6iMhLjlp9Dm7CqzhqmHNMuBPOHrqdhGp8JbjoFO
htrVVIWY2qybNWoGrVDtPv7xPLmqBsPIFlS+2O11CwAK8rgUvPCxyEnjqSWohWWM
IL+WbSAR51xSvg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:04:31 2026 by rpki-client