Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
File:                     kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft (raw, json)
Hash identifier:          y5heE5s6UpodizYXNTX0ECc/KYvhkqpW1hz8yV+9eoY=
Subject key identifier:   69:AF:82:98:56:5B:04:A1:8A:49:31:27:28:E9:A5:5A:40:69:97:93
Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
Certificate issuer:       /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Certificate serial:       01A0C4B2BAED02B0743FCDCE3C746343E11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
Manifest number:          0FE9
Signing time:             Mon 21 Sep 2026 16:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 16:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 16:00:42 +0000
Files and hashes:         1: kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl (hash: MS0j//d2vFuJO3HO4B+eQ6/4LcfaN+zygssmfjuS81M=)
                          2: s2wrtw26HcQR9xnXMWe45AipPqc.roa (hash: Vc74Nvv0uDAfKd9FhmeLPRjfJus6hz1Ga8c46ysKrJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:b2:ba:ed:02:b0:74:3f:cd:ce:3c:74:63:43:e1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
        Validity
            Not Before: Sep 21 16:00:42 2026 GMT
            Not After : Sep 22 16:00:42 2026 GMT
        Subject: CN=69af8298565b04a18a49312728e9a55a40699793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fa:11:c6:c8:2a:92:81:dd:6f:2c:db:54:6d:
                    bd:d6:85:d0:e3:c1:d5:61:f9:09:65:78:ce:68:01:
                    01:35:7e:85:4d:7c:2a:73:c6:bf:38:75:c7:9f:5a:
                    a7:01:c5:97:b1:bf:f8:5d:0f:13:ca:01:f5:13:49:
                    9f:b2:28:ec:b6:99:29:03:61:ac:59:a7:eb:b6:1e:
                    37:c2:60:59:4e:a9:8f:a5:a5:66:45:f8:02:fe:ef:
                    c1:14:a1:62:86:b5:65:5d:90:b9:a5:13:99:a1:7d:
                    ea:21:d4:40:33:68:52:3e:b8:fc:54:41:65:f2:dc:
                    b0:65:e3:52:58:64:ab:1c:79:da:0f:ed:ae:dd:37:
                    aa:7a:2c:26:4e:3a:7f:3f:58:d6:42:02:06:29:bc:
                    27:52:67:77:8b:8b:04:b3:fb:d0:8d:dc:1b:94:d7:
                    98:fd:96:7a:b3:2b:98:bc:5b:d9:b1:99:97:20:10:
                    7c:13:a2:a9:17:9f:89:67:a5:eb:b6:0d:64:5f:a9:
                    4d:d4:fd:2c:4b:2b:ff:68:59:4f:fa:22:9c:66:8c:
                    de:3f:3b:36:21:10:c2:09:bd:be:3c:1b:ca:d7:9c:
                    84:43:60:15:ba:7b:1c:9f:91:ef:c3:bd:b9:ea:06:
                    a0:79:d0:b6:2d:19:23:7e:0a:5d:4f:4d:08:e4:9a:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AF:82:98:56:5B:04:A1:8A:49:31:27:28:E9:A5:5A:40:69:97:93
            X509v3 Authority Key Identifier:
                keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:de:52:15:8f:cd:c2:aa:48:c3:17:89:5a:e2:54:dc:c3:7a:
         de:30:3e:54:c5:e9:82:e2:ce:90:67:39:3c:25:f2:79:17:f7:
         25:d2:b5:2d:78:bd:0d:4a:75:e3:57:e0:ed:7d:f6:57:33:b6:
         f4:43:75:a2:12:cb:ec:89:0b:fb:70:02:d8:96:82:e3:0f:5a:
         5e:d5:76:c6:6a:a5:ac:25:16:4a:07:df:94:f6:61:80:14:a1:
         38:0a:78:96:d1:2d:e2:14:f2:10:40:50:47:51:23:09:71:45:
         22:5a:6c:28:74:9c:aa:ef:c0:d1:8a:50:65:79:8d:0e:ec:e9:
         40:0c:ae:d1:07:e5:44:ae:e9:4a:4d:9a:9c:89:e2:bb:1c:ea:
         22:92:db:0e:a5:82:39:5f:3a:54:1d:40:52:f3:29:8a:8a:36:
         49:18:4a:c3:a4:86:73:03:2c:88:73:5c:98:ac:4b:ea:e8:b0:
         4b:b4:02:c1:ee:0d:3e:8b:24:e2:ae:a0:e6:22:38:5b:0d:be:
         19:06:bc:f1:b8:61:7c:33:3c:4b:99:7c:f7:77:3d:c8:a5:49:
         15:fb:46:fd:06:43:92:de:90:48:c8:3a:da:56:bf:34:b7:8a:
         01:83:99:49:d5:60:3a:83:bf:1d:f0:25:bb:43:15:c5:a8:d4:
         b8:0c:0b:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEsrrtArB0P83OPHRjQ+EdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjBhOGM2NmFiZGI2ZTUwNjgxMDA3MDA2ZDU3ZjdkMWZl
OWNhMmUwHhcNMjYwOTIxMTYwMDQyWhcNMjYwOTIyMTYwMDQyWjAzMTEwLwYDVQQD
Eyg2OWFmODI5ODU2NWIwNGExOGE0OTMxMjcyOGU5YTU1YTQwNjk5NzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/oRxsgqkoHdbyzbVG291oXQ48HV
YfkJZXjOaAEBNX6FTXwqc8a/OHXHn1qnAcWXsb/4XQ8TygH1E0mfsijstpkpA2Gs
Wafrth43wmBZTqmPpaVmRfgC/u/BFKFihrVlXZC5pROZoX3qIdRAM2hSPrj8VEFl
8tywZeNSWGSrHHnaD+2u3TeqeiwmTjp/P1jWQgIGKbwnUmd3i4sEs/vQjdwblNeY
/ZZ6syuYvFvZsZmXIBB8E6KpF5+JZ6Xrtg1kX6lN1P0sSyv/aFlP+iKcZozePzs2
IRDCCb2+PBvK15yEQ2AVunscn5Hvw7256gagedC2LRkjfgpdT00I5Jpm6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmvgphWWwShikkxJyjppVpAaZeTMB8GA1UdIwQY
MBaAFJJgqMZqvbblBoEAcAbVf30f6couMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80NDRjY2MtMmI1Ni00YTVmLTlhM2Et
ZGQ0YjUxNGZjZDA4LzEva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80NDRjY2MtMmI1Ni00YTVmLTlhM2EtZGQ0YjUxNGZjZDA4
LzEva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO95SFY/N
wqpIwxeJWuJU3MN63jA+VMXpguLOkGc5PCXyeRf3JdK1LXi9DUp141fg7X32VzO2
9EN1ohLL7IkL+3AC2JaC4w9aXtV2xmqlrCUWSgfflPZhgBShOAp4ltEt4hTyEEBQ
R1EjCXFFIlpsKHScqu/A0YpQZXmNDuzpQAyu0QflRK7pSk2anIniuxzqIpLbDqWC
OV86VB1AUvMpioo2SRhKw6SGcwMsiHNcmKxL6uiwS7QCwe4NPosk4q6g5iI4Ww2+
GQa88bhhfDM8S5l893c9yKVJFftG/QZDkt6QSMg62la/NLeKAYOZSdVgOoO/HfAl
u0MVxajUuAwLJw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:39 2026 by rpki-client