Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
File:                     1-_LbWO2p3N4jau7HeVUO9rjLRow.mft (raw, json)
Hash identifier:          s86Zl28ZuLKFbv0m8n1hERblTlHCavkmzxK5ghJGeyI=
Subject key identifier:   EB:91:58:39:07:3A:AE:3A:9E:4F:B5:D9:9A:FF:67:C6:EA:70:24:0C
Authority key identifier: FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
Certificate issuer:       /CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Certificate serial:       01A0C28DC8DB6309BC164793E9DF7A568B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
Manifest number:          DE
Signing time:             Mon 21 Sep 2026 06:01:06 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:06 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:06 +0000
Files and hashes:         1: 1-_LbWO2p3N4jau7HeVUO9rjLRow.crl (hash: pZj9eIJaci+u6B6v/osIxU0m2ywsc9Qz/8ihwUybG2k=)
                          2: 2EDW-s-ud7-nCTr1Sgos54mN1mM.roa (hash: YCcPBkAYBuUswz1BVwdFoQLrC8n9zW+jV/kRYtdf2D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:c8:db:63:09:bc:16:47:93:e9:df:7a:56:8b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
        Validity
            Not Before: Sep 21 06:01:06 2026 GMT
            Not After : Sep 22 06:01:06 2026 GMT
        Subject: CN=eb915839073aae3a9e4fb5d99aff67c6ea70240c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:07:dd:1f:f7:9d:b7:9d:5c:1c:bf:f0:a7:
                    c2:df:8c:04:6a:35:53:9d:40:1b:5c:2f:c5:a1:f1:
                    2e:36:42:ca:99:e9:1d:6a:21:60:66:3e:a4:a8:ee:
                    fe:b3:34:58:d6:2f:5b:fb:1a:2f:f3:f8:c0:d1:b2:
                    41:93:28:7b:f6:8c:b6:bb:26:37:1f:1a:8d:ac:32:
                    bc:30:db:96:57:80:19:3d:d6:66:05:0c:c6:4f:f1:
                    7c:29:d6:cc:8b:1e:e6:ab:71:fc:45:e7:b2:0c:bd:
                    d1:25:38:9a:5f:05:15:3a:5b:8f:89:88:37:99:f7:
                    07:43:a1:68:07:00:b9:c6:d4:81:9a:3d:70:25:fc:
                    5a:3d:c8:b9:1a:97:a5:fa:56:91:e9:4d:27:90:56:
                    8a:e8:65:3b:ae:12:34:ab:64:59:57:c8:e3:43:3d:
                    2c:5b:c0:f2:de:7d:f0:b5:4e:c3:1a:55:3f:5c:71:
                    82:f2:93:cc:18:e1:8d:7c:9d:58:70:ac:7c:a4:4f:
                    7f:a4:ab:1b:cc:11:72:03:bd:af:a5:a4:18:9e:04:
                    67:53:8d:27:64:73:4e:7d:b4:56:36:2a:f6:5c:03:
                    37:ce:bf:11:79:a4:7b:9f:3a:2c:be:98:20:b1:9f:
                    21:36:95:e5:80:51:df:3f:0b:26:0d:9a:5f:96:a6:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:91:58:39:07:3A:AE:3A:9E:4F:B5:D9:9A:FF:67:C6:EA:70:24:0C
            X509v3 Authority Key Identifier:
                keyid:FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:70:55:0d:2f:5c:09:83:ae:4c:dd:55:e2:59:b2:0f:79:aa:
         03:ef:09:7e:30:b8:ce:99:cb:06:af:49:7c:54:24:61:7b:bf:
         f5:2c:41:ca:5a:6f:0c:ba:b1:97:55:33:52:e8:ff:97:1e:a4:
         33:bb:f7:63:4b:06:0a:9f:33:8c:9e:49:8d:6e:57:43:12:70:
         f6:5f:11:65:33:47:f3:31:3a:5a:59:11:9f:72:72:6d:31:11:
         d2:6b:00:13:27:bc:0f:28:9e:33:c6:0b:08:bc:40:54:65:09:
         7d:04:ff:80:dc:73:2a:51:51:a4:11:1e:e8:fe:89:1e:50:6e:
         6b:0b:c6:b9:1e:a7:e2:14:7b:c2:35:ae:bd:cf:62:9d:90:a1:
         9e:72:9d:ae:ae:14:7c:86:4a:64:43:7a:46:84:0e:78:ce:0c:
         6c:26:ad:03:ea:06:7a:6c:e0:e7:16:44:ee:c1:de:ba:ff:37:
         52:b4:e5:87:9a:d8:be:89:67:d9:fe:ce:7c:27:d3:da:1a:82:
         18:82:14:86:b2:b4:fb:9a:f3:75:04:ca:e6:a7:18:a7:3a:93:
         4b:b6:7f:d9:94:07:d2:43:cf:41:20:3c:cf:ae:99:b5:c9:0a:
         28:9a:8d:d5:77:58:86:6c:5f:e2:ad:4e:e7:68:d4:25:49:97:
         41:6a:40:c6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDCjcjbYwm8FkeT6d96Vot/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjJkYjU4ZWRhOWRjZGUyMzZhZWVjNzc5NTUwZWY2Yjhj
YjQ2OGMwHhcNMjYwOTIxMDYwMTA2WhcNMjYwOTIyMDYwMTA2WjAzMTEwLwYDVQQD
EyhlYjkxNTgzOTA3M2FhZTNhOWU0ZmI1ZDk5YWZmNjdjNmVhNzAyNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCAH3R/3nbedXBy/8KfC34wEajVT
nUAbXC/FofEuNkLKmekdaiFgZj6kqO7+szRY1i9b+xov8/jA0bJBkyh79oy2uyY3
HxqNrDK8MNuWV4AZPdZmBQzGT/F8KdbMix7mq3H8ReeyDL3RJTiaXwUVOluPiYg3
mfcHQ6FoBwC5xtSBmj1wJfxaPci5Gpel+laR6U0nkFaK6GU7rhI0q2RZV8jjQz0s
W8Dy3n3wtU7DGlU/XHGC8pPMGOGNfJ1YcKx8pE9/pKsbzBFyA72vpaQYngRnU40n
ZHNOfbRWNir2XAM3zr8ReaR7nzosvpggsZ8hNpXlgFHfPwsmDZpflqYFsQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOuRWDkHOq46nk+12Zr/Z8bqcCQMMB8GA1UdIwQY
MBaAFPvy21jtqdzeI2rux3lVDva4y0aMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fTGJXTzJwM040amF1N0hlVlVPOXJqTFJvdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMDk1YWM5LWMzZmEtNDY1ZC04MzFk
LTQ3Yzk1MDMzNmUyZi8xLzEtX0xiV08ycDNONGphdTdIZVZVTzlyakxSb3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1LzA5NWFjOS1jM2ZhLTQ2NWQtODMxZC00N2M5NTAzMzZl
MmYvMS8xLV9MYldPMnAzTjRqYXU3SGVWVU85cmpMUm93LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3BV
DS9cCYOuTN1V4lmyD3mqA+8JfjC4zpnLBq9JfFQkYXu/9SxBylpvDLqxl1UzUuj/
lx6kM7v3Y0sGCp8zjJ5JjW5XQxJw9l8RZTNH8zE6WlkRn3JybTER0msAEye8Dyie
M8YLCLxAVGUJfQT/gNxzKlFRpBEe6P6JHlBuawvGuR6n4hR7wjWuvc9inZChnnKd
rq4UfIZKZEN6RoQOeM4MbCatA+oGemzg5xZE7sHeuv83UrTlh5rYvoln2f7OfCfT
2hqCGIIUhrK0+5rzdQTK5qcYpzqTS7Z/2ZQH0kPPQSA8z66ZtckKKJqN1XdYhmxf
4q1O52jUJUmXQWpAxg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:25:37 2026 by rpki-client