Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File:                     1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier:          PqbPK9bSMUOyHJiAUjOLqmfX4tPHb34YCF9XV5DHPr8=
Subject key identifier:   F9:EA:E1:B9:34:84:DD:AE:91:61:46:86:B0:A1:9E:4B:3D:16:C3:65
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer:       /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial:       01A0CCA3BBA8FB7243A36AF7DB2249E7CABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number:          0E79
Signing time:             Wed 23 Sep 2026 05:01:17 +0000
Manifest this update:     Wed 23 Sep 2026 05:01:17 +0000
Manifest next update:     Thu 24 Sep 2026 05:01:17 +0000
Files and hashes:         1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: +gEQUZPdwoMUZ3xhVXqq3evQI2GXpYHtCQKqE5NqjtI=)
                          2: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (hash: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:bb:a8:fb:72:43:a3:6a:f7:db:22:49:e7:ca:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
        Validity
            Not Before: Sep 23 05:01:17 2026 GMT
            Not After : Sep 24 05:01:17 2026 GMT
        Subject: CN=f9eae1b93484ddae91614686b0a19e4b3d16c365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:14:76:eb:c2:ae:83:c0:93:ea:26:c1:c0:
                    0f:2b:c6:c1:7c:11:ed:bb:8c:09:39:a3:cb:d2:a6:
                    95:a7:ca:7e:bd:01:2b:f1:04:da:ba:17:dc:4f:44:
                    c4:20:9e:53:91:03:7c:5f:41:a2:e3:f5:f6:61:9a:
                    7d:a3:01:25:e4:e7:b9:3c:3c:c8:b0:fd:25:92:44:
                    43:1f:a4:95:a9:e3:19:80:76:92:92:65:8d:f0:42:
                    2f:f1:bf:ad:45:bb:b7:33:e2:8e:33:d4:e6:d8:d2:
                    89:c3:ab:a5:53:22:ee:6a:1e:ad:5f:be:37:69:e9:
                    ed:c9:83:a6:85:cb:de:40:7f:71:60:41:21:01:30:
                    88:b6:3d:67:f6:5a:ef:fb:85:0a:fd:73:50:09:34:
                    a0:6e:82:dc:19:0a:53:b5:e5:f7:e7:60:a1:8a:40:
                    3f:ef:bb:ba:b0:ca:7b:33:1a:46:b1:ed:67:fa:ce:
                    d8:e4:05:eb:39:d5:83:70:b5:89:20:2a:a5:d7:f9:
                    b1:5a:9a:7e:5e:06:fe:16:f5:ac:ca:61:b5:d6:a0:
                    7c:a8:88:05:fd:c1:65:c4:17:68:85:8d:ca:4c:e2:
                    9f:20:82:3d:a1:b1:a3:62:48:65:45:f0:fb:9f:8a:
                    c2:0c:49:f7:3c:90:c7:a1:c5:82:79:3a:20:4b:bf:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EA:E1:B9:34:84:DD:AE:91:61:46:86:B0:A1:9E:4B:3D:16:C3:65
            X509v3 Authority Key Identifier:
                keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8d:1e:eb:9e:f9:f8:71:34:80:4a:82:83:4c:cd:67:d5:34:
         eb:f5:fc:03:0a:cd:a0:fe:de:01:d9:cd:15:9c:30:b9:0b:8d:
         65:b1:5f:9f:b6:c4:ad:07:ac:1f:e8:91:1a:ec:54:34:3a:dc:
         81:dc:eb:c8:9c:a1:62:d1:fb:67:ff:36:99:d5:23:13:e0:8b:
         55:7c:35:1e:93:05:35:11:ce:c5:6c:eb:62:f2:bb:06:d6:f8:
         b5:5e:7e:43:48:14:37:b1:82:ef:67:ee:c6:37:15:45:65:83:
         6b:7a:11:29:5e:77:8f:bf:da:ec:8b:89:f0:7e:dd:1b:3c:4c:
         14:25:29:39:d5:3e:7b:e1:f0:58:dc:72:5c:e2:17:41:b3:9d:
         21:59:a9:e5:1e:d4:30:b0:74:82:15:21:ad:28:de:a1:b7:e0:
         bb:de:ad:93:2a:e3:ea:b9:41:10:4f:27:9a:86:87:a4:eb:19:
         34:49:02:a9:4a:56:23:d6:49:be:9b:a0:65:2c:81:75:94:03:
         81:4c:c7:9e:82:f4:aa:85:5c:58:25:80:02:07:d8:a9:28:17:
         3e:fc:fb:cd:d5:e4:81:40:27:27:9b:8e:e8:6c:5f:76:93:9a:
         4f:41:69:61:19:2c:ec:f4:f9:eb:7a:f4:0b:57:13:6f:71:d7:
         6c:1f:b5:30
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDMo7uo+3JDo2r32yJJ58q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNGFiZTEzOTQyYWJlNDIwZjIwZGMxNDlmZGM1N2RmNDA0
NWMxNDMwHhcNMjYwOTIzMDUwMTE3WhcNMjYwOTI0MDUwMTE3WjAzMTEwLwYDVQQD
EyhmOWVhZTFiOTM0ODRkZGFlOTE2MTQ2ODZiMGExOWU0YjNkMTZjMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbsUduvCroPAk+omwcAPK8bBfBHt
u4wJOaPL0qaVp8p+vQEr8QTauhfcT0TEIJ5TkQN8X0Gi4/X2YZp9owEl5Oe5PDzI
sP0lkkRDH6SVqeMZgHaSkmWN8EIv8b+tRbu3M+KOM9Tm2NKJw6ulUyLuah6tX743
aentyYOmhcveQH9xYEEhATCItj1n9lrv+4UK/XNQCTSgboLcGQpTteX352ChikA/
77u6sMp7MxpGse1n+s7Y5AXrOdWDcLWJICql1/mxWpp+Xgb+FvWsymG11qB8qIgF
/cFlxBdohY3KTOKfIII9obGjYkhlRfD7n4rCDEn3PJDHocWCeTogS7+7bwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPnq4bk0hN2ukWFGhrChnks9FsNlMB8GA1UdIwQY
MBaAFPtKvhOUKr5CDyDcFJ/cV99ARcFDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wcS1FNVFxdmtJUElOd1VuOXhYMzBCRndVTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZGVlNjhkLWFhY2QtNDY3My1iYTQy
LTk5MTFlNTEwYThhOS8xLzEtMHEtRTVRcXZrSVBJTndVbjl4WDMwQkZ3VU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhL2RlZTY4ZC1hYWNkLTQ2NzMtYmE0Mi05OTExZTUxMGE4
YTkvMS8xLTBxLUU1UXF2a0lQSU53VW45eFgzMEJGd1VNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM40e
6575+HE0gEqCg0zNZ9U06/X8AwrNoP7eAdnNFZwwuQuNZbFfn7bErQesH+iRGuxU
NDrcgdzryJyhYtH7Z/82mdUjE+CLVXw1HpMFNRHOxWzrYvK7Btb4tV5+Q0gUN7GC
72fuxjcVRWWDa3oRKV53j7/a7IuJ8H7dGzxMFCUpOdU+e+HwWNxyXOIXQbOdIVmp
5R7UMLB0ghUhrSjeobfgu96tkyrj6rlBEE8nmoaHpOsZNEkCqUpWI9ZJvpugZSyB
dZQDgUzHnoL0qoVcWCWAAgfYqSgXPvz7zdXkgUAnJ5uO6GxfdpOaT0FpYRks7PT5
63r0C1cTb3HXbB+1MA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:07:32 2026 by rpki-client