Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File:                     DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier:          8DreR7wVVkJ9pGaBMpDosfq4nJhAG8JdqKHzCX2Oy24=
Subject key identifier:   57:D1:9F:66:F8:6F:8C:D8:29:9D:0A:D9:3B:BC:9E:F8:F3:01:0F:B2
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer:       /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial:       01A0C3327BD1C661F535E9243D7E77F4A2A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number:          1793
Signing time:             Mon 21 Sep 2026 09:01:00 +0000
Manifest this update:     Mon 21 Sep 2026 09:01:00 +0000
Manifest next update:     Tue 22 Sep 2026 09:01:00 +0000
Files and hashes:         1: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: /yM7XkXo0SVIC7HafT2KF/L9Idf4OVE2w3ygoxGyx0g=)
                          2: g323boBVOxyFFRDtn1suxBzGHN0.roa (hash: eyZdCahVj22vnipsJsBb9tIVCdJEj0KFcdD786lVupg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:32:7b:d1:c6:61:f5:35:e9:24:3d:7e:77:f4:a2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
        Validity
            Not Before: Sep 21 09:01:00 2026 GMT
            Not After : Sep 22 09:01:00 2026 GMT
        Subject: CN=57d19f66f86f8cd8299d0ad93bbc9ef8f3010fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:c5:7b:01:65:1c:2f:06:11:31:bf:dc:89:
                    ab:e3:76:ee:b4:90:52:75:fc:9d:dd:d0:15:b6:63:
                    4d:e0:d5:ad:4c:62:8a:ac:1a:4c:8b:84:96:59:b6:
                    fb:f8:87:cb:b1:e1:4f:4a:52:d9:78:4f:04:aa:99:
                    6e:b8:75:7d:7f:32:56:7f:29:7f:d5:2b:c3:f6:67:
                    5d:75:82:21:77:49:4f:bb:e2:89:dd:12:e3:3e:b8:
                    87:b9:1d:a6:23:15:bf:b3:bd:99:83:14:26:04:37:
                    b5:ac:63:2f:cc:72:3d:20:96:39:3d:44:bc:cd:f5:
                    86:fe:f9:1f:6e:29:9c:92:24:a2:6f:4c:41:62:7c:
                    c8:fc:d0:2d:66:a0:7a:4c:1c:ab:c4:49:b3:94:23:
                    79:f1:e0:a9:e6:66:33:0b:e8:f9:96:5c:5d:54:9a:
                    55:40:ce:d5:76:6d:c3:32:bb:e8:4c:8e:fd:cb:c0:
                    cd:8e:0a:67:95:47:d7:47:5e:06:96:01:0c:f3:6c:
                    23:1c:9d:d0:dd:1e:f7:f7:67:14:a2:65:63:8a:89:
                    6c:82:28:3a:0c:e6:e7:b8:a3:10:5a:e7:b1:67:3d:
                    e7:23:d2:15:de:73:3e:2f:b5:20:78:22:39:74:3f:
                    e9:9f:a4:0e:ce:76:0b:ab:57:86:1a:ba:14:20:e3:
                    ef:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D1:9F:66:F8:6F:8C:D8:29:9D:0A:D9:3B:BC:9E:F8:F3:01:0F:B2
            X509v3 Authority Key Identifier:
                keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7b:4e:18:61:8d:d4:d4:57:3b:77:fe:70:f6:98:66:02:e3:
         34:ae:75:05:c4:b9:f2:e5:87:ed:28:74:b0:a4:42:76:15:53:
         dc:1a:5e:a3:2c:71:ac:1c:50:4a:66:7c:b9:98:a0:d5:c4:3e:
         55:80:17:21:13:0a:8e:a5:d0:85:af:ef:a3:84:01:0a:42:e2:
         1e:a5:04:0d:0b:76:4d:9d:5b:93:42:ae:ad:ee:3d:90:41:7c:
         3d:f1:86:4a:2e:5f:f3:03:6a:59:cd:a2:e7:0c:0c:3c:d3:8d:
         87:aa:43:33:10:33:a8:09:a5:b3:2b:93:fa:3f:bb:6a:d6:71:
         23:5b:c5:9e:25:b8:ab:4f:ca:86:ee:0f:25:28:fa:24:da:06:
         04:c2:80:46:a0:8f:29:54:9b:f6:31:74:98:67:36:41:89:d8:
         d5:c3:4f:a6:99:e4:8c:c9:24:00:5b:70:cc:b7:dc:b4:ca:31:
         91:98:84:90:0b:aa:44:06:cf:12:27:41:d2:f2:33:3a:14:f9:
         fe:ff:a6:ec:46:a8:4a:89:6b:cd:db:98:b1:5f:c2:d0:1e:6e:
         85:91:9d:11:09:92:6c:ee:60:56:17:a4:05:ae:cb:9f:9a:95:
         48:c3:b6:90:4b:31:cb:7c:b1:48:3a:89:be:62:ac:78:6c:f1:
         d7:c4:91:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMnvRxmH1NekkPX539KKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTdmMjZkYjQzYWQ0MzIwNWJlYjA2N2ZkMGFiM2UzMDAy
Nzg2NWQwHhcNMjYwOTIxMDkwMTAwWhcNMjYwOTIyMDkwMTAwWjAzMTEwLwYDVQQD
Eyg1N2QxOWY2NmY4NmY4Y2Q4Mjk5ZDBhZDkzYmJjOWVmOGYzMDEwZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvTFewFlHC8GETG/3Imr43butJBS
dfyd3dAVtmNN4NWtTGKKrBpMi4SWWbb7+IfLseFPSlLZeE8EqpluuHV9fzJWfyl/
1SvD9mdddYIhd0lPu+KJ3RLjPriHuR2mIxW/s72ZgxQmBDe1rGMvzHI9IJY5PUS8
zfWG/vkfbimckiSib0xBYnzI/NAtZqB6TByrxEmzlCN58eCp5mYzC+j5llxdVJpV
QM7Vdm3DMrvoTI79y8DNjgpnlUfXR14GlgEM82wjHJ3Q3R7392cUomVjiolsgig6
DObnuKMQWuexZz3nI9IV3nM+L7UgeCI5dD/pn6QOznYLq1eGGroUIOPvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfRn2b4b4zYKZ0K2Tu8nvjzAQ+yMB8GA1UdIwQY
MBaAFA3n8m20OtQyBb6wZ/0Ks+MAJ4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTIt
ZDIyMTIzMzk3YjUwLzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTItZDIyMTIzMzk3YjUw
LzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXtOGGGN
1NRXO3f+cPaYZgLjNK51BcS58uWH7Sh0sKRCdhVT3BpeoyxxrBxQSmZ8uZig1cQ+
VYAXIRMKjqXQha/vo4QBCkLiHqUEDQt2TZ1bk0Kure49kEF8PfGGSi5f8wNqWc2i
5wwMPNONh6pDMxAzqAmlsyuT+j+7atZxI1vFniW4q0/Khu4PJSj6JNoGBMKARqCP
KVSb9jF0mGc2QYnY1cNPppnkjMkkAFtwzLfctMoxkZiEkAuqRAbPEidB0vIzOhT5
/v+m7EaoSolrzduYsV/C0B5uhZGdEQmSbO5gVhekBa7Ln5qVSMO2kEsxy3yxSDqJ
vmKseGzx18SRLA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:50 2026 by rpki-client