Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File:                     0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier:          rUzcWoE1BS10Q2HkJBqpaxcuC6hMi6iGg81Rj/0+VTs=
Subject key identifier:   79:D4:EE:2C:02:5B:5B:9B:9B:FF:E4:F2:33:A6:89:A4:71:5A:C0:F4
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer:       /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial:       01A0DEAA89BFA33E94EA825D0724D2AC7CC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number:          08CC
Signing time:             Sat 26 Sep 2026 17:01:53 +0000
Manifest this update:     Sat 26 Sep 2026 17:01:53 +0000
Manifest next update:     Sun 27 Sep 2026 17:01:53 +0000
Files and hashes:         1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: 5k6th96x+SB7TKmfb3z5xYknPehYaeemhITbfX2cz+w=)
                          2: RnVTKZtoHdvPsfS8AH4yl7Tn4u8.roa (hash: Pgpu3NuPaXsm7XOY/YOTMwi4KbLTR5P/cSiW4/B73kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:aa:89:bf:a3:3e:94:ea:82:5d:07:24:d2:ac:7c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
        Validity
            Not Before: Sep 26 17:01:53 2026 GMT
            Not After : Sep 27 17:01:53 2026 GMT
        Subject: CN=79d4ee2c025b5b9b9bffe4f233a689a4715ac0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:f9:a7:8f:1b:ea:30:71:b6:ca:88:77:65:
                    66:35:a6:8a:b5:65:4b:bd:ee:92:e9:61:4a:4f:3d:
                    be:ab:e8:a5:e3:3a:19:15:8e:71:a7:f1:bb:d4:f2:
                    41:f5:01:7d:6a:ca:46:2b:80:68:ad:05:bf:1a:4d:
                    fb:8a:ff:42:39:43:7c:09:ed:54:e7:e3:85:e2:28:
                    dc:16:56:b7:51:5c:0a:5f:ab:8a:32:91:87:0e:9d:
                    29:cb:65:df:17:f3:37:92:d6:c8:46:9b:ee:ba:d0:
                    75:15:16:17:46:5d:71:6a:99:d3:c8:69:32:72:fb:
                    c2:90:fc:b0:f6:c3:34:60:a7:28:50:ba:12:3e:ab:
                    89:bf:f0:b7:d6:74:e8:10:ed:66:97:b3:f4:6b:14:
                    13:bf:c2:90:d7:17:f7:70:aa:61:06:fb:a4:51:95:
                    ef:ce:53:a8:7a:54:8e:fd:aa:3c:0b:21:bf:d9:33:
                    30:27:87:71:59:bb:35:54:ec:ed:85:b1:d1:2b:42:
                    04:1c:c5:af:4d:58:92:86:5d:39:24:12:df:d5:d0:
                    6f:6b:e6:38:a7:44:00:4d:6f:00:45:1b:15:56:dd:
                    00:16:b3:44:11:1f:12:64:fd:e2:b2:57:64:05:04:
                    0d:b1:e3:71:27:50:ff:f2:65:3c:ac:30:9d:45:1d:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D4:EE:2C:02:5B:5B:9B:9B:FF:E4:F2:33:A6:89:A4:71:5A:C0:F4
            X509v3 Authority Key Identifier:
                keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:39:54:29:0b:7c:54:2c:37:84:e1:1f:52:3a:db:fd:b5:88:
         3e:44:c7:b7:de:ef:cd:6a:73:91:b0:b8:ab:f8:42:8a:89:11:
         eb:d7:d2:5f:36:4a:cd:92:de:b9:4e:6b:c7:c9:1f:bd:b0:a0:
         07:28:05:ee:7a:45:11:63:78:12:7a:46:82:82:f2:d4:c3:6b:
         71:78:d4:e8:c4:e1:8d:d1:e5:a1:a9:15:52:62:00:84:64:3d:
         bf:e9:c6:96:eb:66:4f:e8:b0:1e:ca:8d:1d:02:5a:0e:46:3b:
         04:71:ff:49:c6:99:dc:d4:79:da:99:ca:db:6b:0b:15:7d:fa:
         2f:d4:3b:e8:98:3d:a8:22:fb:07:58:be:5d:17:3e:b6:1d:da:
         15:af:05:18:e6:58:0c:80:24:87:fe:c7:92:b0:aa:ea:2e:86:
         5e:87:a5:46:e4:fa:9f:1d:38:4a:9e:f3:77:aa:f0:3a:74:b6:
         ad:ba:9c:1e:9c:95:bd:dc:56:c4:98:fc:5e:c4:ff:10:75:20:
         e6:fe:67:ff:49:2e:dc:63:e3:35:e7:bd:67:53:01:30:65:42:
         3b:69:8b:b4:48:1f:be:c5:6a:40:ee:9f:15:02:21:ec:2e:71:
         1c:02:42:ee:8b:27:d0:d6:97:bd:18:a6:50:1b:30:78:66:be:
         83:23:c9:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeqom/oz6U6oJdByTSrHzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMWY2ZDkyNGQ2ZjZjYzBlOTQwODM3ZDkzMDFmY2U3MzIw
NjU3NzEwHhcNMjYwOTI2MTcwMTUzWhcNMjYwOTI3MTcwMTUzWjAzMTEwLwYDVQQD
Eyg3OWQ0ZWUyYzAyNWI1YjliOWJmZmU0ZjIzM2E2ODlhNDcxNWFjMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcj5p48b6jBxtsqId2VmNaaKtWVL
ve6S6WFKTz2+q+il4zoZFY5xp/G71PJB9QF9aspGK4BorQW/Gk37iv9COUN8Ce1U
5+OF4ijcFla3UVwKX6uKMpGHDp0py2XfF/M3ktbIRpvuutB1FRYXRl1xapnTyGky
cvvCkPyw9sM0YKcoULoSPquJv/C31nToEO1ml7P0axQTv8KQ1xf3cKphBvukUZXv
zlOoelSO/ao8CyG/2TMwJ4dxWbs1VOzthbHRK0IEHMWvTViShl05JBLf1dBva+Y4
p0QATW8ARRsVVt0AFrNEER8SZP3isldkBQQNseNxJ1D/8mU8rDCdRR2kyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnU7iwCW1ubm//k8jOmiaRxWsD0MB8GA1UdIwQY
MBaAFNEfbZJNb2zA6UCDfZMB/OcyBldxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgt
OWVkOTcxMGQ2ZWEyLzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgtOWVkOTcxMGQ2ZWEy
LzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjlUKQt8
VCw3hOEfUjrb/bWIPkTHt97vzWpzkbC4q/hCiokR69fSXzZKzZLeuU5rx8kfvbCg
BygF7npFEWN4EnpGgoLy1MNrcXjU6MThjdHloakVUmIAhGQ9v+nGlutmT+iwHsqN
HQJaDkY7BHH/ScaZ3NR52pnK22sLFX36L9Q76Jg9qCL7B1i+XRc+th3aFa8FGOZY
DIAkh/7HkrCq6i6GXoelRuT6nx04Sp7zd6rwOnS2rbqcHpyVvdxWxJj8XsT/EHUg
5v5n/0ku3GPjNee9Z1MBMGVCO2mLtEgfvsVqQO6fFQIh7C5xHAJC7osn0NaXvRim
UBsweGa+gyPJDQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:38:38 2026 by rpki-client