Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File:                     r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier:          pQxRZvyEq3ZUtWMUBuTyX91nWLE2gvEP5ZLqJASvfts=
Subject key identifier:   19:29:CF:EA:38:FA:88:00:EA:93:60:2D:F5:87:BA:72:91:83:1B:E0
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer:       /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial:       01A06649B18C88543194E9190A28D9A0E482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number:          0CB6
Signing time:             Thu 03 Sep 2026 08:01:40 +0000
Manifest this update:     Thu 03 Sep 2026 08:01:40 +0000
Manifest next update:     Fri 04 Sep 2026 08:01:40 +0000
Files and hashes:         1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: 0ENY+GPj4V9xz4u4MV7qyMFs8cNnenrAi6h1lGuXug8=)
                          2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 08:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:66:49:b1:8c:88:54:31:94:e9:19:0a:28:d9:a0:e4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
        Validity
            Not Before: Sep  3 08:01:40 2026 GMT
            Not After : Sep  4 08:01:40 2026 GMT
        Subject: CN=1929cfea38fa8800ea93602df587ba7291831be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:55:84:98:e3:4a:a7:3e:79:e4:2e:0d:ba:
                    c7:f8:3c:bb:22:6b:11:58:24:be:f4:43:a7:65:ef:
                    d7:35:2c:66:2c:a5:bf:52:2c:1c:d7:ad:d2:db:07:
                    12:a2:06:89:79:62:4d:e1:2a:8f:17:4a:e0:7e:4c:
                    1f:10:10:41:1e:4f:78:f7:16:32:99:8d:55:51:0d:
                    70:a6:b8:82:f4:75:42:16:ba:45:52:29:23:d3:9a:
                    a8:f3:6b:90:4c:15:4a:1e:bb:14:61:1e:b6:6f:30:
                    c4:d0:66:9c:69:1e:70:10:14:30:cc:86:21:23:53:
                    9b:13:f0:81:0c:c1:4d:83:3e:34:d2:f6:40:f2:23:
                    8e:a7:a5:a6:79:c1:54:9c:c0:8e:08:87:c7:aa:95:
                    60:0c:0a:1d:98:db:aa:5b:86:ee:06:53:2d:53:bc:
                    8f:6a:c2:dc:c6:bb:76:50:d5:e7:96:66:21:73:99:
                    ec:3d:88:17:f5:79:6b:03:c1:f2:08:cb:1d:2a:71:
                    9f:b3:c4:4c:71:8f:56:ca:32:db:51:d7:21:ca:0d:
                    a6:ec:0b:c1:17:5c:1b:2a:64:aa:65:b6:65:b5:93:
                    bc:12:f9:7c:2b:bf:c6:4d:06:e7:13:1d:f3:55:c1:
                    86:db:46:1a:08:78:2e:7c:d7:db:1e:8c:75:be:bb:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:CF:EA:38:FA:88:00:EA:93:60:2D:F5:87:BA:72:91:83:1B:E0
            X509v3 Authority Key Identifier:
                keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:85:bc:87:6b:73:69:dc:fe:7b:3f:12:0c:48:73:d1:e3:
         0b:1e:90:8b:d3:96:52:04:ff:1f:d0:6f:9a:60:eb:12:83:63:
         38:20:12:4a:53:6a:5e:ee:0d:53:e3:8c:57:e4:c3:33:da:6d:
         24:db:c3:d4:36:5c:21:b6:6a:32:d9:8b:9e:25:a9:27:38:f5:
         a6:13:25:29:14:6f:01:28:92:3b:63:0b:6c:df:23:71:a5:03:
         87:88:86:c3:c7:14:de:16:f2:38:8d:2b:8b:4d:26:ec:16:73:
         7c:9b:54:74:bf:84:b5:28:ad:59:d8:9e:62:33:39:76:d0:47:
         67:34:60:c6:96:b1:43:65:7f:7d:7c:98:14:24:d4:2f:53:3c:
         f3:76:6a:9d:e6:89:26:1b:db:60:18:0a:3a:f1:ae:78:e9:7b:
         21:71:a4:6e:98:1e:a1:10:8e:d0:6b:47:9a:c7:63:a1:67:77:
         8b:70:9f:67:31:74:1c:fc:24:29:80:0c:66:1c:5b:72:54:f6:
         9a:7d:22:d1:83:6a:ee:09:9a:ae:06:1d:fc:cb:95:04:8e:b4:
         15:c6:c8:8f:b0:1b:c1:f9:b1:49:80:2a:7e:80:25:2c:41:3f:
         9a:2c:12:0c:c3:55:3f:43:53:c2:8c:1e:46:df:f3:f7:e8:a3:
         8b:5d:3c:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBmSbGMiFQxlOkZCijZoOSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl
YzJlNjgwHhcNMjYwOTAzMDgwMTQwWhcNMjYwOTA0MDgwMTQwWjAzMTEwLwYDVQQD
EygxOTI5Y2ZlYTM4ZmE4ODAwZWE5MzYwMmRmNTg3YmE3MjkxODMxYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT5VhJjjSqc+eeQuDbrH+Dy7ImsR
WCS+9EOnZe/XNSxmLKW/Uiwc163S2wcSogaJeWJN4SqPF0rgfkwfEBBBHk949xYy
mY1VUQ1wpriC9HVCFrpFUikj05qo82uQTBVKHrsUYR62bzDE0GacaR5wEBQwzIYh
I1ObE/CBDMFNgz400vZA8iOOp6WmecFUnMCOCIfHqpVgDAodmNuqW4buBlMtU7yP
asLcxrt2UNXnlmYhc5nsPYgX9XlrA8HyCMsdKnGfs8RMcY9WyjLbUdchyg2m7AvB
F1wbKmSqZbZltZO8Evl8K7/GTQbnEx3zVcGG20YaCHgufNfbHox1vrtxtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkpz+o4+ogA6pNgLfWHunKRgxvgMB8GA1UdIwQY
MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt
Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5
LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6aFvIdr
c2nc/ns/EgxIc9HjCx6Qi9OWUgT/H9BvmmDrEoNjOCASSlNqXu4NU+OMV+TDM9pt
JNvD1DZcIbZqMtmLniWpJzj1phMlKRRvASiSO2MLbN8jcaUDh4iGw8cU3hbyOI0r
i00m7BZzfJtUdL+EtSitWdieYjM5dtBHZzRgxpaxQ2V/fXyYFCTUL1M883ZqneaJ
JhvbYBgKOvGueOl7IXGkbpgeoRCO0GtHmsdjoWd3i3CfZzF0HPwkKYAMZhxbclT2
mn0i0YNq7gmargYd/MuVBI60FcbIj7AbwfmxSYAqfoAlLEE/miwSDMNVP0NTwowe
Rt/z9+iji108UA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:10:21 2026 by rpki-client