Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File:                     RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier:          6fqTdGChlvSqFOzUUnRrMx9/GIal3kjj4eAy2Vz3X1k=
Subject key identifier:   4A:0C:AC:9E:DE:35:0E:7D:90:0D:88:B2:8B:43:55:19:D2:65:AF:B2
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer:       /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial:       01A08C7BDFDEA08EA3EAEED75199F354A889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number:          1A4D
Signing time:             Thu 10 Sep 2026 18:02:03 +0000
Manifest this update:     Thu 10 Sep 2026 18:02:03 +0000
Manifest next update:     Fri 11 Sep 2026 18:02:03 +0000
Files and hashes:         1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: 22xs9UBmCULhLBLaDa5OgxRwZloYnsPX4dFSYN4kzmA=)
                          2: unbj6R1pt1reWtClkg6u6qP97qU.roa (hash: ve6WwDA/IGFZ6obWRDfS0N46O05JHSdRDsvfP7NEV7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:df:de:a0:8e:a3:ea:ee:d7:51:99:f3:54:a8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
        Validity
            Not Before: Sep 10 18:02:03 2026 GMT
            Not After : Sep 11 18:02:03 2026 GMT
        Subject: CN=4a0cac9ede350e7d900d88b28b435519d265afb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:b4:3d:eb:52:40:f9:07:44:5b:ed:97:00:
                    a6:cc:07:ed:a5:17:37:42:bd:66:b7:85:e9:7d:fa:
                    e1:e8:52:2b:4a:d3:4e:d2:8f:8d:4d:4f:40:5f:32:
                    91:ec:be:35:e4:35:8b:f8:f2:d0:62:50:d5:aa:cb:
                    4f:7f:5d:ff:0d:3f:6f:6d:75:e0:dd:44:5a:00:64:
                    9a:1d:b4:85:ca:c7:81:57:47:1f:df:18:77:31:1d:
                    cd:bd:2f:f2:e4:73:9c:6e:19:3a:1a:e4:a8:30:57:
                    1c:09:80:3e:f3:fc:54:95:05:d3:9d:43:ee:c0:60:
                    13:8c:f8:b7:fd:a9:d0:fb:24:a7:90:a9:29:f5:4b:
                    e1:ed:a5:fc:99:14:cb:64:a8:19:6d:25:3f:8e:69:
                    90:bf:72:b4:8d:be:ba:99:aa:94:77:12:ea:ed:4a:
                    1c:86:ab:0c:2d:79:57:4a:d0:e1:38:73:65:52:5d:
                    91:77:08:14:de:8f:db:e2:c9:56:65:46:15:dc:e3:
                    37:44:21:a8:b7:2f:b3:4f:2e:ee:a6:c3:dd:d6:0d:
                    63:d8:95:80:80:95:c5:9e:3d:ba:de:ef:4f:77:47:
                    23:4f:0a:51:29:f2:c8:75:d3:25:99:71:37:34:79:
                    03:6e:2b:5f:78:af:50:60:26:f5:4a:81:78:b2:0a:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0C:AC:9E:DE:35:0E:7D:90:0D:88:B2:8B:43:55:19:D2:65:AF:B2
            X509v3 Authority Key Identifier:
                keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:67:64:15:ab:08:41:15:5f:dd:b1:f5:26:62:be:06:b9:
         eb:3c:7b:9e:e7:55:42:9c:ab:1d:1e:67:d7:10:05:f5:62:33:
         a5:f3:ac:30:5a:4a:9a:1a:6d:25:9b:44:6e:16:d6:16:d5:75:
         08:15:f4:75:b5:b9:f4:6e:70:eb:5e:ad:54:39:60:28:72:e4:
         e7:13:c3:23:67:9c:c6:30:c4:f9:24:a7:ac:ae:2e:e7:3b:3e:
         c7:f8:4b:21:7c:56:04:2d:36:b9:8e:9e:5d:b9:51:83:b7:f4:
         10:2d:09:58:8e:d3:3f:ee:cf:aa:41:70:5a:5b:58:3a:d9:71:
         a7:84:da:51:dc:a1:70:1a:2f:a4:7b:ba:fd:82:74:f8:ee:b4:
         96:68:7f:5d:25:36:47:5a:58:4d:d2:50:a9:b9:d4:d7:23:28:
         52:d3:75:be:a5:9d:ff:03:d4:4b:ac:a5:af:f7:cd:98:5c:e2:
         f5:0c:21:07:c0:d5:db:ba:81:28:df:53:27:cf:12:00:c3:a4:
         d6:89:3f:25:cc:fb:0a:b3:d4:22:e8:bd:5f:82:7a:87:11:eb:
         8c:41:c2:5c:e7:b3:69:9f:65:4b:01:6a:0c:7b:f7:49:59:85:
         8d:83:ca:e7:85:31:e5:1d:90:74:8e:34:61:61:e5:bd:71:3c:
         e0:17:d7:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMe9/eoI6j6u7XUZnzVKiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTY2YzFhMjgzZDU1M2VmM2Y2NTZmNTcyMjM5ODRkZGE3
YzM1NWYwHhcNMjYwOTEwMTgwMjAzWhcNMjYwOTExMTgwMjAzWjAzMTEwLwYDVQQD
Eyg0YTBjYWM5ZWRlMzUwZTdkOTAwZDg4YjI4YjQzNTUxOWQyNjVhZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8y0PetSQPkHRFvtlwCmzAftpRc3
Qr1mt4Xpffrh6FIrStNO0o+NTU9AXzKR7L415DWL+PLQYlDVqstPf13/DT9vbXXg
3URaAGSaHbSFyseBV0cf3xh3MR3NvS/y5HOcbhk6GuSoMFccCYA+8/xUlQXTnUPu
wGATjPi3/anQ+ySnkKkp9Uvh7aX8mRTLZKgZbSU/jmmQv3K0jb66maqUdxLq7Uoc
hqsMLXlXStDhOHNlUl2RdwgU3o/b4slWZUYV3OM3RCGoty+zTy7upsPd1g1j2JWA
gJXFnj263u9Pd0cjTwpRKfLIddMlmXE3NHkDbitfeK9QYCb1SoF4sgoZQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoMrJ7eNQ59kA2IsotDVRnSZa+yMB8GA1UdIwQY
MBaAFERWbBooPVU+8/ZW9XIjmE3afDVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGIt
OWQ1OGNlMjIxODQzLzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGItOWQ1OGNlMjIxODQz
LzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjppnZBWr
CEEVX92x9SZivga56zx7nudVQpyrHR5n1xAF9WIzpfOsMFpKmhptJZtEbhbWFtV1
CBX0dbW59G5w616tVDlgKHLk5xPDI2ecxjDE+SSnrK4u5zs+x/hLIXxWBC02uY6e
XblRg7f0EC0JWI7TP+7PqkFwWltYOtlxp4TaUdyhcBovpHu6/YJ0+O60lmh/XSU2
R1pYTdJQqbnU1yMoUtN1vqWd/wPUS6ylr/fNmFzi9QwhB8DV27qBKN9TJ88SAMOk
1ok/Jcz7CrPUIui9X4J6hxHrjEHCXOezaZ9lSwFqDHv3SVmFjYPK54Ux5R2QdI40
YWHlvXE84BfXmw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:54:49 2026 by rpki-client