Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File:                     c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier:          gPHqlpWAkuspf6pZS9LtD+qfkZDjsSMQatIF2+MKi54=
Subject key identifier:   7A:CE:83:54:92:00:FF:01:D1:BA:F3:CE:67:B9:C9:BF:2A:03:7B:96
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer:       /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial:       01A17E4F06B2535FB713E696DB74D2E4879D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number:          0372
Signing time:             Tue 27 Oct 2026 17:01:10 +0000
Manifest this update:     Tue 27 Oct 2026 17:01:10 +0000
Manifest next update:     Wed 28 Oct 2026 17:01:10 +0000
Files and hashes:         1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
                          2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
                          3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: NkBNcTaK+8Nm+8JMJTKf2ZccUDx3RO2+Sw0oa+XuKKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:4f:06:b2:53:5f:b7:13:e6:96:db:74:d2:e4:87:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
        Validity
            Not Before: Oct 27 17:01:10 2026 GMT
            Not After : Oct 28 17:01:10 2026 GMT
        Subject: CN=7ace83549200ff01d1baf3ce67b9c9bf2a037b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:58:07:ef:f0:ad:c7:0b:79:92:e6:3a:1f:
                    8d:1f:19:fa:72:d8:5e:34:5c:a8:2a:37:e7:20:1b:
                    67:0f:ac:31:04:2a:84:cc:7f:35:ae:ba:84:28:96:
                    61:ad:8a:38:81:07:bb:9d:51:d8:26:eb:f2:f1:cb:
                    2e:50:06:4a:84:4f:ca:53:cf:4b:08:40:59:1e:ee:
                    d9:d3:ea:fc:99:fb:21:59:84:95:a5:4d:03:df:55:
                    fe:eb:4f:64:a1:9e:b2:e3:80:c3:13:bb:11:89:3c:
                    c6:da:d5:6b:5f:15:5e:f7:8a:c4:db:ac:c2:77:38:
                    fe:4d:d5:4f:14:b0:28:c7:19:41:26:6a:ff:b7:b9:
                    d5:55:3c:18:d1:d0:88:fb:87:41:31:a9:1a:ca:a4:
                    df:e5:ff:5b:7e:f6:e0:c0:04:e8:aa:c6:ca:5d:98:
                    bf:2f:0d:df:cd:2f:68:7f:3a:6e:a4:69:90:6d:fb:
                    de:37:15:3f:da:2b:43:29:0f:73:e0:eb:23:b0:b8:
                    01:79:58:85:f5:09:e8:a7:22:03:3a:8e:8a:c8:cc:
                    54:58:a7:d8:ed:a9:d5:04:c0:b1:e8:3a:1f:7e:95:
                    90:72:3e:53:27:e0:00:2a:21:1c:b2:03:c3:61:9c:
                    b3:16:e4:b9:db:ee:bf:77:4a:80:9a:9f:c9:3f:f2:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CE:83:54:92:00:FF:01:D1:BA:F3:CE:67:B9:C9:BF:2A:03:7B:96
            X509v3 Authority Key Identifier:
                keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f6:e9:0c:80:bb:25:d0:bc:65:9e:33:f8:29:0d:99:6a:e3:
         c5:ea:15:4e:37:fd:ed:7d:23:e7:6d:91:6a:8c:ed:50:58:2d:
         3e:3b:6f:f6:67:4d:82:e5:97:fd:ef:3a:b4:73:1a:4c:1d:8a:
         63:e6:3a:28:fb:3d:11:8c:20:f7:9d:b0:c8:db:77:7a:3f:0e:
         4c:44:29:b5:5d:2c:17:5a:0a:41:54:e3:c2:32:58:46:7f:c5:
         74:46:33:35:2a:07:65:7b:3e:0f:63:dc:2e:79:d4:ec:70:43:
         75:d0:bb:ea:5b:11:fe:e5:31:c2:fd:5d:5e:26:d8:10:36:1d:
         6e:7b:f7:81:34:d1:74:bf:31:c4:f5:3a:53:54:0e:3c:80:a5:
         b1:f5:38:a4:fe:71:a7:cb:71:d6:c5:ce:86:d3:69:0f:42:c3:
         64:78:c7:14:37:1d:a6:f7:2c:0b:bd:d5:a0:2b:dd:49:8c:9e:
         18:0a:30:8d:d8:f8:54:c7:e6:ee:63:e3:b3:b3:03:ea:70:5b:
         a2:f2:f9:c9:5d:77:10:04:36:fd:a4:0b:45:81:23:a8:b4:11:
         b5:8f:6d:27:2e:6c:bc:4c:a2:7b:47:5e:59:0e:71:2d:93:ae:
         0e:56:ea:9a:c8:c0:87:b2:6d:ae:bb:10:92:fa:3e:92:cb:94:
         fe:28:ff:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+TwayU1+3E+aW23TS5IedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDkxY2RjYzBjMWIzNjNiNDliZmMzYzJhYzU4ZTkzMDAy
ZGYwN2QwHhcNMjYxMDI3MTcwMTEwWhcNMjYxMDI4MTcwMTEwWjAzMTEwLwYDVQQD
Eyg3YWNlODM1NDkyMDBmZjAxZDFiYWYzY2U2N2I5YzliZjJhMDM3Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNNYB+/wrccLeZLmOh+NHxn6cthe
NFyoKjfnIBtnD6wxBCqEzH81rrqEKJZhrYo4gQe7nVHYJuvy8csuUAZKhE/KU89L
CEBZHu7Z0+r8mfshWYSVpU0D31X+609koZ6y44DDE7sRiTzG2tVrXxVe94rE26zC
dzj+TdVPFLAoxxlBJmr/t7nVVTwY0dCI+4dBMakayqTf5f9bfvbgwAToqsbKXZi/
Lw3fzS9ofzpupGmQbfveNxU/2itDKQ9z4OsjsLgBeViF9QnopyIDOo6KyMxUWKfY
7anVBMCx6DoffpWQcj5TJ+AAKiEcsgPDYZyzFuS52+6/d0qAmp/JP/LyaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrOg1SSAP8B0brzzme5yb8qA3uWMB8GA1UdIwQY
MBaAFHPZHNzAwbNjtJv8PCrFjpMALfB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgt
YjE1NTI0MDliNmQxLzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgtYjE1NTI0MDliNmQx
LzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfbpDIC7
JdC8ZZ4z+CkNmWrjxeoVTjf97X0j522RaoztUFgtPjtv9mdNguWX/e86tHMaTB2K
Y+Y6KPs9EYwg952wyNt3ej8OTEQptV0sF1oKQVTjwjJYRn/FdEYzNSoHZXs+D2Pc
LnnU7HBDddC76lsR/uUxwv1dXibYEDYdbnv3gTTRdL8xxPU6U1QOPIClsfU4pP5x
p8tx1sXOhtNpD0LDZHjHFDcdpvcsC73VoCvdSYyeGAowjdj4VMfm7mPjs7MD6nBb
ovL5yV13EAQ2/aQLRYEjqLQRtY9tJy5svEyie0deWQ5xLZOuDlbqmsjAh7JtrrsQ
kvo+ksuU/ij/AA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:31 2026 by rpki-client