Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          gDXhCGXk2/aQbcMjYGPHuQftsgnwtX7U8kzLJN1SxAU=
Subject key identifier:   63:C2:05:F6:CD:EC:9E:F8:52:4E:78:7D:42:5D:9F:DD:3B:E2:B4:74
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01A1464DBD117B4D5B04335E761816881D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          189D
Signing time:             Fri 16 Oct 2026 20:01:01 +0000
Manifest this update:     Fri 16 Oct 2026 20:01:01 +0000
Manifest next update:     Sat 17 Oct 2026 20:01:01 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: AcXZyIcWs14BMTsC3kPjKl6PkfWgklTt94d3xalfrvk=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:4d:bd:11:7b:4d:5b:04:33:5e:76:18:16:88:1d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Oct 16 20:01:01 2026 GMT
            Not After : Oct 17 20:01:01 2026 GMT
        Subject: CN=63c205f6cdec9ef8524e787d425d9fdd3be2b474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:a6:2c:82:96:6e:d0:7e:63:01:cd:ef:77:
                    af:e2:9d:73:9e:67:58:ba:b1:97:6f:9c:99:37:fc:
                    3a:9f:48:c8:77:75:9d:73:0e:18:f7:72:50:9d:39:
                    84:d8:39:91:17:e7:a6:cb:29:2e:9f:a7:1e:8d:01:
                    8c:ab:bb:f1:d3:b1:8f:63:b7:42:2a:4c:e0:b6:74:
                    91:a8:89:80:67:a5:e7:d0:ba:de:72:65:70:95:bc:
                    91:be:c2:2b:89:35:7a:ed:a8:e8:4e:56:ea:ef:05:
                    b8:6d:a3:e8:47:11:aa:2d:35:bc:62:e7:af:1a:bc:
                    c1:30:0a:6a:e6:dc:a5:d2:64:b8:64:85:7e:a4:47:
                    ca:f2:be:a2:b9:58:e3:9f:16:e7:a3:1a:44:d9:66:
                    79:39:2e:41:fe:cc:cc:8e:c6:e9:5e:1f:8b:9b:2d:
                    f2:ca:c4:0a:c7:22:5c:7e:14:1b:c5:12:c4:de:b9:
                    72:af:a7:d6:b5:5d:ec:61:5a:c0:10:53:ae:b5:b6:
                    5f:11:ca:aa:26:d4:8a:e4:db:7a:29:bf:97:e3:00:
                    c6:9c:3d:8d:c5:24:7f:ed:83:69:80:fc:d2:7d:ac:
                    61:76:93:22:42:50:a0:69:23:09:8d:37:25:11:4a:
                    a1:cb:b7:4d:c2:d3:74:88:be:d8:01:74:62:ae:da:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C2:05:F6:CD:EC:9E:F8:52:4E:78:7D:42:5D:9F:DD:3B:E2:B4:74
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:82:f1:07:bc:2c:03:a2:6a:82:a3:fa:3e:08:03:ee:e2:
         12:0c:a7:2d:2c:e4:82:eb:25:96:af:8c:64:84:06:89:77:c9:
         8e:b7:bf:68:0d:9f:77:04:64:62:f3:64:91:e9:42:8f:25:80:
         c9:2c:3a:80:69:e4:7b:6f:fe:25:af:07:8a:38:2b:6d:6f:20:
         ab:92:40:4f:9a:8d:53:9d:0b:d0:85:f0:c1:32:f3:0b:bb:fd:
         ea:80:ff:2b:83:c0:85:1f:09:6e:94:3b:74:b1:4a:89:55:05:
         4f:45:16:2e:1d:ee:2f:5a:e5:5e:4c:e0:97:69:ac:5e:ec:78:
         46:3b:79:6a:96:6c:36:a7:37:68:56:a7:6c:43:74:87:bf:72:
         4c:8d:70:e0:73:a2:e7:e5:df:e0:c9:d2:01:7f:4a:c7:02:54:
         27:c2:f3:07:28:6b:77:eb:78:11:32:71:fe:1f:96:31:09:81:
         09:15:e4:6a:dc:0b:37:b6:ea:c7:af:81:bc:53:82:38:a4:9f:
         23:07:ad:47:6f:7f:84:db:e8:e2:c0:2f:7f:1b:30:c6:f3:f5:
         69:03:52:6d:36:d3:e4:2b:cd:4b:11:bd:2a:25:d1:c4:15:56:
         94:b1:c9:15:8e:9c:86:ee:f0:d4:71:b3:42:0d:cc:54:41:c1:
         eb:39:7e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFGTb0Re01bBDNedhgWiB2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjYxMDE2MjAwMTAxWhcNMjYxMDE3MjAwMTAxWjAzMTEwLwYDVQQD
Eyg2M2MyMDVmNmNkZWM5ZWY4NTI0ZTc4N2Q0MjVkOWZkZDNiZTJiNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPCmLIKWbtB+YwHN73ev4p1znmdY
urGXb5yZN/w6n0jId3Wdcw4Y93JQnTmE2DmRF+emyykun6cejQGMq7vx07GPY7dC
KkzgtnSRqImAZ6Xn0LrecmVwlbyRvsIriTV67ajoTlbq7wW4baPoRxGqLTW8Yuev
GrzBMApq5tyl0mS4ZIV+pEfK8r6iuVjjnxbnoxpE2WZ5OS5B/szMjsbpXh+Lmy3y
ysQKxyJcfhQbxRLE3rlyr6fWtV3sYVrAEFOutbZfEcqqJtSK5Nt6Kb+X4wDGnD2N
xSR/7YNpgPzSfaxhdpMiQlCgaSMJjTclEUqhy7dNwtN0iL7YAXRirtqNAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPCBfbN7J74Uk54fUJdn9074rR0MB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK6C8Qe8
LAOiaoKj+j4IA+7iEgynLSzkgusllq+MZIQGiXfJjre/aA2fdwRkYvNkkelCjyWA
ySw6gGnke2/+Ja8HijgrbW8gq5JAT5qNU50L0IXwwTLzC7v96oD/K4PAhR8JbpQ7
dLFKiVUFT0UWLh3uL1rlXkzgl2msXux4Rjt5apZsNqc3aFanbEN0h79yTI1w4HOi
5+Xf4MnSAX9KxwJUJ8LzByhrd+t4ETJx/h+WMQmBCRXkatwLN7bqx6+BvFOCOKSf
IwetR29/hNvo4sAvfxswxvP1aQNSbTbT5CvNSxG9KiXRxBVWlLHJFY6chu7w1HGz
Qg3MVEHB6zl+pg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 08:00:17 2026 by rpki-client