Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File:                     9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier:          6iTRxq+qVV7LvkccLuY+/oHuc6Eojsa0ql/2AN3k5wE=
Subject key identifier:   B5:04:3D:B6:BD:9C:AA:2A:29:B9:F8:49:06:91:A8:1F:F0:AD:61:3C
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer:       /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial:       01A000C9F3E8A8254010CCA8AFE466B5D770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number:          1A1B
Signing time:             Fri 14 Aug 2026 15:00:30 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:30 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:30 +0000
Files and hashes:         1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: mkr6f277v/IL1IzdbcS38BppgCqVuAyrvD6SN/eWEmc=)
                          2: lc3C3wc32zcnHrU1F3n1Adhu2_g.roa (hash: 799Y5VOF1laQ/F9V5y2xMZ9oXgKkk02hVDbVY//MZDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:c9:f3:e8:a8:25:40:10:cc:a8:af:e4:66:b5:d7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
        Validity
            Not Before: Aug 14 15:00:30 2026 GMT
            Not After : Aug 15 15:00:30 2026 GMT
        Subject: CN=b5043db6bd9caa2a29b9f8490691a81ff0ad613c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:ad:74:fd:34:61:3c:d8:7a:e4:75:44:44:
                    5d:e4:e3:ac:cd:cb:a3:34:4e:c9:91:f8:4e:85:bd:
                    49:1c:cd:37:6f:17:2a:cf:e7:58:e2:76:f4:74:6e:
                    aa:b3:08:da:8a:b9:f4:c6:84:20:b5:24:e9:15:ee:
                    1d:57:42:6b:7a:2a:23:3c:97:60:ea:18:46:27:38:
                    10:c9:58:eb:e2:e9:ab:84:02:f1:76:65:5e:2a:0d:
                    cb:6f:87:07:f9:fa:e3:7c:38:a2:d1:f7:40:1e:5c:
                    c9:18:c5:96:e3:b9:17:b5:a6:ec:67:9b:09:59:77:
                    6b:f7:9c:50:21:f5:7a:53:ce:61:16:14:a0:97:73:
                    61:33:13:06:91:a0:55:52:db:b3:2b:46:2a:20:0f:
                    f0:6c:ca:df:a4:db:08:69:2f:af:9d:0a:ad:ba:58:
                    a9:8e:17:53:1c:6e:a9:a2:85:ca:5d:28:c5:4b:d1:
                    0d:8a:d0:46:ad:e6:ec:ff:d4:24:03:f4:a2:22:aa:
                    53:5c:ff:16:31:a5:15:8d:d6:08:27:01:7c:c0:d2:
                    36:15:63:c4:29:0a:17:6c:d1:ff:74:6d:f0:38:9b:
                    97:b3:62:76:82:ee:a4:32:1b:13:cb:f4:2a:bc:ea:
                    ea:d7:9e:0b:83:65:a8:08:b5:43:45:17:3e:e8:f1:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:04:3D:B6:BD:9C:AA:2A:29:B9:F8:49:06:91:A8:1F:F0:AD:61:3C
            X509v3 Authority Key Identifier:
                keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:a8:2b:28:26:96:a6:27:4e:0b:a9:e3:03:ab:3e:74:76:
         ca:39:77:9d:e3:d0:3d:fc:66:f4:04:7a:1a:62:16:06:00:81:
         d2:5a:a2:e1:7c:86:35:54:8b:1f:ba:fe:6b:6e:21:ff:37:ad:
         04:62:c2:fc:83:55:f4:72:e9:3e:1b:19:ab:88:d1:8a:d8:10:
         3c:93:e0:b2:a1:ba:1a:c1:3f:24:5f:89:2a:74:34:67:34:fe:
         1b:47:09:43:e6:59:fa:5e:f1:06:af:9e:c1:a9:79:b4:ec:12:
         07:ce:90:f4:0c:4e:b4:0e:9f:95:89:61:34:4a:4a:1a:c1:60:
         25:21:35:10:09:37:03:0b:e4:b2:ac:ef:d1:fb:9a:24:a3:bc:
         df:22:59:4a:0e:9f:f0:c2:35:2c:ef:2b:68:78:5f:84:8e:5d:
         fd:41:52:93:72:3e:b3:0b:d9:58:ee:4d:2c:3f:7e:49:5c:32:
         e6:6f:85:62:cd:27:a0:aa:8b:1d:ff:30:6c:7a:cd:ce:00:82:
         b6:f0:31:7a:a9:98:16:15:bb:f2:64:5a:eb:5a:de:0f:5e:fe:
         52:1f:b2:bf:01:36:8a:53:e9:7d:a4:30:06:fc:2f:36:9f:fc:
         ad:1e:e9:b7:4c:b1:c4:85:0e:dc:b1:3d:df:da:43:c0:4c:29:
         e3:63:f3:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyfPoqCVAEMyor+RmtddwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0M2JmOTA4MDhhZTdlY2EwNjNmNzQ2YThmMWQ4ODg2NTcz
NGM4YTMwHhcNMjYwODE0MTUwMDMwWhcNMjYwODE1MTUwMDMwWjAzMTEwLwYDVQQD
EyhiNTA0M2RiNmJkOWNhYTJhMjliOWY4NDkwNjkxYTgxZmYwYWQ2MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCStdP00YTzYeuR1RERd5OOszcuj
NE7JkfhOhb1JHM03bxcqz+dY4nb0dG6qswjairn0xoQgtSTpFe4dV0JreiojPJdg
6hhGJzgQyVjr4umrhALxdmVeKg3Lb4cH+frjfDii0fdAHlzJGMWW47kXtabsZ5sJ
WXdr95xQIfV6U85hFhSgl3NhMxMGkaBVUtuzK0YqIA/wbMrfpNsIaS+vnQqtulip
jhdTHG6pooXKXSjFS9ENitBGrebs/9QkA/SiIqpTXP8WMaUVjdYIJwF8wNI2FWPE
KQoXbNH/dG3wOJuXs2J2gu6kMhsTy/QqvOrq154Lg2WoCLVDRRc+6PHkGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUEPba9nKoqKbn4SQaRqB/wrWE8MB8GA1UdIwQY
MBaAFPQ7+QgIrn7KBj90ao8diIZXNMijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAt
Mzg5MTk1YzRmMDdiLzEvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAtMzg5MTk1YzRmMDdi
LzEvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnT6oKygm
lqYnTgup4wOrPnR2yjl3nePQPfxm9AR6GmIWBgCB0lqi4XyGNVSLH7r+a24h/zet
BGLC/INV9HLpPhsZq4jRitgQPJPgsqG6GsE/JF+JKnQ0ZzT+G0cJQ+ZZ+l7xBq+e
wal5tOwSB86Q9AxOtA6flYlhNEpKGsFgJSE1EAk3Awvksqzv0fuaJKO83yJZSg6f
8MI1LO8raHhfhI5d/UFSk3I+swvZWO5NLD9+SVwy5m+FYs0noKqLHf8wbHrNzgCC
tvAxeqmYFhW78mRa61reD17+Uh+yvwE2ilPpfaQwBvwvNp/8rR7pt0yxxIUO3LE9
39pDwEwp42PzXQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:02 2026 by rpki-client