Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File:                     iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier:          aKToav0M6Fa1ht1HHTwhhIcuTRUD9xi+SaOceEhMBTU=
Subject key identifier:   F2:9C:6E:BA:F9:8E:26:AB:CA:28:74:FC:B7:EE:8D:45:CD:38:1F:84
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer:       /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial:       01A08A1F5137FBBB24F0F4CDE5207409D43B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number:          10FF
Signing time:             Thu 10 Sep 2026 07:01:43 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:43 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:43 +0000
Files and hashes:         1: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: mav80zDGwCwaJz31HAHzdTI/uLslA93NKo9N16VNr1A=)
                          2: jzAkYuzy0NM24DLxJG0nO2NEr2U.roa (hash: wNAWGH60q5oOPI5elDbJUeO2WCg0rkQsTkxovsLZh+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1f:51:37:fb:bb:24:f0:f4:cd:e5:20:74:09:d4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
        Validity
            Not Before: Sep 10 07:01:43 2026 GMT
            Not After : Sep 11 07:01:43 2026 GMT
        Subject: CN=f29c6ebaf98e26abca2874fcb7ee8d45cd381f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:d5:6e:8a:1e:0c:a4:f1:d2:a4:c3:8f:79:
                    05:c3:dc:19:01:26:46:d1:03:34:88:53:5f:20:5c:
                    26:f8:6e:be:64:6c:a9:88:44:f5:b8:dd:40:fb:dc:
                    48:8b:eb:52:b3:10:cd:00:d0:e7:5c:47:e3:84:91:
                    2d:13:83:fe:84:52:43:4a:41:56:63:4b:9c:fd:0b:
                    22:b3:25:79:ea:50:38:77:bf:e9:7c:25:2b:d9:1d:
                    7a:3f:b8:e8:ee:fa:09:e5:8a:00:43:29:71:bd:6b:
                    9a:37:0e:b5:6f:25:04:be:00:66:32:11:f2:7c:fd:
                    64:c4:2f:af:67:ce:dc:9d:7f:50:98:51:bc:9e:db:
                    da:da:bc:29:c4:7b:af:08:77:63:c3:61:fa:be:6d:
                    c8:e6:42:82:d2:6f:4c:e3:0d:a6:6b:a4:07:08:02:
                    69:44:7b:23:4f:a7:75:6c:99:39:69:4d:77:70:31:
                    94:97:2a:8d:d0:f9:82:90:3b:03:32:ce:26:b9:84:
                    b8:c1:c1:9a:8a:93:40:cf:35:c0:64:eb:d3:8d:46:
                    f5:f5:69:7f:b3:b2:31:89:7b:8a:40:24:17:b8:60:
                    ea:35:0f:15:0c:6a:47:98:25:24:5e:23:0b:57:d9:
                    67:ab:95:38:af:b2:c2:91:cb:e9:92:c1:f9:5d:c2:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9C:6E:BA:F9:8E:26:AB:CA:28:74:FC:B7:EE:8D:45:CD:38:1F:84
            X509v3 Authority Key Identifier:
                keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:fe:24:5d:4e:49:59:27:05:99:f5:f3:87:86:4a:fe:95:
         a7:7d:44:c4:c6:7f:c6:c9:ca:46:85:ac:5e:df:35:f3:db:f4:
         35:e1:ae:a8:90:c7:20:80:f6:ce:82:68:5d:35:d8:ec:bb:a0:
         a9:79:05:4b:20:94:5f:a0:09:85:e8:94:b0:b0:95:f1:a3:8b:
         75:fa:08:d2:e1:83:5b:ed:e6:06:fd:f2:dc:53:90:97:45:ba:
         16:69:d6:8c:58:ec:da:f3:d0:d5:29:b4:e1:6d:4a:dd:29:d5:
         15:24:da:d4:e5:c4:df:e7:4b:93:68:34:e6:4f:27:3f:bd:ea:
         91:0d:e4:e4:d1:f2:66:c1:74:81:76:6d:7a:65:b5:7c:87:79:
         0c:26:c6:60:31:9e:b5:64:b0:eb:dc:d9:36:df:d3:0f:9b:b6:
         da:7a:42:08:67:05:c6:6e:d5:b4:a8:5f:05:c5:07:39:3c:db:
         cd:ae:a8:8e:14:2d:c2:0a:2b:6e:c4:15:13:5e:84:90:ba:ea:
         cd:d3:97:0f:63:6b:b1:e5:bc:5a:6f:1f:13:c6:4c:4c:90:b3:
         fe:35:4c:68:91:43:8c:7b:4c:7e:42:4a:e3:7c:77:e3:b6:53:
         1b:69:e2:89:ef:ce:b2:85:11:c8:43:42:d7:31:f9:19:a4:a8:
         d4:03:e3:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKH1E3+7sk8PTN5SB0CdQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl
YTMwYzAwHhcNMjYwOTEwMDcwMTQzWhcNMjYwOTExMDcwMTQzWjAzMTEwLwYDVQQD
EyhmMjljNmViYWY5OGUyNmFiY2EyODc0ZmNiN2VlOGQ0NWNkMzgxZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMvVbooeDKTx0qTDj3kFw9wZASZG
0QM0iFNfIFwm+G6+ZGypiET1uN1A+9xIi+tSsxDNANDnXEfjhJEtE4P+hFJDSkFW
Y0uc/QsisyV56lA4d7/pfCUr2R16P7jo7voJ5YoAQylxvWuaNw61byUEvgBmMhHy
fP1kxC+vZ87cnX9QmFG8ntva2rwpxHuvCHdjw2H6vm3I5kKC0m9M4w2ma6QHCAJp
RHsjT6d1bJk5aU13cDGUlyqN0PmCkDsDMs4muYS4wcGaipNAzzXAZOvTjUb19Wl/
s7IxiXuKQCQXuGDqNQ8VDGpHmCUkXiMLV9lnq5U4r7LCkcvpksH5XcL8WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKcbrr5jiaryih0/LfujUXNOB+EMB8GA1UdIwQY
MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt
ZjllMmMyZmRiZjM1LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1
LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaf/+JF1O
SVknBZn184eGSv6Vp31ExMZ/xsnKRoWsXt8189v0NeGuqJDHIID2zoJoXTXY7Lug
qXkFSyCUX6AJheiUsLCV8aOLdfoI0uGDW+3mBv3y3FOQl0W6FmnWjFjs2vPQ1Sm0
4W1K3SnVFSTa1OXE3+dLk2g05k8nP73qkQ3k5NHyZsF0gXZtemW1fId5DCbGYDGe
tWSw69zZNt/TD5u22npCCGcFxm7VtKhfBcUHOTzbza6ojhQtwgorbsQVE16EkLrq
zdOXD2NrseW8Wm8fE8ZMTJCz/jVMaJFDjHtMfkJK43x347ZTG2niie/OsoURyENC
1zH5GaSo1APjKQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:02:05 2026 by rpki-client