Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
File:                     937JWiBMO1gCWeG0L6kOF8b0NdY.mft (raw, json)
Hash identifier:          vEjboQ+TLlNQI6FQc8iXerNN4O+XGJ2wof+q6nB13Yo=
Subject key identifier:   B8:94:F4:75:78:61:BC:2A:24:04:9A:9D:B5:02:90:0A:BE:FC:FF:F7
Authority key identifier: F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6
Certificate issuer:       /CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
Certificate serial:       01A171011F209BD318DB4651395555C83ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
Manifest number:          01CE
Signing time:             Sun 25 Oct 2026 03:01:01 +0000
Manifest this update:     Sun 25 Oct 2026 03:01:01 +0000
Manifest next update:     Mon 26 Oct 2026 03:01:01 +0000
Files and hashes:         1: 937JWiBMO1gCWeG0L6kOF8b0NdY.crl (hash: 1mh2leASC/pWBxKMmIqXcCRR3R6KLOIi118W/mcoPCI=)
                          2: XqcpVCeX0-cvU-SqoEfBG7M0CYI.roa (hash: Um6sqZHxrN2dTouXpZfutLZlTxwDMybqIAW6glre92s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:71:01:1f:20:9b:d3:18:db:46:51:39:55:55:c8:3a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
        Validity
            Not Before: Oct 25 03:01:01 2026 GMT
            Not After : Oct 26 03:01:01 2026 GMT
        Subject: CN=b894f4757861bc2a24049a9db502900abefcfff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:f3:a3:67:bd:ac:71:0e:2c:b7:e5:42:7a:
                    54:ee:6b:d1:bd:c5:1a:2f:8d:1e:fa:26:95:9b:ed:
                    57:6e:07:fc:ef:a6:bb:b9:6d:db:8b:fc:41:72:62:
                    1c:84:9f:64:02:90:57:12:02:c7:e1:3a:e8:2d:af:
                    ff:e6:13:87:f5:46:e3:b5:dd:01:84:ab:89:fc:91:
                    b1:fa:73:06:68:a5:e2:1e:6e:2a:67:52:95:7f:b7:
                    59:34:65:20:f6:2a:23:d2:d8:80:78:01:2f:2b:cb:
                    7d:66:51:df:13:b4:7d:5c:de:17:cb:d6:2f:42:ca:
                    79:df:af:5a:4d:9e:af:ae:ea:2d:25:0b:05:e7:84:
                    fb:7f:e2:dc:94:b7:25:50:90:dc:cb:18:c0:d8:a5:
                    67:10:45:af:b8:2c:e9:98:6e:6d:0a:b0:00:d4:8b:
                    9c:dc:ec:42:8d:09:02:87:a5:b6:cc:88:30:52:79:
                    6a:44:f4:6f:35:38:8b:77:60:89:63:e5:65:a2:df:
                    e3:43:f2:5d:27:bf:b8:49:df:3b:17:c4:8f:ce:f0:
                    62:5f:fc:1a:35:b2:c7:44:a5:86:24:d1:e0:f2:b9:
                    df:da:95:98:fb:42:a7:2f:d7:12:dd:15:df:4a:57:
                    64:f3:f5:89:ca:7d:82:b8:a5:d4:91:a9:c0:3a:2d:
                    e4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:94:F4:75:78:61:BC:2A:24:04:9A:9D:B5:02:90:0A:BE:FC:FF:F7
            X509v3 Authority Key Identifier:
                keyid:F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d6:19:98:46:e9:d1:75:88:83:98:48:8f:aa:76:a1:20:1a:
         cb:d4:d5:a6:69:16:3e:a8:e7:17:90:e1:7e:8f:11:30:64:4e:
         64:6b:f7:ca:ef:dc:9f:4b:fc:98:36:9c:53:46:71:32:f9:a2:
         8c:b9:c1:e5:be:d7:b5:ea:a9:e6:b1:56:c5:72:c9:c7:b0:de:
         5f:e6:8c:66:c1:46:37:54:a7:ed:c0:8c:c4:5e:7a:ef:64:be:
         0a:92:aa:3e:4c:2a:86:df:44:22:d5:88:b3:88:89:fb:81:83:
         26:f6:f9:91:1f:db:a1:29:60:b6:cb:70:90:e8:35:76:f8:40:
         65:2c:a4:3b:be:0f:a1:97:20:d6:6f:7a:2f:77:9d:6f:de:80:
         12:6e:d4:1b:74:96:ff:e9:e9:f7:e1:9f:5c:73:60:67:7e:66:
         5c:eb:f9:1d:3e:ff:ff:d8:7f:07:00:d2:51:4d:2d:ce:e2:82:
         44:b4:bf:bc:a2:5b:a7:db:04:f3:f2:68:6b:0f:61:0f:ec:7d:
         b0:37:ee:5b:42:14:f0:0b:bb:e6:b0:e3:19:2e:eb:37:82:6b:
         aa:f8:a8:21:25:cf:33:f5:a5:b1:9f:41:ff:16:76:56:0f:04:
         a1:97:5e:8a:59:df:c0:b2:1e:b0:ec:ef:9d:90:40:12:5c:3d:
         79:5b:f6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFxAR8gm9MY20ZROVVVyDrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3N2VjOTVhMjA0YzNiNTgwMjU5ZTFiNDJmYTkwZTE3YzZm
NDM1ZDYwHhcNMjYxMDI1MDMwMTAxWhcNMjYxMDI2MDMwMTAxWjAzMTEwLwYDVQQD
EyhiODk0ZjQ3NTc4NjFiYzJhMjQwNDlhOWRiNTAyOTAwYWJlZmNmZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Pzo2e9rHEOLLflQnpU7mvRvcUa
L40e+iaVm+1Xbgf876a7uW3bi/xBcmIchJ9kApBXEgLH4TroLa//5hOH9Ubjtd0B
hKuJ/JGx+nMGaKXiHm4qZ1KVf7dZNGUg9ioj0tiAeAEvK8t9ZlHfE7R9XN4Xy9Yv
Qsp5369aTZ6vruotJQsF54T7f+LclLclUJDcyxjA2KVnEEWvuCzpmG5tCrAA1Iuc
3OxCjQkCh6W2zIgwUnlqRPRvNTiLd2CJY+Vlot/jQ/JdJ7+4Sd87F8SPzvBiX/wa
NbLHRKWGJNHg8rnf2pWY+0KnL9cS3RXfSldk8/WJyn2CuKXUkanAOi3kdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiU9HV4YbwqJASanbUCkAq+/P/3MB8GA1UdIwQY
MBaAFPd+yVogTDtYAlnhtC+pDhfG9DXWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTM3SldpQk1PMWdDV2VHMEw2a09GOGIwTmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ZGE0ZTYtZWQwZS00Y2M2LTgwY2Et
ZTYwMzRlZGNjZjUyLzEvOTM3SldpQk1PMWdDV2VHMEw2a09GOGIwTmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85ZGE0ZTYtZWQwZS00Y2M2LTgwY2EtZTYwMzRlZGNjZjUy
LzEvOTM3SldpQk1PMWdDV2VHMEw2a09GOGIwTmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9YZmEbp
0XWIg5hIj6p2oSAay9TVpmkWPqjnF5Dhfo8RMGROZGv3yu/cn0v8mDacU0ZxMvmi
jLnB5b7Xteqp5rFWxXLJx7DeX+aMZsFGN1Sn7cCMxF5672S+CpKqPkwqht9EItWI
s4iJ+4GDJvb5kR/boSlgtstwkOg1dvhAZSykO74PoZcg1m96L3edb96AEm7UG3SW
/+np9+GfXHNgZ35mXOv5HT7//9h/BwDSUU0tzuKCRLS/vKJbp9sE8/Joaw9hD+x9
sDfuW0IU8Au75rDjGS7rN4JrqvioISXPM/WlsZ9B/xZ2Vg8EoZdeilnfwLIesOzv
nZBAElw9eVv2BA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 09:25:14 2026 by rpki-client