Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File:                     c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier:          JCeN+V8GkRfa47GK1+10Y/OKuBVoG5qb1vkC7ifDbSA=
Subject key identifier:   75:5E:5E:81:34:8C:E2:DD:6D:E8:BA:9A:7F:D1:95:10:AC:F5:25:98
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer:       /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial:       01A08CB23D4889012E8F40FD31331FBC803A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number:          0E8B
Signing time:             Thu 10 Sep 2026 19:01:26 +0000
Manifest this update:     Thu 10 Sep 2026 19:01:26 +0000
Manifest next update:     Fri 11 Sep 2026 19:01:26 +0000
Files and hashes:         1: 40EThboBSEVGFMmXd89FK4WaTNo.roa (hash: ohel7RKT+QSonvsuuV4gvqAOjnxAWjb8zzBfZRnvIeI=)
                          2: XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa (hash: NrqwSk7qLUhd2Ca65sK/JaxXop9TloKYfUN2lC/2ang=)
                          3: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: 871JTXi/OFWKI4gD6jFBdIXBNaAwcAf6nPaY5snyng8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b2:3d:48:89:01:2e:8f:40:fd:31:33:1f:bc:80:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
        Validity
            Not Before: Sep 10 19:01:26 2026 GMT
            Not After : Sep 11 19:01:26 2026 GMT
        Subject: CN=755e5e81348ce2dd6de8ba9a7fd19510acf52598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:04:d0:44:08:ad:b8:26:14:08:5b:75:34:
                    fb:9f:f8:40:b9:11:91:29:f5:2c:6c:a6:9f:42:15:
                    68:8d:6c:5b:93:12:2e:90:22:26:e7:ef:d1:4d:1a:
                    b2:55:fe:b3:22:b9:c7:07:3f:85:91:6b:cc:5d:24:
                    3b:33:c0:4b:6a:f2:25:e4:3f:0b:a3:a2:69:83:71:
                    86:1c:3b:50:9f:41:01:51:c7:aa:36:7d:11:86:e7:
                    7e:90:1f:fb:b7:0e:c2:41:18:60:dc:89:b8:be:33:
                    77:d3:b8:84:e2:b5:f5:8b:70:da:34:9d:aa:fe:e2:
                    1a:12:68:61:56:95:c7:3f:0d:de:0c:3f:df:ad:a8:
                    9d:1e:2a:76:c9:3f:56:3e:de:0f:32:b9:86:d6:c3:
                    0f:46:7f:a3:5b:43:12:d3:0b:04:74:65:b2:b4:09:
                    9a:21:a8:8a:2d:03:6b:b2:43:7b:e3:39:57:bd:0d:
                    49:38:2e:ea:1d:f6:a5:e7:66:9c:61:96:bc:e8:6b:
                    c2:22:f9:3e:b0:aa:ff:ff:be:6c:98:59:d2:58:bb:
                    33:5e:a9:ef:90:5a:e6:a6:8d:a3:16:9f:cc:b5:aa:
                    53:66:ca:99:d0:6d:03:cc:0a:53:3b:dd:84:56:68:
                    15:5a:cc:63:0e:ae:1d:07:d5:4f:9f:c9:2f:ea:02:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5E:5E:81:34:8C:E2:DD:6D:E8:BA:9A:7F:D1:95:10:AC:F5:25:98
            X509v3 Authority Key Identifier:
                keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:42:36:8e:19:e4:e5:e8:05:09:12:98:ee:11:46:78:70:82:
         bc:4f:31:f8:34:b1:76:b7:bb:b8:25:bd:22:34:ab:b3:86:9d:
         29:75:97:f0:c9:d2:5b:99:ea:62:11:c1:91:95:f5:28:29:4a:
         b3:11:b1:a8:66:cf:f0:6d:9d:8a:e6:15:fa:fc:80:af:ed:bd:
         31:9a:c9:a1:bf:cd:61:ba:93:40:ff:16:7c:a2:a4:b1:54:9c:
         45:65:9b:7d:d8:a2:d5:92:d8:37:d7:4f:72:1c:69:dc:b4:98:
         0e:f9:05:7f:8b:e3:b3:3f:6e:e6:63:32:c2:c8:7e:00:f2:6e:
         c0:36:3d:8a:d8:15:59:d6:fd:7f:9d:2a:6f:10:1b:59:d9:6f:
         4b:b9:27:11:04:db:62:89:a0:0a:cf:49:a1:26:12:9f:5d:32:
         07:a0:c0:3a:bb:aa:f0:24:56:51:b5:3e:5a:dd:49:4a:a2:56:
         60:6a:8f:3c:12:67:13:9f:dd:44:3c:24:42:41:ce:18:c2:41:
         29:0f:55:56:cd:29:3f:77:08:1d:1a:37:b9:37:b4:29:e3:a7:
         0c:97:37:d6:4b:fc:c6:17:97:32:69:f3:b7:55:06:68:bb:1e:
         ff:60:e3:e7:8f:a4:ae:b4:08:8f:bf:2e:bb:d1:86:8b:e4:66:
         0e:31:fe:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMsj1IiQEuj0D9MTMfvIA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmY0YjFjYmVhZjlkZDc1ZDNiNWVmM2VlOWE3NWQ1Nzk5
ZjcyODAwHhcNMjYwOTEwMTkwMTI2WhcNMjYwOTExMTkwMTI2WjAzMTEwLwYDVQQD
Eyg3NTVlNWU4MTM0OGNlMmRkNmRlOGJhOWE3ZmQxOTUxMGFjZjUyNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvgE0EQIrbgmFAhbdTT7n/hAuRGR
KfUsbKafQhVojWxbkxIukCIm5+/RTRqyVf6zIrnHBz+FkWvMXSQ7M8BLavIl5D8L
o6Jpg3GGHDtQn0EBUceqNn0Rhud+kB/7tw7CQRhg3Im4vjN307iE4rX1i3DaNJ2q
/uIaEmhhVpXHPw3eDD/fraidHip2yT9WPt4PMrmG1sMPRn+jW0MS0wsEdGWytAma
IaiKLQNrskN74zlXvQ1JOC7qHfal52acYZa86GvCIvk+sKr//75smFnSWLszXqnv
kFrmpo2jFp/MtapTZsqZ0G0DzApTO92EVmgVWsxjDq4dB9VPn8kv6gKNdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVeXoE0jOLdbei6mn/RlRCs9SWYMB8GA1UdIwQY
MBaAFHP/Sxy+r53XXTte8+6addV5n3KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUt
NDM3YTM0NmIyMmY3LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUtNDM3YTM0NmIyMmY3
LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUI2jhnk
5egFCRKY7hFGeHCCvE8x+DSxdre7uCW9IjSrs4adKXWX8MnSW5nqYhHBkZX1KClK
sxGxqGbP8G2diuYV+vyAr+29MZrJob/NYbqTQP8WfKKksVScRWWbfdii1ZLYN9dP
chxp3LSYDvkFf4vjsz9u5mMywsh+APJuwDY9itgVWdb9f50qbxAbWdlvS7knEQTb
YomgCs9JoSYSn10yB6DAOruq8CRWUbU+Wt1JSqJWYGqPPBJnE5/dRDwkQkHOGMJB
KQ9VVs0pP3cIHRo3uTe0KeOnDJc31kv8xheXMmnzt1UGaLse/2Dj54+krrQIj78u
u9GGi+RmDjH+xw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:08:20 2026 by rpki-client