Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File:                     m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier:          7eYrgiAaNc/GtIPzVKEXauJGCpQir43VBrDUAQSs7eY=
Subject key identifier:   18:E3:8B:A7:89:1B:B7:46:AD:28:40:9E:3A:70:9D:0A:E2:6F:F4:4B
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer:       /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial:       019FA33C0B8D45D122B1F2CDE6C482993BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number:          0165
Signing time:             Mon 27 Jul 2026 11:00:48 +0000
Manifest this update:     Mon 27 Jul 2026 11:00:48 +0000
Manifest next update:     Tue 28 Jul 2026 11:00:48 +0000
Files and hashes:         1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: qyI51K/abxPJG2EkkbLSofuuFHC2/tGAwpd7tOjvhLQ=)
                          2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:0b:8d:45:d1:22:b1:f2:cd:e6:c4:82:99:3b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
        Validity
            Not Before: Jul 27 11:00:48 2026 GMT
            Not After : Jul 28 11:00:48 2026 GMT
        Subject: CN=18e38ba7891bb746ad28409e3a709d0ae26ff44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:f0:09:65:ed:fd:2f:01:cc:e0:52:aa:48:
                    47:dc:fb:c5:0e:13:61:2c:37:b1:af:ac:4d:25:af:
                    6c:af:85:d0:d1:c2:36:1d:15:11:e2:34:59:76:91:
                    ce:f0:e8:6f:ea:98:f5:b5:9e:fe:4f:5a:b1:a5:01:
                    b0:74:53:bf:52:14:2b:33:6e:d4:30:09:b1:6c:08:
                    bb:e7:f6:82:25:a7:b5:7f:86:5a:cf:6e:46:49:bc:
                    ed:92:62:65:05:6a:a0:ed:ee:29:b4:83:01:dc:d9:
                    3b:e4:75:0c:8e:0a:da:94:c7:87:48:7f:77:6b:5a:
                    6c:87:5d:b3:82:63:01:5c:09:82:a7:8f:65:f9:5e:
                    8e:aa:49:87:ff:db:7e:59:0b:5b:d2:6a:5c:f6:23:
                    3b:f5:23:d9:ee:c1:b6:b7:44:d1:d4:d9:65:b1:bd:
                    9f:1d:3c:9d:64:91:74:c2:d0:b3:3b:fa:9b:a8:33:
                    82:85:d8:7e:d5:1f:87:d9:4d:d9:53:e1:33:0e:75:
                    39:4f:6a:62:4e:5c:28:b9:f3:67:36:51:56:f2:83:
                    2f:5c:91:02:34:2f:ac:fe:ed:39:d8:36:59:d5:67:
                    8c:c0:73:a5:ed:90:7a:95:72:e7:51:94:7c:17:df:
                    12:49:12:b7:23:21:e9:e5:da:ad:a1:03:5a:f6:92:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E3:8B:A7:89:1B:B7:46:AD:28:40:9E:3A:70:9D:0A:E2:6F:F4:4B
            X509v3 Authority Key Identifier:
                keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:7a:2d:dc:f6:f1:52:5e:2e:5f:ac:c3:1a:af:b8:64:59:
         e1:82:f5:35:ff:99:fb:c1:d4:24:60:b9:ef:c4:5e:62:ee:1d:
         d7:01:86:e3:bc:8a:ce:44:a1:8f:ad:18:cf:70:bb:2b:9b:de:
         b7:2a:68:67:f7:a1:fd:76:3a:ed:8d:33:14:1a:f1:b2:ce:2e:
         30:d1:33:03:f7:7e:3d:84:55:a3:97:68:25:91:43:24:fa:88:
         62:ed:f9:ca:23:ce:23:cd:23:92:27:19:05:57:62:d8:f5:fa:
         96:62:b1:9c:bd:34:a0:3e:50:b0:e4:8e:22:39:30:52:55:8d:
         3f:41:80:60:42:f9:cb:6d:82:f7:96:e9:47:a6:2c:db:4b:a4:
         87:2f:d3:ae:88:25:a9:99:40:48:b9:5e:f6:e3:f3:20:2b:69:
         d9:d6:d9:63:41:d4:05:03:f7:26:18:de:5b:45:2e:66:74:07:
         f8:37:45:42:93:77:ed:f9:69:22:6b:5f:ba:47:9b:8f:f8:f9:
         2f:0b:3e:ad:d7:d2:30:fa:25:34:66:1a:d7:e1:be:4e:57:5b:
         d4:bc:1e:ac:41:af:28:f2:e3:97:0a:39:06:a3:9a:fa:87:4e:
         52:7e:12:0d:96:cf:ee:53:a4:93:41:5e:64:69:85:3c:f4:bd:
         cf:8a:f1:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPAuNRdEisfLN5sSCmTuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZDJjZGJiZjVjYzJkODNhOWQ4ZjEzMTgxMTI3MWYwMzJk
MjE0NTAwHhcNMjYwNzI3MTEwMDQ4WhcNMjYwNzI4MTEwMDQ4WjAzMTEwLwYDVQQD
EygxOGUzOGJhNzg5MWJiNzQ2YWQyODQwOWUzYTcwOWQwYWUyNmZmNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6jwCWXt/S8BzOBSqkhH3PvFDhNh
LDexr6xNJa9sr4XQ0cI2HRUR4jRZdpHO8Ohv6pj1tZ7+T1qxpQGwdFO/UhQrM27U
MAmxbAi75/aCJae1f4Zaz25GSbztkmJlBWqg7e4ptIMB3Nk75HUMjgralMeHSH93
a1psh12zgmMBXAmCp49l+V6OqkmH/9t+WQtb0mpc9iM79SPZ7sG2t0TR1Nllsb2f
HTydZJF0wtCzO/qbqDOChdh+1R+H2U3ZU+EzDnU5T2piTlwoufNnNlFW8oMvXJEC
NC+s/u052DZZ1WeMwHOl7ZB6lXLnUZR8F98SSRK3IyHp5dqtoQNa9pJuAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjji6eJG7dGrShAnjpwnQrib/RLMB8GA1UdIwQY
MBaAFJvSzbv1zC2DqdjxMYEScfAy0hRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlMTnVfWE1MWU9wMlBFeGdSSng4RExTRkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iY2NmMTctNzJhZC00MzM2LWI1NWQt
Yjc1NDdhYjg3MzJlLzEvbTlMTnVfWE1MWU9wMlBFeGdSSng4RExTRkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iY2NmMTctNzJhZC00MzM2LWI1NWQtYjc1NDdhYjg3MzJl
LzEvbTlMTnVfWE1MWU9wMlBFeGdSSng4RExTRkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKR6Ldz2
8VJeLl+swxqvuGRZ4YL1Nf+Z+8HUJGC578ReYu4d1wGG47yKzkShj60Yz3C7K5ve
typoZ/eh/XY67Y0zFBrxss4uMNEzA/d+PYRVo5doJZFDJPqIYu35yiPOI80jkicZ
BVdi2PX6lmKxnL00oD5QsOSOIjkwUlWNP0GAYEL5y22C95bpR6Ys20ukhy/Trogl
qZlASLle9uPzICtp2dbZY0HUBQP3JhjeW0UuZnQH+DdFQpN37flpImtfukebj/j5
Lws+rdfSMPolNGYa1+G+Tldb1LwerEGvKPLjlwo5BqOa+odOUn4SDZbP7lOkk0Fe
ZGmFPPS9z4rxRg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:38 2026 by rpki-client