Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File:                     m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier:          u0V1HC8zV3He9lnppdF/+OU/iQ5xCzuvxWQLvSzZ8B8=
Subject key identifier:   3E:E7:81:F0:E4:DE:E5:EA:32:AE:48:96:D7:20:DD:70:EC:28:04:D0
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer:       /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial:       01A1938D0A5F42B75A87E83888ADFD020882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number:          0266
Signing time:             Sat 31 Oct 2026 20:00:56 +0000
Manifest this update:     Sat 31 Oct 2026 20:00:56 +0000
Manifest next update:     Sun 01 Nov 2026 20:00:56 +0000
Files and hashes:         1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: Iyc01+VhjTKagPfm8aiWWmW9GaaMaO6+5o3nHx3/cpU=)
                          2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:8d:0a:5f:42:b7:5a:87:e8:38:88:ad:fd:02:08:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
        Validity
            Not Before: Oct 31 20:00:56 2026 GMT
            Not After : Nov  1 20:00:56 2026 GMT
        Subject: CN=3ee781f0e4dee5ea32ae4896d720dd70ec2804d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:72:43:bf:52:dc:19:47:89:60:31:d9:33:
                    d8:eb:78:51:fd:d8:c3:4f:20:90:ca:fe:56:03:9b:
                    a1:7e:d4:09:1a:f5:05:32:d2:47:c0:8d:23:47:ae:
                    3b:66:91:91:87:57:3b:a9:a5:e0:ed:9c:5d:c7:39:
                    b3:dc:6b:31:52:ed:fa:ff:ed:5f:34:e8:60:ae:a1:
                    11:97:01:11:2f:8c:ab:8f:f5:ee:9c:2e:bd:87:f9:
                    fd:59:95:79:be:da:15:e5:d4:cd:11:e6:b9:8c:38:
                    da:00:1a:b6:98:a3:5c:19:42:f0:eb:eb:36:98:a5:
                    02:f9:f4:ee:f0:ac:30:04:de:67:c5:f7:28:0b:71:
                    2e:f4:d8:59:7f:99:6a:67:a1:2a:38:da:1b:79:97:
                    0a:2f:f2:21:7b:91:f4:69:3c:8b:31:0e:d9:6c:75:
                    f3:5b:7f:8e:0d:33:62:03:5a:a0:90:85:12:e7:38:
                    5b:de:c6:c7:73:de:89:13:3b:e2:05:31:b0:2e:cf:
                    38:e6:5f:3c:36:24:61:1e:56:8d:4a:f9:f7:09:4d:
                    c3:58:c7:6f:b5:99:24:dc:2c:90:15:52:3a:f8:e1:
                    15:50:db:f0:b0:71:3c:aa:dd:cd:02:89:32:93:24:
                    a7:94:3b:90:86:e1:cf:63:11:b9:a0:29:d5:40:a0:
                    ff:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:81:F0:E4:DE:E5:EA:32:AE:48:96:D7:20:DD:70:EC:28:04:D0
            X509v3 Authority Key Identifier:
                keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:13:59:fc:e9:ca:c0:71:dc:6d:85:2d:d9:2a:a6:c2:cf:6c:
         59:f7:ea:62:2a:7b:bc:e4:ef:0a:f9:f1:15:27:8d:e8:22:f9:
         cc:a3:bd:f6:39:0a:c1:90:94:d5:a7:11:26:9d:16:6b:18:79:
         fb:ec:82:b4:27:45:46:d8:c4:06:3c:f2:98:7d:78:fe:c6:e8:
         36:0a:39:3c:81:1d:33:ed:e3:6d:c6:4d:1d:38:f3:10:d2:68:
         a2:51:27:20:68:36:a2:8c:c8:69:51:75:e3:bc:98:67:ce:aa:
         fc:10:d7:86:90:aa:43:c3:fd:91:ca:e1:3e:dd:aa:85:96:ac:
         4b:3d:61:ba:01:08:ce:bf:b7:98:bf:a4:e6:87:74:2d:ef:6c:
         5a:06:f1:47:e5:ec:ae:74:b3:ed:6d:a2:96:2f:28:82:6e:f9:
         a2:c7:4c:d5:6e:d8:df:dc:6b:78:38:ac:7f:20:63:4c:a9:e4:
         a2:8c:bf:f6:18:3b:6b:ad:87:40:cc:bd:cb:8b:ed:df:fe:0a:
         a2:c0:4e:57:13:48:fc:ba:46:01:f4:b9:fa:7a:2e:7e:95:bd:
         5f:f2:63:5d:9e:a1:ef:d6:36:f9:12:84:ed:7c:38:0c:46:f3:
         17:06:95:c7:d2:b9:b1:ed:96:2a:85:d4:19:7c:c9:0c:fd:09:
         46:d9:ab:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGTjQpfQrdah+g4iK39AgiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZDJjZGJiZjVjYzJkODNhOWQ4ZjEzMTgxMTI3MWYwMzJk
MjE0NTAwHhcNMjYxMDMxMjAwMDU2WhcNMjYxMTAxMjAwMDU2WjAzMTEwLwYDVQQD
EygzZWU3ODFmMGU0ZGVlNWVhMzJhZTQ4OTZkNzIwZGQ3MGVjMjgwNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNRyQ79S3BlHiWAx2TPY63hR/djD
TyCQyv5WA5uhftQJGvUFMtJHwI0jR647ZpGRh1c7qaXg7Zxdxzmz3GsxUu36/+1f
NOhgrqERlwERL4yrj/XunC69h/n9WZV5vtoV5dTNEea5jDjaABq2mKNcGULw6+s2
mKUC+fTu8KwwBN5nxfcoC3Eu9NhZf5lqZ6EqONobeZcKL/Ihe5H0aTyLMQ7ZbHXz
W3+ODTNiA1qgkIUS5zhb3sbHc96JEzviBTGwLs845l88NiRhHlaNSvn3CU3DWMdv
tZkk3CyQFVI6+OEVUNvwsHE8qt3NAokykySnlDuQhuHPYxG5oCnVQKD/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7ngfDk3uXqMq5Iltcg3XDsKATQMB8GA1UdIwQY
MBaAFJvSzbv1zC2DqdjxMYEScfAy0hRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlMTnVfWE1MWU9wMlBFeGdSSng4RExTRkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iY2NmMTctNzJhZC00MzM2LWI1NWQt
Yjc1NDdhYjg3MzJlLzEvbTlMTnVfWE1MWU9wMlBFeGdSSng4RExTRkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iY2NmMTctNzJhZC00MzM2LWI1NWQtYjc1NDdhYjg3MzJl
LzEvbTlMTnVfWE1MWU9wMlBFeGdSSng4RExTRkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxNZ/OnK
wHHcbYUt2Sqmws9sWffqYip7vOTvCvnxFSeN6CL5zKO99jkKwZCU1acRJp0Waxh5
++yCtCdFRtjEBjzymH14/sboNgo5PIEdM+3jbcZNHTjzENJoolEnIGg2oozIaVF1
47yYZ86q/BDXhpCqQ8P9kcrhPt2qhZasSz1hugEIzr+3mL+k5od0Le9sWgbxR+Xs
rnSz7W2ili8ogm75osdM1W7Y39xreDisfyBjTKnkooy/9hg7a62HQMy9y4vt3/4K
osBOVxNI/LpGAfS5+noufpW9X/JjXZ6h79Y2+RKE7Xw4DEbzFwaVx9K5se2WKoXU
GXzJDP0JRtmrhg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:35 2026 by rpki-client