Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File:                     9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier:          zSkaKEbPIyo86362bqaQusSfr79apEpiBW8myinOQEU=
Subject key identifier:   96:78:79:84:1F:CC:E6:FE:1E:57:2A:5D:5E:BB:46:D9:B0:99:B3:D1
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer:       /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial:       01A1163CE53C7F709275F7CFE819BCE529BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number:          0A64
Signing time:             Wed 07 Oct 2026 12:00:51 +0000
Manifest this update:     Wed 07 Oct 2026 12:00:51 +0000
Manifest next update:     Thu 08 Oct 2026 12:00:51 +0000
Files and hashes:         1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: EAtCiJIdmA9pD9lulxvgIt4QtBl5F3SSksA0M8PSYoE=)
                          2: U0VlaKKNtdOTOqK2MVcrObf1kHo.roa (hash: aj9GxjWDAWuJEL63II9rLgS5knljvCRB2AV58y//rLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:3c:e5:3c:7f:70:92:75:f7:cf:e8:19:bc:e5:29:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
        Validity
            Not Before: Oct  7 12:00:51 2026 GMT
            Not After : Oct  8 12:00:51 2026 GMT
        Subject: CN=967879841fcce6fe1e572a5d5ebb46d9b099b3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:16:cd:0d:b1:39:08:0f:ad:c1:ec:98:22:
                    f3:34:3f:bd:a4:50:41:8a:f1:91:c0:3c:55:15:ce:
                    d1:f1:2d:6f:ae:ef:64:51:c5:ba:77:7b:06:b2:01:
                    1f:7f:27:af:ae:8f:3a:6c:e8:ff:cf:3e:7b:bc:40:
                    e9:30:e6:a7:42:fd:a7:24:7f:47:66:ec:a6:e7:f0:
                    d8:0e:af:aa:e9:db:84:57:e7:38:2e:48:d4:39:5b:
                    30:78:a1:0d:27:7e:b0:9f:be:17:69:09:cb:7d:28:
                    8d:87:a6:3b:ff:2e:5d:c7:73:83:b2:c8:23:73:58:
                    5d:9e:63:79:7e:70:c4:fd:d4:4e:6e:a0:b8:fd:d0:
                    24:b5:0a:dc:e7:8a:63:c4:f6:1e:1d:1e:09:c7:c9:
                    0c:7c:0c:56:96:30:7c:a7:49:dc:86:96:ae:59:0e:
                    ec:de:7d:88:99:f3:06:93:13:b2:3a:f4:ef:14:8c:
                    d5:f9:f7:d6:19:cf:86:d6:31:0b:d1:8c:7b:2f:69:
                    51:a3:af:b9:a7:35:6f:93:98:ac:44:ba:ee:7d:2e:
                    cc:c3:f9:51:97:c7:34:f1:41:f0:f5:5c:7d:ab:3e:
                    9a:27:b2:ca:92:02:d9:31:fa:1c:90:a5:ad:c9:5c:
                    20:c9:55:f1:37:8a:1a:a1:cb:c4:a3:d4:ec:00:ac:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:78:79:84:1F:CC:E6:FE:1E:57:2A:5D:5E:BB:46:D9:B0:99:B3:D1
            X509v3 Authority Key Identifier:
                keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:84:bc:0a:15:0e:de:48:30:b5:6b:31:46:cc:73:ca:57:a5:
         31:72:91:9e:53:14:ac:22:ea:a6:34:df:dd:e5:37:b3:b4:f2:
         70:9d:13:21:13:8c:51:62:e5:1d:57:4a:7a:dc:5c:7a:99:23:
         99:2a:0e:d5:4b:e9:9d:1b:15:c4:90:79:c7:3e:2c:44:bf:9c:
         4d:da:ea:1a:d1:2c:6e:f7:8b:25:85:7a:1c:e2:b5:db:45:bc:
         cb:33:73:57:09:4a:d4:ed:d5:45:19:3f:99:ee:5c:d9:a7:9e:
         04:73:00:ab:2e:bf:fe:e0:8e:b4:fd:d7:1e:82:b8:17:94:3c:
         58:42:43:5b:79:64:84:46:0e:5a:4d:af:c1:a9:fe:09:23:18:
         24:7f:b2:66:fe:80:d5:68:ea:4f:03:14:5c:a6:1e:dd:f0:f7:
         91:e0:3b:2d:b2:6d:54:37:3a:a6:92:9a:e7:64:9c:ee:19:07:
         97:29:2b:66:f0:1b:9e:df:37:8e:6b:24:ab:9a:74:66:44:85:
         df:a1:53:b0:70:23:02:0e:2a:d7:f3:d9:e6:d1:c1:67:8e:20:
         8e:1a:b6:cf:af:46:7b:5b:23:9b:a9:a2:86:c4:06:4e:89:53:
         ec:24:39:96:8d:72:fd:11:07:8b:1b:cf:14:a8:85:7a:07:d6:
         14:6b:2f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEWPOU8f3CSdffP6Bm85Sm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MmU5YzkxNDZlZDdiYzU4Yzg1Y2RhYjZlYjg1OGU0MjI4
NmVlZjQwHhcNMjYxMDA3MTIwMDUxWhcNMjYxMDA4MTIwMDUxWjAzMTEwLwYDVQQD
Eyg5Njc4Nzk4NDFmY2NlNmZlMWU1NzJhNWQ1ZWJiNDZkOWIwOTliM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslUWzQ2xOQgPrcHsmCLzND+9pFBB
ivGRwDxVFc7R8S1vru9kUcW6d3sGsgEffyevro86bOj/zz57vEDpMOanQv2nJH9H
Zuym5/DYDq+q6duEV+c4LkjUOVsweKENJ36wn74XaQnLfSiNh6Y7/y5dx3ODssgj
c1hdnmN5fnDE/dRObqC4/dAktQrc54pjxPYeHR4Jx8kMfAxWljB8p0nchpauWQ7s
3n2ImfMGkxOyOvTvFIzV+ffWGc+G1jEL0Yx7L2lRo6+5pzVvk5isRLrufS7Mw/lR
l8c08UHw9Vx9qz6aJ7LKkgLZMfockKWtyVwgyVXxN4oaocvEo9TsAKyrxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ4eYQfzOb+HlcqXV67RtmwmbPRMB8GA1UdIwQY
MBaAFPcunJFG7XvFjIXNq264WOQihu70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2Et
ZDUxNmYwZTE0ODdiLzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2EtZDUxNmYwZTE0ODdi
LzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4S8ChUO
3kgwtWsxRsxzylelMXKRnlMUrCLqpjTf3eU3s7TycJ0TIROMUWLlHVdKetxcepkj
mSoO1UvpnRsVxJB5xz4sRL+cTdrqGtEsbveLJYV6HOK120W8yzNzVwlK1O3VRRk/
me5c2aeeBHMAqy6//uCOtP3XHoK4F5Q8WEJDW3lkhEYOWk2vwan+CSMYJH+yZv6A
1WjqTwMUXKYe3fD3keA7LbJtVDc6ppKa52Sc7hkHlykrZvAbnt83jmskq5p0ZkSF
36FTsHAjAg4q1/PZ5tHBZ44gjhq2z69Ge1sjm6mihsQGTolT7CQ5lo1y/REHixvP
FKiFegfWFGsvlw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:23:08 2026 by rpki-client