Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File:                     9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier:          YbVMpoJx7VoPa+XZDW9Wt4AfchIUHR3GlwOu1VDoqR0=
Subject key identifier:   8F:EE:ED:02:FD:9A:A6:29:E0:36:57:B9:09:6B:44:F5:56:B0:72:96
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer:       /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial:       01A140F0E1AC68D1322A9B8193F9C5AF03B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number:          1AAC
Signing time:             Thu 15 Oct 2026 19:01:30 +0000
Manifest this update:     Thu 15 Oct 2026 19:01:30 +0000
Manifest next update:     Fri 16 Oct 2026 19:01:30 +0000
Files and hashes:         1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: lqq6dRPDzl6pr/falhS4zzchy/bad0AlNmlvEOWz27U=)
                          2: F_LtpihnOZSFHJv85nIVJ4V102M.roa (hash: 8yvnxuLRYXxGLDUJznrlW7WBOZGiJ5tUpgMx642UXWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:f0:e1:ac:68:d1:32:2a:9b:81:93:f9:c5:af:03:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
        Validity
            Not Before: Oct 15 19:01:30 2026 GMT
            Not After : Oct 16 19:01:30 2026 GMT
        Subject: CN=8feeed02fd9aa629e03657b9096b44f556b07296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:d2:1e:13:23:c3:3a:56:59:ce:47:ae:26:
                    47:d1:30:3f:ae:6b:f9:37:f7:ab:c9:c8:61:5b:56:
                    34:49:a7:ac:d8:79:b8:d2:c5:e3:8e:9b:07:9a:41:
                    56:90:6a:83:db:bf:1c:69:de:7a:01:3d:61:e5:52:
                    d2:a8:a1:38:84:35:bc:b7:3b:33:e7:86:68:12:99:
                    e1:9b:ee:00:aa:bf:76:9c:b9:f3:d8:2b:84:5d:2a:
                    05:6e:ca:32:56:e8:aa:3d:7c:8c:f7:ed:d8:32:6f:
                    0d:eb:1b:c8:5b:aa:cd:85:d3:f8:0c:56:a7:51:fb:
                    08:c5:a7:4f:32:8a:35:49:7b:80:ba:16:78:8a:b6:
                    a3:12:57:51:ae:74:1c:c1:00:34:19:d3:d2:c7:44:
                    df:42:cc:9d:44:44:19:f1:46:58:74:05:8a:ec:04:
                    14:4d:9e:bd:d2:26:3c:83:23:33:cc:55:8d:4a:23:
                    98:fa:64:19:d8:5c:15:b4:1f:53:fd:55:3c:41:92:
                    40:37:ab:ce:9f:47:2c:06:31:35:74:c5:0f:9f:4d:
                    6f:44:2b:93:48:4b:c1:1d:30:84:18:58:9a:97:df:
                    ea:37:59:c7:e2:10:5c:6d:63:30:ac:8c:b8:4e:4c:
                    5e:87:7f:26:69:48:be:fa:39:c7:5c:33:9b:20:7c:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EE:ED:02:FD:9A:A6:29:E0:36:57:B9:09:6B:44:F5:56:B0:72:96
            X509v3 Authority Key Identifier:
                keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:ab:a9:64:7a:bb:a0:57:d7:cd:64:f2:0c:11:ec:07:22:
         8d:86:18:d6:bc:6c:38:92:a0:20:40:2b:bd:b7:f0:67:96:b7:
         c4:40:55:03:1e:94:53:e4:8b:fe:76:82:38:48:d5:a5:af:cd:
         1a:c0:6f:40:5d:1a:ff:77:c4:6b:c8:45:d5:e2:13:69:1d:b9:
         f7:ac:16:eb:e0:c5:22:4c:82:21:be:34:5e:b8:da:a1:72:05:
         85:a2:53:eb:c5:ff:ac:cd:55:25:36:1e:bb:c8:14:66:67:69:
         c1:7a:3b:05:71:d1:81:5c:57:b0:fc:1b:b6:c8:16:b3:b2:16:
         21:c4:9f:a9:7f:e8:6b:2a:d3:5a:0b:97:06:de:f1:b8:4c:1f:
         b8:e3:7d:32:81:ca:4b:e2:ed:1e:39:ed:1e:c9:7d:22:bb:d3:
         97:34:71:f4:14:aa:9d:12:33:97:2e:0c:be:23:74:9e:a5:0b:
         65:3f:23:f5:f5:0e:48:23:5e:0f:d0:5c:6b:93:7c:e8:6d:b8:
         d2:4c:f4:34:62:42:75:3f:94:ef:64:11:88:55:d8:9a:7d:3f:
         8b:b9:62:4b:1b:84:44:7a:74:3c:f8:9e:cf:0e:30:a5:2a:fa:
         d1:8a:82:76:cf:a5:a7:a6:8c:bc:6d:6a:6a:72:a2:c1:fc:2d:
         fc:ac:48:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFA8OGsaNEyKpuBk/nFrwOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTA5MmFmZmFmOWI1NDg0ZTAwOTk5YWE3ZjFjZWYxYWM3
YjQwOTMwHhcNMjYxMDE1MTkwMTMwWhcNMjYxMDE2MTkwMTMwWjAzMTEwLwYDVQQD
Eyg4ZmVlZWQwMmZkOWFhNjI5ZTAzNjU3YjkwOTZiNDRmNTU2YjA3Mjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MDSHhMjwzpWWc5HriZH0TA/rmv5
N/erychhW1Y0Saes2Hm40sXjjpsHmkFWkGqD278cad56AT1h5VLSqKE4hDW8tzsz
54ZoEpnhm+4Aqr92nLnz2CuEXSoFbsoyVuiqPXyM9+3YMm8N6xvIW6rNhdP4DFan
UfsIxadPMoo1SXuAuhZ4irajEldRrnQcwQA0GdPSx0TfQsydREQZ8UZYdAWK7AQU
TZ690iY8gyMzzFWNSiOY+mQZ2FwVtB9T/VU8QZJAN6vOn0csBjE1dMUPn01vRCuT
SEvBHTCEGFial9/qN1nH4hBcbWMwrIy4Tkxeh38maUi++jnHXDObIHwMuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/u7QL9mqYp4DZXuQlrRPVWsHKWMB8GA1UdIwQY
MBaAFPfgkq/6+bVITgCZmqfxzvGse0CTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2Et
MTBmZjllZTJhOGMyLzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2EtMTBmZjllZTJhOGMy
LzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmGrqWR6
u6BX181k8gwR7AcijYYY1rxsOJKgIEArvbfwZ5a3xEBVAx6UU+SL/naCOEjVpa/N
GsBvQF0a/3fEa8hF1eITaR2596wW6+DFIkyCIb40XrjaoXIFhaJT68X/rM1VJTYe
u8gUZmdpwXo7BXHRgVxXsPwbtsgWs7IWIcSfqX/oayrTWguXBt7xuEwfuON9MoHK
S+LtHjntHsl9IrvTlzRx9BSqnRIzly4MviN0nqULZT8j9fUOSCNeD9Bca5N86G24
0kz0NGJCdT+U72QRiFXYmn0/i7liSxuERHp0PPiezw4wpSr60YqCds+lp6aMvG1q
anKiwfwt/KxItw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:17 2026 by rpki-client