Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
File:                     9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json)
Hash identifier:          eVuWchlUYib2lQe4fwuoE/4AiXQSlipRx3eLpkKsqRw=
Subject key identifier:   66:84:AA:A5:E6:B5:28:8E:AF:3F:E5:DE:BC:11:1C:8E:D4:9A:B3:D1
Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE
Certificate issuer:       /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
Certificate serial:       01A14D2B80948E163DE469BBE8704F8977C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
Manifest number:          0BB3
Signing time:             Sun 18 Oct 2026 04:00:58 +0000
Manifest this update:     Sun 18 Oct 2026 04:00:58 +0000
Manifest next update:     Mon 19 Oct 2026 04:00:58 +0000
Files and hashes:         1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: +IN5nM5P1smbiS97DJ8ni70UNaHlGv7hjn8R6r4a0eY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:2b:80:94:8e:16:3d:e4:69:bb:e8:70:4f:89:77:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
        Validity
            Not Before: Oct 18 04:00:58 2026 GMT
            Not After : Oct 19 04:00:58 2026 GMT
        Subject: CN=6684aaa5e6b5288eaf3fe5debc111c8ed49ab3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:66:1d:75:c5:c8:a4:d1:b9:d8:96:be:82:
                    e3:48:7f:74:5d:b2:16:ba:7c:19:c6:c6:c2:11:6a:
                    ed:f2:74:bd:f2:19:f4:e1:b4:48:de:d3:c9:ba:19:
                    7c:30:9e:54:b7:c3:77:74:a0:97:fc:3d:a2:9e:31:
                    6a:a2:aa:d7:65:66:1c:57:69:1a:96:b5:2f:17:08:
                    de:ad:37:c9:e2:f4:f9:fa:84:9a:d2:f6:7c:cc:3c:
                    79:7c:4a:c0:78:32:a7:38:f5:4a:1b:e5:e5:08:b1:
                    70:87:fe:dc:f2:3c:48:aa:ca:36:47:1f:c3:66:c0:
                    74:b1:9d:11:6b:9c:90:89:7b:40:a4:3b:bb:af:b5:
                    29:10:e7:e8:a9:a9:b9:4b:50:18:82:c8:ed:ce:34:
                    b1:ef:8f:92:32:a5:dc:75:59:44:84:16:93:32:8e:
                    3b:31:cb:b7:c8:93:30:69:65:dd:26:c1:2a:10:fa:
                    46:0a:99:5a:a8:ae:db:85:11:6a:51:27:5e:f3:fd:
                    0a:f7:fd:d0:80:fa:19:15:b0:d5:a1:53:c9:4f:2e:
                    f3:7f:a4:73:d1:2b:15:f8:0c:a4:2a:0e:98:53:e4:
                    b4:60:be:5f:f5:0b:67:77:e4:45:42:45:95:40:6b:
                    34:48:ed:71:8e:98:8b:2a:ec:9a:69:78:4b:38:74:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:84:AA:A5:E6:B5:28:8E:AF:3F:E5:DE:BC:11:1C:8E:D4:9A:B3:D1
            X509v3 Authority Key Identifier:
                keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:65:23:c7:dd:3d:41:8e:20:0f:31:07:dd:e2:fb:69:48:dd:
         d9:32:6e:b1:af:b4:7e:9d:c2:91:fa:ff:75:a1:d8:40:fd:9a:
         b1:25:31:e7:24:6f:00:0f:a6:be:a8:c0:62:7d:1a:cf:1c:30:
         a0:9b:62:37:67:7f:5c:6b:bc:d8:60:9c:2a:be:f8:76:54:59:
         2c:55:70:b3:92:3e:68:79:31:a7:2a:8d:3f:bc:5b:11:32:ce:
         83:b7:21:00:96:06:96:82:9a:90:48:2a:ae:e1:95:c0:69:9c:
         78:2e:7a:b6:6d:a5:b4:be:26:cc:66:60:3c:7b:14:e0:81:8a:
         a3:a5:a6:c6:5f:d5:76:12:6f:d4:cc:a3:b9:1a:0a:f1:ff:b7:
         72:6c:17:1b:85:6a:dd:ad:46:92:39:6d:f5:69:bc:6d:c8:17:
         aa:51:c2:71:fc:a1:c5:da:43:de:2f:5d:b6:2d:4e:33:6e:9e:
         98:f4:aa:20:e2:f3:49:fd:a8:e3:f7:99:c2:5f:9c:52:6e:94:
         4a:75:8f:58:b1:2d:ee:a4:13:4d:d1:de:fc:c3:26:6b:4c:5e:
         5f:39:09:33:6a:f0:44:03:e5:bc:b0:58:74:a0:c7:92:30:34:
         68:df:59:92:b7:da:63:aa:da:53:9f:cc:11:06:a8:e2:9b:c7:
         5d:d5:56:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFNK4CUjhY95Gm76HBPiXfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmE2MDA1NWNiMmJhNmZkYzlhNzVmZGY2MTkzNzFiMDA1
NTkzY2UwHhcNMjYxMDE4MDQwMDU4WhcNMjYxMDE5MDQwMDU4WjAzMTEwLwYDVQQD
Eyg2Njg0YWFhNWU2YjUyODhlYWYzZmU1ZGViYzExMWM4ZWQ0OWFiM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt9mHXXFyKTRudiWvoLjSH90XbIW
unwZxsbCEWrt8nS98hn04bRI3tPJuhl8MJ5Ut8N3dKCX/D2injFqoqrXZWYcV2ka
lrUvFwjerTfJ4vT5+oSa0vZ8zDx5fErAeDKnOPVKG+XlCLFwh/7c8jxIqso2Rx/D
ZsB0sZ0Ra5yQiXtApDu7r7UpEOfoqam5S1AYgsjtzjSx74+SMqXcdVlEhBaTMo47
Mcu3yJMwaWXdJsEqEPpGCplaqK7bhRFqUSde8/0K9/3QgPoZFbDVoVPJTy7zf6Rz
0SsV+AykKg6YU+S0YL5f9Qtnd+RFQkWVQGs0SO1xjpiLKuyaaXhLOHSFqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaEqqXmtSiOrz/l3rwRHI7UmrPRMB8GA1UdIwQY
MBaAFPa6YAVcsrpv3Jp1/fYZNxsAVZPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYt
NGY5ZDk4OGJkMWQzLzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYtNGY5ZDk4OGJkMWQz
LzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmUjx909
QY4gDzEH3eL7aUjd2TJusa+0fp3Ckfr/daHYQP2asSUx5yRvAA+mvqjAYn0azxww
oJtiN2d/XGu82GCcKr74dlRZLFVws5I+aHkxpyqNP7xbETLOg7chAJYGloKakEgq
ruGVwGmceC56tm2ltL4mzGZgPHsU4IGKo6Wmxl/VdhJv1MyjuRoK8f+3cmwXG4Vq
3a1Gkjlt9Wm8bcgXqlHCcfyhxdpD3i9dti1OM26emPSqIOLzSf2o4/eZwl+cUm6U
SnWPWLEt7qQTTdHe/MMma0xeXzkJM2rwRAPlvLBYdKDHkjA0aN9ZkrfaY6raU5/M
EQao4pvHXdVWlg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:34:20 2026 by rpki-client