Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File:                     t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier:          37xNH1WtGDpgeI9u3Df5S8fBP52Nd39i1XxNkKBm1KA=
Subject key identifier:   EE:2B:03:C2:94:3D:8E:D0:67:74:4A:DA:4D:33:83:DE:AE:EA:74:0A
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer:       /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial:       01A13891FDD65AA20F8595A17C962AA147D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number:          1845
Signing time:             Wed 14 Oct 2026 04:00:54 +0000
Manifest this update:     Wed 14 Oct 2026 04:00:54 +0000
Manifest next update:     Thu 15 Oct 2026 04:00:54 +0000
Files and hashes:         1: QkD6kvbjOFF159SqIoxtVy6uYtw.roa (hash: moRNSt3cT3MEpll0Dp7Um5vSYqeXw33T13RgwrHAltU=)
                          2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: VdZnGMbgqQrGiotd6BuA/ws9iKIzfBpVID0veLmRdP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:91:fd:d6:5a:a2:0f:85:95:a1:7c:96:2a:a1:47:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
        Validity
            Not Before: Oct 14 04:00:54 2026 GMT
            Not After : Oct 15 04:00:54 2026 GMT
        Subject: CN=ee2b03c2943d8ed067744ada4d3383deaeea740a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:ef:3b:18:fb:0a:37:40:42:3e:cf:05:94:
                    aa:3e:b7:ee:21:f8:83:ec:a5:55:79:ff:a4:da:9c:
                    c1:ac:8c:64:d7:d1:8c:e1:ec:08:77:16:99:7e:d3:
                    23:0b:d1:7a:2b:a5:4d:8d:53:81:7f:f4:5f:98:a1:
                    2c:30:96:4e:6b:be:4f:67:95:ef:3f:0e:8b:93:df:
                    49:5f:24:aa:16:12:5c:c8:09:36:80:23:db:e2:3b:
                    17:1b:47:4a:fd:d4:2b:04:5d:32:a8:2f:6f:bc:72:
                    b4:4d:28:1e:c4:02:6d:24:f6:c9:a2:af:6e:47:67:
                    7f:eb:5a:38:16:8a:6f:d7:1b:3a:3b:ab:66:db:62:
                    bd:5d:cf:32:63:f3:02:3e:89:0d:36:b8:d4:24:3e:
                    00:e1:6c:ce:29:5b:e5:8c:12:59:b5:5f:a1:25:fc:
                    6f:bb:33:de:ad:bc:17:49:d3:4e:a8:79:51:de:f9:
                    28:fe:45:3a:ce:50:84:3d:a3:bd:3b:54:d2:7f:ff:
                    b4:c6:29:6a:c9:f4:b4:5e:77:9b:1b:2c:b5:b5:2a:
                    88:b1:07:0a:57:59:5d:9f:a0:f3:15:02:eb:0a:98:
                    9c:32:a0:f2:fd:37:a8:ac:be:a9:cb:dc:b0:a5:fb:
                    e2:f5:dd:28:25:6b:7d:1c:c3:6b:dd:c7:30:20:db:
                    d3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2B:03:C2:94:3D:8E:D0:67:74:4A:DA:4D:33:83:DE:AE:EA:74:0A
            X509v3 Authority Key Identifier:
                keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c9:47:fa:32:88:ed:27:f8:c6:fb:84:5f:0d:c8:b8:de:c3:
         29:f4:d2:b4:d6:e7:b7:ef:45:ba:d8:b3:18:7c:da:8e:55:ae:
         28:b8:33:7a:5c:e0:b1:25:b2:4a:ef:d0:89:60:29:29:5b:1a:
         fc:f5:0a:7d:d2:a3:ad:06:7a:64:a1:1b:08:57:31:fd:65:95:
         b1:08:85:2d:84:0c:42:19:2a:bb:06:2c:c2:7e:32:66:dd:81:
         62:17:68:86:98:19:89:54:1d:79:ac:96:c5:76:d5:e4:ab:60:
         ff:94:1a:9f:96:3d:2d:27:e7:9b:93:8d:45:07:32:54:53:9b:
         05:7c:e3:78:02:07:8b:ac:1c:2a:2f:2f:bb:68:81:0f:27:2b:
         d6:45:8a:f6:ae:bd:cc:b6:3d:5c:a7:07:c4:e9:73:87:bf:0d:
         04:b0:b1:e2:2a:9b:2d:72:89:e8:60:34:cf:39:f5:85:53:4c:
         9f:02:da:41:74:26:1f:15:74:2a:37:d3:ce:76:e5:10:c0:6b:
         d5:40:dc:18:b4:9a:59:88:e1:51:cc:07:fa:52:3e:b4:08:c9:
         95:e9:4d:3c:a0:47:9f:a5:2a:39:18:8c:ed:c3:9f:25:9b:4a:
         14:8e:e5:96:dd:49:d2:fc:aa:4c:23:da:e0:8a:91:3e:f4:a3:
         2a:f9:53:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4kf3WWqIPhZWhfJYqoUfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGY2M2ZkMGRjMTk3ZTUyYWQyNzIyNzZjNDBkM2VlNGJi
MWQ3OTkwHhcNMjYxMDE0MDQwMDU0WhcNMjYxMDE1MDQwMDU0WjAzMTEwLwYDVQQD
EyhlZTJiMDNjMjk0M2Q4ZWQwNjc3NDRhZGE0ZDMzODNkZWFlZWE3NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6nvOxj7CjdAQj7PBZSqPrfuIfiD
7KVVef+k2pzBrIxk19GM4ewIdxaZftMjC9F6K6VNjVOBf/RfmKEsMJZOa75PZ5Xv
Pw6Lk99JXySqFhJcyAk2gCPb4jsXG0dK/dQrBF0yqC9vvHK0TSgexAJtJPbJoq9u
R2d/61o4Fopv1xs6O6tm22K9Xc8yY/MCPokNNrjUJD4A4WzOKVvljBJZtV+hJfxv
uzPerbwXSdNOqHlR3vko/kU6zlCEPaO9O1TSf/+0xilqyfS0XnebGyy1tSqIsQcK
V1ldn6DzFQLrCpicMqDy/TeorL6py9ywpfvi9d0oJWt9HMNr3ccwINvTOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4rA8KUPY7QZ3RK2k0zg96u6nQKMB8GA1UdIwQY
MBaAFLdPY/0NwZflKtJyJ2xA0+5LsdeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYt
MWQyMmIwMmI5YjFiLzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYtMWQyMmIwMmI5YjFi
LzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFclH+jKI
7Sf4xvuEXw3IuN7DKfTStNbnt+9FutizGHzajlWuKLgzelzgsSWySu/QiWApKVsa
/PUKfdKjrQZ6ZKEbCFcx/WWVsQiFLYQMQhkquwYswn4yZt2BYhdohpgZiVQdeayW
xXbV5Ktg/5Qan5Y9LSfnm5ONRQcyVFObBXzjeAIHi6wcKi8vu2iBDycr1kWK9q69
zLY9XKcHxOlzh78NBLCx4iqbLXKJ6GA0zzn1hVNMnwLaQXQmHxV0KjfTznblEMBr
1UDcGLSaWYjhUcwH+lI+tAjJlelNPKBHn6UqORiM7cOfJZtKFI7llt1J0vyqTCPa
4IqRPvSjKvlTpg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 11:53:34 2026 by rpki-client