Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
File:                     cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json)
Hash identifier:          L1RxtvtR4zZk2M7+zP2yhxHJniD1QU6q7p3CxevVeb8=
Subject key identifier:   91:A3:AA:8F:E3:18:47:96:3C:9C:15:E9:2C:64:DE:59:F6:0A:CF:99
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Certificate issuer:       /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial:       01A08A55777B4C8F49B60AFCC54226C3F3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
Manifest number:          1A46
Signing time:             Thu 10 Sep 2026 08:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:51 +0000
Files and hashes:         1: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: Gg4GyiapurPDd3RQFVITIXayDiSPvNI1J0NWjcJIlKQ=)
                          2: fWrVWO3Qdl8cPmv42q3hMALhIj8.roa (hash: TQo5JavRn3eW6VS8sjnDE/2uLbkZQpycWjKQhd4KcM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:77:7b:4c:8f:49:b6:0a:fc:c5:42:26:c3:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
        Validity
            Not Before: Sep 10 08:00:51 2026 GMT
            Not After : Sep 11 08:00:51 2026 GMT
        Subject: CN=91a3aa8fe31847963c9c15e92c64de59f60acf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:3d:54:27:30:60:a6:d7:6c:30:d7:9f:47:
                    7a:82:ec:75:27:38:e1:a0:f1:83:99:8a:15:2c:a9:
                    c6:c7:6d:e2:58:eb:ae:03:09:7f:0b:7f:29:6e:e8:
                    00:11:0f:33:94:e6:fb:43:b6:87:0c:a6:33:22:00:
                    29:8b:1f:14:7f:fa:6f:3c:46:ea:c3:7c:e6:35:59:
                    d4:ac:63:ea:eb:09:ac:e3:53:23:c9:46:26:86:05:
                    d1:3a:f0:9a:5b:24:38:ec:ad:13:3d:17:e4:cf:8b:
                    be:45:a8:83:db:95:6e:83:69:9d:f7:33:ab:f4:8b:
                    f6:d8:94:ef:a3:08:d7:97:cf:94:20:60:e4:d3:b4:
                    58:13:72:dc:f1:f8:70:52:12:91:25:46:97:08:0b:
                    0a:1d:9a:16:6d:9e:ee:b4:92:a4:e0:15:15:0c:64:
                    d4:41:54:16:2d:12:21:35:d2:14:62:a7:3d:bd:ae:
                    d4:89:db:62:af:f7:59:ae:1b:1e:14:b1:d6:aa:fc:
                    cd:53:a1:a7:3a:2e:88:c6:49:4a:8e:b5:49:1d:52:
                    70:50:0d:0d:c2:f8:b3:3b:8c:84:d9:5e:78:91:1c:
                    fc:a9:01:55:a7:9e:8c:05:d7:f7:dc:19:32:ee:4d:
                    6f:5b:85:d4:35:a0:77:63:ed:52:01:43:e8:21:7e:
                    fc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A3:AA:8F:E3:18:47:96:3C:9C:15:E9:2C:64:DE:59:F6:0A:CF:99
            X509v3 Authority Key Identifier:
                keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f2:e0:b1:45:34:32:ae:c9:5e:76:97:6b:b6:14:17:8c:19:
         14:e2:37:db:22:66:fe:c2:af:67:14:27:18:71:61:f4:7b:7e:
         b4:b7:ac:2d:74:d4:8f:df:19:df:cf:23:4d:02:75:8e:8a:74:
         a7:31:a1:82:2f:4d:7f:4b:06:f9:6b:72:8a:8b:92:ef:0b:22:
         d4:72:67:ae:1f:47:2e:e8:87:85:c9:13:f0:fc:e1:99:c1:a1:
         55:40:64:32:6e:83:e1:f4:d7:7b:7b:e2:9c:1d:3b:bd:6a:59:
         8f:fc:36:cc:33:b9:13:cb:e3:b0:6a:fd:19:0c:56:da:7b:3f:
         c3:e2:f9:b8:99:00:15:d8:35:e4:30:3a:39:43:67:80:e5:8d:
         98:35:48:57:58:0c:ce:e0:a3:73:91:46:f0:93:96:03:14:25:
         25:56:b8:b9:82:9b:ea:0b:85:7a:cc:49:96:41:41:3b:19:f5:
         a7:5e:a9:13:01:ff:7d:5a:8c:36:36:2d:01:da:86:c1:a6:52:
         f1:b6:1b:e8:84:d8:5f:eb:73:e1:62:2b:8c:56:be:b5:1c:21:
         31:93:d9:4c:dc:f6:fe:87:36:96:00:f2:27:53:f6:65:bb:44:
         26:5d:4c:c1:68:39:d8:01:3a:62:bf:2a:57:96:3a:2c:9c:d1:
         98:51:af:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVXd7TI9Jtgr8xUImw/OgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTY4MjZjODYyODQ4OWRiMDQxZmU3OGMwOWVmMjhiNTQy
MWU0NWMwHhcNMjYwOTEwMDgwMDUxWhcNMjYwOTExMDgwMDUxWjAzMTEwLwYDVQQD
Eyg5MWEzYWE4ZmUzMTg0Nzk2M2M5YzE1ZTkyYzY0ZGU1OWY2MGFjZjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ89VCcwYKbXbDDXn0d6gux1Jzjh
oPGDmYoVLKnGx23iWOuuAwl/C38pbugAEQ8zlOb7Q7aHDKYzIgApix8Uf/pvPEbq
w3zmNVnUrGPq6wms41MjyUYmhgXROvCaWyQ47K0TPRfkz4u+RaiD25Vug2md9zOr
9Iv22JTvowjXl8+UIGDk07RYE3Lc8fhwUhKRJUaXCAsKHZoWbZ7utJKk4BUVDGTU
QVQWLRIhNdIUYqc9va7Uidtir/dZrhseFLHWqvzNU6GnOi6IxklKjrVJHVJwUA0N
wvizO4yE2V54kRz8qQFVp56MBdf33Bky7k1vW4XUNaB3Y+1SAUPoIX781wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGjqo/jGEeWPJwV6Sxk3ln2Cs+ZMB8GA1UdIwQY
MBaAFHLmgmyGKEidsEH+eMCe8otUIeRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEt
OTc1YWQwM2Q4OGU2LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEtOTc1YWQwM2Q4OGU2
LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfLgsUU0
Mq7JXnaXa7YUF4wZFOI32yJm/sKvZxQnGHFh9Ht+tLesLXTUj98Z388jTQJ1jop0
pzGhgi9Nf0sG+WtyiouS7wsi1HJnrh9HLuiHhckT8PzhmcGhVUBkMm6D4fTXe3vi
nB07vWpZj/w2zDO5E8vjsGr9GQxW2ns/w+L5uJkAFdg15DA6OUNngOWNmDVIV1gM
zuCjc5FG8JOWAxQlJVa4uYKb6guFesxJlkFBOxn1p16pEwH/fVqMNjYtAdqGwaZS
8bYb6ITYX+tz4WIrjFa+tRwhMZPZTNz2/oc2lgDyJ1P2ZbtEJl1MwWg52AE6Yr8q
V5Y6LJzRmFGviQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:19:05 2026 by rpki-client