Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
File:                     9R2ExrZtJSOMstRz3oU5PLI8CNM.mft (raw, json)
Hash identifier:          dC0d4jlXFcPt2FH9pGNHghyJKg0StbSnZMS6EzVtKVs=
Subject key identifier:   FC:6D:D4:70:CA:3F:B2:E0:30:90:D0:A4:58:6B:5F:98:96:EC:16:7C
Authority key identifier: F5:1D:84:C6:B6:6D:25:23:8C:B2:D4:73:DE:85:39:3C:B2:3C:08:D3
Certificate issuer:       /CN=f51d84c6b66d25238cb2d473de85393cb23c08d3
Certificate serial:       01A1254272877F5B64DCD4DA9A1A94F4637E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
Manifest number:          EF
Signing time:             Sat 10 Oct 2026 10:01:13 +0000
Manifest this update:     Sat 10 Oct 2026 10:01:13 +0000
Manifest next update:     Sun 11 Oct 2026 10:01:13 +0000
Files and hashes:         1: 9R2ExrZtJSOMstRz3oU5PLI8CNM.crl (hash: sLCuhJ9hAxH+FuCGCKR+vgPVofbfr1UxsXL5BqzAKzU=)
                          2: gQt5rO11iazVIlm1HaoS1XjTomo.roa (hash: TYTsgTz3jwRNWm/bjIscWI7r1p2LFoVROym+8x52XLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:42:72:87:7f:5b:64:dc:d4:da:9a:1a:94:f4:63:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51d84c6b66d25238cb2d473de85393cb23c08d3
        Validity
            Not Before: Oct 10 10:01:13 2026 GMT
            Not After : Oct 11 10:01:13 2026 GMT
        Subject: CN=fc6dd470ca3fb2e03090d0a4586b5f9896ec167c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:2d:09:da:b7:ce:7b:30:32:3a:9e:d1:37:
                    65:07:1b:07:5e:8a:5d:cd:d7:24:76:8f:9d:4c:c4:
                    75:d8:51:16:a7:25:cd:d7:8b:38:d7:1f:45:f2:11:
                    90:da:42:1b:fa:04:3d:11:af:c3:80:6f:dc:28:bf:
                    87:5b:d8:4c:d6:fc:da:4f:81:0b:46:b9:94:9f:4a:
                    a7:1e:e2:d9:de:24:a8:36:8c:61:18:17:c7:09:7f:
                    54:2d:b1:ea:e1:87:d2:ce:26:ac:d6:14:32:9c:78:
                    56:25:10:b3:a8:a7:55:38:c0:e8:6a:ed:7d:da:1e:
                    a5:5a:7d:34:dc:ec:ea:3e:28:db:69:c1:40:3c:1d:
                    b0:02:ff:30:12:9f:19:b0:05:da:2c:a3:fb:e2:b3:
                    37:6a:a6:e2:c5:d3:6a:dc:d0:c7:ec:38:75:39:cf:
                    e7:06:d1:0b:85:5a:ef:63:3e:f7:1d:94:2a:bc:53:
                    92:64:ac:5d:fc:26:43:ae:9c:4d:43:68:76:90:2f:
                    a4:51:c2:cf:ba:7d:5f:64:50:52:44:94:2a:00:dc:
                    80:9f:12:3d:30:c1:c8:ec:fc:58:9c:e3:5c:45:ee:
                    8b:0c:01:62:b0:19:7b:e0:ad:d2:07:3b:53:5e:c6:
                    db:e3:b3:14:59:0c:f7:c8:b2:bb:95:92:4f:fd:83:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:D4:70:CA:3F:B2:E0:30:90:D0:A4:58:6B:5F:98:96:EC:16:7C
            X509v3 Authority Key Identifier:
                keyid:F5:1D:84:C6:B6:6D:25:23:8C:B2:D4:73:DE:85:39:3C:B2:3C:08:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9R2ExrZtJSOMstRz3oU5PLI8CNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1164d6-39e2-49fa-bec7-8ff1592ebc43/1/9R2ExrZtJSOMstRz3oU5PLI8CNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:47:11:15:3a:46:c6:9a:ef:dd:b2:63:9b:80:be:e9:95:
         7f:84:4b:6c:fe:c8:87:50:bb:b8:83:89:4c:31:38:0b:f4:79:
         3c:d1:b6:59:dc:aa:0b:49:d7:5d:28:86:47:2a:46:95:01:97:
         3d:66:2c:b5:6b:ab:a1:de:65:6b:c2:d9:a6:be:04:21:e1:26:
         dc:21:69:f7:b1:a1:d9:d6:af:4c:cc:e8:9f:db:ec:73:5c:a8:
         5b:7e:4b:0f:9e:e6:fe:1c:7a:dc:69:ae:db:dd:c2:15:90:25:
         82:8f:53:58:28:7a:40:9b:d0:cc:fe:9e:6c:41:05:95:2f:63:
         36:9b:aa:8a:32:70:5e:b9:56:b8:fd:c1:30:91:22:61:4d:19:
         a4:72:48:b1:b3:08:2e:f5:e3:55:2e:12:b3:af:8d:89:ea:ab:
         d1:14:19:02:0e:c3:31:6b:49:87:c7:cd:88:c6:8b:2d:8c:78:
         0b:21:13:3e:45:d0:fd:7e:6b:87:c4:2c:2e:74:51:83:c2:98:
         38:5f:5d:21:74:7b:a9:26:73:67:3c:d9:29:55:4b:d1:24:75:
         3f:3a:a1:66:1a:a0:d8:65:e2:41:77:8c:bf:67:b3:53:da:b5:
         88:a5:4c:ee:bf:92:41:fe:42:39:39:84:73:4d:95:c2:a4:1b:
         3f:80:bb:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElQnKHf1tk3NTamhqU9GN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MWQ4NGM2YjY2ZDI1MjM4Y2IyZDQ3M2RlODUzOTNjYjIz
YzA4ZDMwHhcNMjYxMDEwMTAwMTEzWhcNMjYxMDExMTAwMTEzWjAzMTEwLwYDVQQD
EyhmYzZkZDQ3MGNhM2ZiMmUwMzA5MGQwYTQ1ODZiNWY5ODk2ZWMxNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5MtCdq3znswMjqe0TdlBxsHXopd
zdckdo+dTMR12FEWpyXN14s41x9F8hGQ2kIb+gQ9Ea/DgG/cKL+HW9hM1vzaT4EL
RrmUn0qnHuLZ3iSoNoxhGBfHCX9ULbHq4YfSzias1hQynHhWJRCzqKdVOMDoau19
2h6lWn003OzqPijbacFAPB2wAv8wEp8ZsAXaLKP74rM3aqbixdNq3NDH7Dh1Oc/n
BtELhVrvYz73HZQqvFOSZKxd/CZDrpxNQ2h2kC+kUcLPun1fZFBSRJQqANyAnxI9
MMHI7PxYnONcRe6LDAFisBl74K3SBztTXsbb47MUWQz3yLK7lZJP/YOTXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxt1HDKP7LgMJDQpFhrX5iW7BZ8MB8GA1UdIwQY
MBaAFPUdhMa2bSUjjLLUc96FOTyyPAjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVIyRXhyWnRKU09Nc3RSejNvVTVQTEk4Q05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xMTY0ZDYtMzllMi00OWZhLWJlYzct
OGZmMTU5MmViYzQzLzEvOVIyRXhyWnRKU09Nc3RSejNvVTVQTEk4Q05NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8xMTY0ZDYtMzllMi00OWZhLWJlYzctOGZmMTU5MmViYzQz
LzEvOVIyRXhyWnRKU09Nc3RSejNvVTVQTEk4Q05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6lHERU6
Rsaa792yY5uAvumVf4RLbP7Ih1C7uIOJTDE4C/R5PNG2WdyqC0nXXSiGRypGlQGX
PWYstWurod5la8LZpr4EIeEm3CFp97Gh2davTMzon9vsc1yoW35LD57m/hx63Gmu
293CFZAlgo9TWCh6QJvQzP6ebEEFlS9jNpuqijJwXrlWuP3BMJEiYU0ZpHJIsbMI
LvXjVS4Ss6+Nieqr0RQZAg7DMWtJh8fNiMaLLYx4CyETPkXQ/X5rh8QsLnRRg8KY
OF9dIXR7qSZzZzzZKVVL0SR1PzqhZhqg2GXiQXeMv2ezU9q1iKVM7r+SQf5COTmE
c02VwqQbP4C7ag==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:04:53 2026 by rpki-client