Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File:                     9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier:          qFOmoLopcgbb46hSb/Zj+m7Gu2qFgPpgjoee5me3Bl8=
Subject key identifier:   39:F7:A6:12:55:54:E9:A9:CF:F9:EF:07:16:36:9F:CA:1D:00:5A:69
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer:       /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial:       01A1035BBBC4BC73724C5015B0D2F6076C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number:          1AC8
Signing time:             Sat 03 Oct 2026 20:01:45 +0000
Manifest this update:     Sat 03 Oct 2026 20:01:45 +0000
Manifest next update:     Sun 04 Oct 2026 20:01:45 +0000
Files and hashes:         1: 2DdvN_iUNqmYcEBq-ZCFq6-CizQ.roa (hash: LqeaKg62lpX0ChDrc0EwkogKrlU38oKoyGWR5W51V/g=)
                          2: 2gp85iNI9hOHVMoD-AVmhaVIeZQ.roa (hash: axs71u0qY3GNU78vZgfYXYLH532ZZvavOcB1PlEaAyE=)
                          3: 5V_xONqzwKma1n0RRaZThBrg5gE.roa (hash: z1TwNh3QakcyBUbCZgGTjXYrrx8YDgv/xgtP0R9TjOI=)
                          4: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: ZvjHE7jiLt1MtJ0KbLW1AfHLiS04EkWJux/lrCCzl0s=)
                          5: KNUqUjiO0GQDMZR0nypcKHQwH6Q.roa (hash: CI7Nq8u7E5NWS27w9iH1vij5BsKG9VbX1nniJRBNiCs=)
                          6: Sr8taJwNmM6IUIh68pFCremKsP0.roa (hash: 8hNtlSLs+hgRIJnDDfJh2MIcy6zUGifsMLAL3xiKJ1I=)
                          7: cJSB3QS13j7tmP3z_rxKXgO4j60.roa (hash: 9yWuPk6TuuusjVGKVizh7DPc+s1P+89Z5o314zB49FI=)
                          8: cjKWJKYLxMRewBF7z0FNBjnCuvM.roa (hash: IjqcM04dnIEtir8p7pRUf/m/0B11Jc+Z2/p2+zXrCTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:5b:bb:c4:bc:73:72:4c:50:15:b0:d2:f6:07:6c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
        Validity
            Not Before: Oct  3 20:01:45 2026 GMT
            Not After : Oct  4 20:01:45 2026 GMT
        Subject: CN=39f7a6125554e9a9cff9ef0716369fca1d005a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8e:c4:1a:ec:a1:68:74:6d:6a:f1:73:b7:9a:
                    99:3d:73:ea:11:d0:28:1a:85:5c:2f:60:a6:ca:72:
                    87:a9:79:2c:2e:cd:b3:76:a2:c5:bd:1b:11:d4:62:
                    81:a0:b8:c8:dc:f0:e5:98:63:c4:2c:a8:5b:16:94:
                    05:c7:4e:3c:22:6d:cd:ed:dc:c4:34:7a:3e:db:f3:
                    ce:2e:19:73:72:de:b4:18:4f:b0:a1:05:1a:91:ae:
                    7d:53:f0:22:a7:d5:e3:e0:7c:42:4e:9a:1d:42:78:
                    d7:2b:d1:b2:ce:09:61:ba:a2:66:8e:33:57:a6:60:
                    68:4f:dd:16:b9:f8:c6:5a:0d:33:d5:73:ab:ad:e2:
                    e5:a0:12:1a:fe:9e:27:d1:ae:5e:7a:bc:e4:ca:2a:
                    cb:57:eb:a8:d9:3a:92:04:37:55:1d:e0:1c:01:7f:
                    18:1a:cc:9f:bb:01:52:cd:aa:4d:78:4f:a5:c7:be:
                    81:8d:f6:c7:f8:82:98:92:73:7e:f7:ff:e5:fb:b5:
                    8b:a9:21:bd:9d:7d:e6:f7:24:eb:2a:4f:32:2a:27:
                    fc:41:91:25:2c:a6:fd:07:ca:d7:47:17:20:ed:fb:
                    ca:c4:c5:6d:58:08:6b:fe:a4:e9:7e:ae:ef:5d:f2:
                    92:5b:a4:b1:96:77:10:e8:c6:86:34:4f:bc:02:e1:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F7:A6:12:55:54:E9:A9:CF:F9:EF:07:16:36:9F:CA:1D:00:5A:69
            X509v3 Authority Key Identifier:
                keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:13:cb:e3:67:06:07:7b:d8:93:55:5b:2f:b5:cb:17:7f:
         6c:d5:2d:8b:27:15:e6:f5:9c:0c:3d:a5:5a:d1:07:79:6c:a4:
         74:f1:78:71:84:98:47:a6:1c:af:97:c2:b9:40:e6:46:81:b6:
         29:ee:23:7b:c2:9e:c8:64:8b:98:b4:1d:04:71:5b:40:9c:50:
         75:07:0d:dd:4d:a8:49:57:19:a5:0a:df:d5:c7:98:78:0d:20:
         05:25:07:a9:ab:88:ec:65:9b:0e:65:41:ad:48:a5:15:1b:ca:
         2d:77:0b:9e:8e:e2:94:b5:01:98:cb:9c:9f:e1:ad:d1:24:c6:
         e9:ae:73:79:78:20:ae:a1:c7:35:8b:24:64:db:23:b1:03:4f:
         ee:25:98:a3:54:ac:3a:b4:a1:1e:a6:1e:b6:5b:1c:0e:6b:b3:
         1b:23:f2:11:b0:98:b7:fe:d4:ff:cf:ba:04:72:70:16:2e:84:
         2f:01:ba:77:ea:48:32:79:47:d5:28:a1:d0:61:61:f8:e1:21:
         82:e4:c4:f9:f6:8a:1d:b7:9a:51:08:20:3f:e6:7e:ad:cc:1f:
         e7:23:98:68:57:39:eb:a6:ec:35:b8:78:11:8c:38:fe:76:51:
         ac:77:93:79:aa:33:b0:79:62:82:1b:6c:42:d0:c2:f9:d1:7b:
         0a:5d:9e:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDW7vEvHNyTFAVsNL2B2wIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1
MTY1MTUwHhcNMjYxMDAzMjAwMTQ1WhcNMjYxMDA0MjAwMTQ1WjAzMTEwLwYDVQQD
EygzOWY3YTYxMjU1NTRlOWE5Y2ZmOWVmMDcxNjM2OWZjYTFkMDA1YTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I7EGuyhaHRtavFzt5qZPXPqEdAo
GoVcL2CmynKHqXksLs2zdqLFvRsR1GKBoLjI3PDlmGPELKhbFpQFx048Im3N7dzE
NHo+2/POLhlzct60GE+woQUaka59U/Aip9Xj4HxCTpodQnjXK9GyzglhuqJmjjNX
pmBoT90WufjGWg0z1XOrreLloBIa/p4n0a5eerzkyirLV+uo2TqSBDdVHeAcAX8Y
GsyfuwFSzapNeE+lx76BjfbH+IKYknN+9//l+7WLqSG9nX3m9yTrKk8yKif8QZEl
LKb9B8rXRxcg7fvKxMVtWAhr/qTpfq7vXfKSW6SxlncQ6MaGNE+8AuFeCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn3phJVVOmpz/nvBxY2n8odAFppMB8GA1UdIwQY
MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt
NWZiZjlhMjliNmUxLzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx
LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmskTy+Nn
Bgd72JNVWy+1yxd/bNUtiycV5vWcDD2lWtEHeWykdPF4cYSYR6Ycr5fCuUDmRoG2
Ke4je8KeyGSLmLQdBHFbQJxQdQcN3U2oSVcZpQrf1ceYeA0gBSUHqauI7GWbDmVB
rUilFRvKLXcLno7ilLUBmMucn+Gt0STG6a5zeXggrqHHNYskZNsjsQNP7iWYo1Ss
OrShHqYetlscDmuzGyPyEbCYt/7U/8+6BHJwFi6ELwG6d+pIMnlH1Sih0GFh+OEh
guTE+faKHbeaUQggP+Z+rcwf5yOYaFc566bsNbh4EYw4/nZRrHeTeaozsHlights
QtDC+dF7Cl2eEA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:40:05 2026 by rpki-client