Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
File:                     V7u8R7HGflV76rDyxtGL8CbDBuA.mft (raw, json)
Hash identifier:          1XHOypgFn9Q4/6b/osqSBEhwNZ91kikIGqfiA4GVf8Q=
Subject key identifier:   EC:28:2E:F3:F7:A9:AE:61:0B:2A:C2:71:E3:9F:E3:0D:E4:66:88:5C
Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
Certificate issuer:       /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Certificate serial:       01A08AC3CE9E683A400D281BC31ADA8E49C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
Manifest number:          0A06
Signing time:             Thu 10 Sep 2026 10:01:23 +0000
Manifest this update:     Thu 10 Sep 2026 10:01:23 +0000
Manifest next update:     Fri 11 Sep 2026 10:01:23 +0000
Files and hashes:         1: V7u8R7HGflV76rDyxtGL8CbDBuA.crl (hash: StwOvy0HlmbcC6qiO8/KVdE29k5s7qj9Z72eYfx6y+k=)
                          2: ZgQVnt2sCJCW5WJtm6rkh6ZTXa0.roa (hash: AZk9Jwr5toaqA9609l05vDG4SlK9prtZxrMQmnM4Ybs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:ce:9e:68:3a:40:0d:28:1b:c3:1a:da:8e:49:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
        Validity
            Not Before: Sep 10 10:01:23 2026 GMT
            Not After : Sep 11 10:01:23 2026 GMT
        Subject: CN=ec282ef3f7a9ae610b2ac271e39fe30de466885c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:32:f4:7d:1b:a9:2d:e1:3f:8a:c9:57:9f:
                    80:c8:72:a2:e5:f0:72:8a:24:16:ab:b9:d0:05:18:
                    ac:31:ca:12:c5:8b:52:53:99:12:67:86:29:64:f4:
                    57:12:18:53:25:7d:87:94:bc:b3:29:21:d0:ce:3c:
                    b3:0b:b2:ef:37:8c:ca:3b:62:f1:0e:d2:be:37:88:
                    49:6a:45:ea:70:68:c5:39:21:eb:85:cd:8c:0f:61:
                    4d:2a:22:54:60:28:2f:b5:4d:91:bb:ab:f7:51:1a:
                    d0:32:8d:53:ea:db:82:4d:22:41:d1:93:d9:b1:85:
                    c7:e0:0d:f1:b4:4e:cd:a5:63:d6:bf:1b:26:cd:a2:
                    1d:7e:ae:cf:34:f8:a8:c9:00:8c:93:2b:11:9b:ca:
                    a5:01:3a:30:2d:fd:db:6d:51:b4:67:28:7c:7b:28:
                    6d:73:4f:e0:a7:3c:50:45:08:b0:1b:2c:db:7f:06:
                    f7:76:0c:4b:a6:22:8a:ba:e9:3b:f1:0b:e9:05:c0:
                    c7:eb:c4:19:13:36:17:97:ff:fd:71:f0:8e:1e:c2:
                    c2:5d:3a:ff:b5:4d:b2:b4:08:00:4a:c8:12:a0:9d:
                    5f:59:7f:48:f9:aa:b8:bc:b6:ac:5d:f3:34:ad:fb:
                    37:5d:da:8b:6a:9b:e2:a9:9d:9d:67:82:e8:31:f5:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:28:2E:F3:F7:A9:AE:61:0B:2A:C2:71:E3:9F:E3:0D:E4:66:88:5C
            X509v3 Authority Key Identifier:
                keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:51:1c:61:3b:8e:78:31:5b:65:7d:21:08:88:fe:98:7d:
         e2:f1:86:6b:48:bd:6f:6c:0c:c1:16:56:77:49:1a:4a:dd:06:
         50:9f:e2:fd:36:2c:b2:dc:b3:c4:0c:f7:08:27:42:5a:28:39:
         33:95:ba:97:45:d6:ec:25:e5:f5:0d:6b:a0:1d:98:d1:10:79:
         9d:fa:99:b3:14:ec:73:f2:8c:a1:f6:45:d8:39:6b:5d:aa:cc:
         0c:36:ba:5f:1b:ae:0e:b3:a9:18:44:04:13:24:53:6a:08:90:
         1a:e3:77:42:77:19:0c:d9:55:ac:10:c5:5b:24:1f:0c:7d:5f:
         95:57:d4:de:15:0e:3b:09:44:26:54:81:a1:fc:0f:42:b2:6c:
         eb:16:76:a1:50:95:e3:01:8b:8d:4f:c7:9c:26:fc:43:b2:d0:
         e9:59:8d:df:ac:e8:63:54:7f:e0:8a:a6:a4:c8:67:96:eb:35:
         46:a1:b3:ef:b2:5c:fa:e3:a8:3e:f2:73:dd:2f:df:0c:05:68:
         bc:d5:82:97:be:70:fd:ee:20:e6:ff:80:a8:56:1e:94:15:07:
         89:57:52:a6:21:4e:eb:82:ff:3e:5d:8a:7e:4b:5c:1d:01:c7:
         0f:2e:b5:b7:76:37:02:36:27:e2:b8:9c:c1:6d:cd:6e:0a:a3:
         fc:d3:01:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw86eaDpADSgbwxrajknCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YmJiYzQ3YjFjNjdlNTU3YmVhYjBmMmM2ZDE4YmYwMjZj
MzA2ZTAwHhcNMjYwOTEwMTAwMTIzWhcNMjYwOTExMTAwMTIzWjAzMTEwLwYDVQQD
EyhlYzI4MmVmM2Y3YTlhZTYxMGIyYWMyNzFlMzlmZTMwZGU0NjY4ODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcQy9H0bqS3hP4rJV5+AyHKi5fBy
iiQWq7nQBRisMcoSxYtSU5kSZ4YpZPRXEhhTJX2HlLyzKSHQzjyzC7LvN4zKO2Lx
DtK+N4hJakXqcGjFOSHrhc2MD2FNKiJUYCgvtU2Ru6v3URrQMo1T6tuCTSJB0ZPZ
sYXH4A3xtE7NpWPWvxsmzaIdfq7PNPioyQCMkysRm8qlATowLf3bbVG0Zyh8eyht
c0/gpzxQRQiwGyzbfwb3dgxLpiKKuuk78QvpBcDH68QZEzYXl//9cfCOHsLCXTr/
tU2ytAgASsgSoJ1fWX9I+aq4vLasXfM0rfs3XdqLapviqZ2dZ4LoMfWsPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwoLvP3qa5hCyrCceOf4w3kZohcMB8GA1UdIwQY
MBaAFFe7vEexxn5Ve+qw8sbRi/AmwwbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEt
YjdiM2FmZmM2ZWM5LzEvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEtYjdiM2FmZmM2ZWM5
LzEvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnklRHGE7
jngxW2V9IQiI/ph94vGGa0i9b2wMwRZWd0kaSt0GUJ/i/TYsstyzxAz3CCdCWig5
M5W6l0XW7CXl9Q1roB2Y0RB5nfqZsxTsc/KMofZF2DlrXarMDDa6XxuuDrOpGEQE
EyRTagiQGuN3QncZDNlVrBDFWyQfDH1flVfU3hUOOwlEJlSBofwPQrJs6xZ2oVCV
4wGLjU/HnCb8Q7LQ6VmN36zoY1R/4IqmpMhnlus1RqGz77Jc+uOoPvJz3S/fDAVo
vNWCl75w/e4g5v+AqFYelBUHiVdSpiFO64L/Pl2KfktcHQHHDy61t3Y3AjYn4ric
wW3Nbgqj/NMBOA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:05:26 2026 by rpki-client