Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File:                     CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier:          1AE6pSZnDuytDrUuI8JKRiw/OKF2SSGFLKk/+bFrwI8=
Subject key identifier:   C6:81:77:D6:C0:A8:2A:70:C3:05:E1:73:14:75:AD:64:B6:9A:B0:A7
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer:       /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial:       01A13DB8018196B913F80453EF6A17587D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number:          15CC
Signing time:             Thu 15 Oct 2026 04:00:31 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:31 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:31 +0000
Files and hashes:         1: 55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa (hash: Y8RrsYQy5lHgQUMkKZpotYnnwjRaHtFf6Zo8BbV2RP4=)
                          2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: fEAGyeqUlqBZIyQjoLYs9LmX8GnZx231kXr1+By5A6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:01:81:96:b9:13:f8:04:53:ef:6a:17:58:7d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
        Validity
            Not Before: Oct 15 04:00:31 2026 GMT
            Not After : Oct 16 04:00:31 2026 GMT
        Subject: CN=c68177d6c0a82a70c305e1731475ad64b69ab0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4c:b6:a2:51:60:89:e8:1f:c4:72:db:ef:fc:
                    2e:9d:70:b7:fa:07:d2:8c:1e:e9:56:c9:84:37:40:
                    ee:b9:b0:0b:5a:34:84:38:e5:20:5b:d9:3d:aa:9f:
                    42:13:62:c3:6c:5b:2c:a1:9f:2c:c2:54:80:5e:bd:
                    18:52:66:e5:d1:86:2f:9d:ba:bf:6f:84:1f:95:04:
                    0e:db:af:0c:e7:7e:96:2f:e9:df:1f:3a:dd:af:f7:
                    60:3c:43:07:47:be:a6:1b:be:65:4d:51:9d:2a:1a:
                    6f:d5:76:1f:2f:f2:ee:6e:fa:de:8c:43:d9:d6:98:
                    60:a7:e7:e4:26:05:1b:ad:50:e7:2a:f2:8c:e0:c7:
                    ba:18:cd:45:bc:08:77:0a:04:d6:b7:db:35:5e:4f:
                    e6:a1:32:e6:af:63:9b:1a:cd:aa:21:a4:cf:42:f2:
                    a1:39:a7:cd:4c:56:34:4a:29:d5:cb:a6:d2:b0:4f:
                    36:86:8c:e1:2c:f2:bc:ea:b3:37:a4:36:4d:18:e9:
                    10:e4:25:9f:0f:e2:10:81:ba:14:22:f5:96:88:f1:
                    6c:ed:9e:3d:61:17:33:c4:22:c8:28:d0:26:54:4f:
                    e1:66:9c:39:54:11:14:8e:1c:3b:83:a3:01:29:22:
                    8a:2c:42:5a:d0:86:ea:74:e8:13:39:fa:c1:b1:d1:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:81:77:D6:C0:A8:2A:70:C3:05:E1:73:14:75:AD:64:B6:9A:B0:A7
            X509v3 Authority Key Identifier:
                keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3a:10:bc:ef:e4:02:fa:70:ab:4a:27:0d:2b:3a:b6:b8:22:
         d8:73:be:5f:b5:df:30:91:70:b0:27:06:59:16:dc:1d:cb:35:
         cd:1a:08:87:2c:19:aa:fb:03:db:12:3b:b8:28:b1:7b:88:c6:
         c9:aa:22:28:12:1c:03:ff:c2:8c:8f:9b:1a:ac:39:f9:f3:69:
         46:1d:7e:0f:f3:c9:01:2e:96:f0:08:b8:3e:0b:16:28:50:bd:
         18:a7:f9:54:6b:26:e0:3a:25:78:fe:97:9c:0f:00:f2:e6:77:
         79:04:c1:d1:43:bf:1f:ec:18:64:e0:61:2f:18:98:18:14:74:
         fb:49:e6:c5:30:12:e1:49:32:2c:3f:ad:b2:1a:d4:87:37:b4:
         91:4a:0b:9a:d5:60:4d:12:7c:ba:eb:e4:c8:86:be:b8:ae:4b:
         19:6a:4c:8a:6f:43:5d:a0:fa:18:f4:07:64:b4:31:30:2d:1a:
         2b:30:05:c7:af:15:b5:47:b1:b1:1e:5d:b6:69:a3:1b:74:92:
         64:f5:31:8c:ce:55:4c:58:cc:d3:e0:f4:3c:94:cf:0e:f1:1a:
         3c:97:bf:52:31:0f:91:ab:3c:63:5a:bf:1f:40:33:82:bf:44:
         a1:13:7e:9c:1b:7c:78:98:c7:2b:06:98:5d:2e:e6:d7:52:ad:
         6e:47:3d:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uAGBlrkT+ART72oXWH0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmJmN2U2YjMyYTU2MjNmNTRiYjljNzM3ZGI4ZjgxNGU5
M2FkMzkwHhcNMjYxMDE1MDQwMDMxWhcNMjYxMDE2MDQwMDMxWjAzMTEwLwYDVQQD
EyhjNjgxNzdkNmMwYTgyYTcwYzMwNWUxNzMxNDc1YWQ2NGI2OWFiMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0y2olFgiegfxHLb7/wunXC3+gfS
jB7pVsmEN0DuubALWjSEOOUgW9k9qp9CE2LDbFssoZ8swlSAXr0YUmbl0YYvnbq/
b4QflQQO268M536WL+nfHzrdr/dgPEMHR76mG75lTVGdKhpv1XYfL/LubvrejEPZ
1phgp+fkJgUbrVDnKvKM4Me6GM1FvAh3CgTWt9s1Xk/moTLmr2ObGs2qIaTPQvKh
OafNTFY0SinVy6bSsE82hozhLPK86rM3pDZNGOkQ5CWfD+IQgboUIvWWiPFs7Z49
YRczxCLIKNAmVE/hZpw5VBEUjhw7g6MBKSKKLEJa0IbqdOgTOfrBsdGmJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaBd9bAqCpwwwXhcxR1rWS2mrCnMB8GA1UdIwQY
MBaAFAlr9+azKlYj9Uu5xzfbj4FOk605MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTIt
YmNkNmFkYTFiOWRhLzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTItYmNkNmFkYTFiOWRh
LzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjoQvO/k
Avpwq0onDSs6trgi2HO+X7XfMJFwsCcGWRbcHcs1zRoIhywZqvsD2xI7uCixe4jG
yaoiKBIcA//CjI+bGqw5+fNpRh1+D/PJAS6W8Ai4PgsWKFC9GKf5VGsm4DoleP6X
nA8A8uZ3eQTB0UO/H+wYZOBhLxiYGBR0+0nmxTAS4UkyLD+tshrUhze0kUoLmtVg
TRJ8uuvkyIa+uK5LGWpMim9DXaD6GPQHZLQxMC0aKzAFx68VtUexsR5dtmmjG3SS
ZPUxjM5VTFjM0+D0PJTPDvEaPJe/UjEPkas8Y1q/H0Azgr9EoRN+nBt8eJjHKwaY
XS7m11Ktbkc9DA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:08:49 2026 by rpki-client