Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          JBuuZrHWCT4Fy54LeiIQobaf38qonNfr8WAiCcjOpxU=
Subject key identifier:   F6:D3:4E:08:3E:9A:B4:DC:9F:3B:F6:CC:7D:B8:41:25:4D:F6:21:C1
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       01A1464E1AD207B4F79D9CC1F27AA0775A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          0F8B
Signing time:             Fri 16 Oct 2026 20:01:26 +0000
Manifest this update:     Fri 16 Oct 2026 20:01:26 +0000
Manifest next update:     Sat 17 Oct 2026 20:01:26 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: 0xQL7xuHMnwMnIv+SMwTWjkDWZkT+rdOAclrVkmaoYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:4e:1a:d2:07:b4:f7:9d:9c:c1:f2:7a:a0:77:5a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: Oct 16 20:01:26 2026 GMT
            Not After : Oct 17 20:01:26 2026 GMT
        Subject: CN=f6d34e083e9ab4dc9f3bf6cc7db841254df621c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:d7:83:e7:49:59:f0:92:a4:fb:67:0e:13:
                    c8:42:d8:9b:e4:67:66:e8:81:e4:b0:44:d3:63:69:
                    9f:5f:6e:4f:74:75:ab:00:42:80:05:6d:07:89:e9:
                    9a:46:7a:6c:a1:61:cb:c3:9c:46:85:55:59:00:1f:
                    5b:c0:d0:e1:64:05:9e:9b:93:23:4e:3e:0e:b2:af:
                    3f:b5:3e:cf:79:05:6b:5d:2e:c6:b0:36:1a:7b:b3:
                    5a:09:38:de:2c:d5:10:7d:bd:a2:b2:f5:ff:fa:34:
                    75:bc:03:a6:53:a6:a8:ae:b6:45:b4:56:e8:cb:48:
                    b5:97:9f:01:d4:4f:8d:fb:15:34:cd:6b:e8:e3:5f:
                    4a:7b:a1:1d:ef:c6:ad:55:5a:95:4d:9a:67:39:b7:
                    73:ec:8f:69:34:9b:28:0f:04:29:95:a1:6c:d4:7e:
                    4a:ff:e7:e2:21:8d:81:28:c1:67:fa:0d:d3:1a:79:
                    e6:ee:2a:7b:ae:4b:70:a2:8f:b0:5f:9f:8e:10:35:
                    ec:54:1e:b4:1d:cd:99:cd:01:98:77:2a:35:91:95:
                    9f:6c:56:9e:71:91:c5:31:eb:62:9b:b2:3f:bd:79:
                    04:d1:1c:f2:98:03:27:86:9f:e7:2c:1e:58:40:2f:
                    a0:48:c8:22:0d:10:c0:bd:c9:0a:92:c0:6f:8f:b5:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D3:4E:08:3E:9A:B4:DC:9F:3B:F6:CC:7D:B8:41:25:4D:F6:21:C1
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:dd:e6:44:2c:f0:62:5f:6b:08:ec:8e:9c:39:53:d6:54:
         eb:db:03:90:9b:e9:80:21:4c:eb:55:9b:3c:c1:b8:19:fe:53:
         ca:3b:cf:03:03:15:db:d9:8b:03:d1:25:d3:5f:46:65:66:e5:
         a5:0e:1f:48:08:6d:0d:4f:77:80:72:17:1c:1d:74:04:c3:a2:
         a3:49:b2:0c:f7:4b:6b:80:7e:e0:a9:02:cf:78:95:58:e9:89:
         89:e2:e1:78:bb:ce:36:79:2d:db:40:a9:11:74:67:d5:34:f7:
         e1:f0:32:21:aa:04:b6:e4:28:7d:0d:7b:1c:6b:13:3a:78:ff:
         d1:c0:d3:dd:8c:e0:f0:24:ff:68:a6:e3:e4:c5:fa:7a:df:4f:
         c3:c7:a1:d9:8f:75:4b:7a:d6:b4:24:d4:cb:e1:b4:3e:a6:07:
         3f:11:48:56:32:ed:f2:a0:c4:1e:55:6d:8a:e9:c7:34:cb:2f:
         94:86:39:e6:e3:00:e8:d6:92:e0:4e:69:a1:b9:5f:9e:cf:4a:
         ed:86:ec:8f:c5:1b:21:c8:bd:f8:69:86:74:5c:31:cb:a1:3f:
         a7:c0:95:29:a7:e2:54:67:a9:df:9e:92:10:f7:6e:db:d6:0d:
         58:5b:bd:7c:76:bc:81:d4:5c:13:85:1a:84:71:76:ca:ed:14:
         ef:5f:48:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFGThrSB7T3nZzB8nqgd1oNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjE1M2M1MGI4ODE1YmQyOGRmYmIwMGUyM2U2ZjI2MzIw
MzE3MmUwHhcNMjYxMDE2MjAwMTI2WhcNMjYxMDE3MjAwMTI2WjAzMTEwLwYDVQQD
EyhmNmQzNGUwODNlOWFiNGRjOWYzYmY2Y2M3ZGI4NDEyNTRkZjYyMWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsefXg+dJWfCSpPtnDhPIQtib5Gdm
6IHksETTY2mfX25PdHWrAEKABW0HiemaRnpsoWHLw5xGhVVZAB9bwNDhZAWem5Mj
Tj4Osq8/tT7PeQVrXS7GsDYae7NaCTjeLNUQfb2isvX/+jR1vAOmU6aorrZFtFbo
y0i1l58B1E+N+xU0zWvo419Ke6Ed78atVVqVTZpnObdz7I9pNJsoDwQplaFs1H5K
/+fiIY2BKMFn+g3TGnnm7ip7rktwoo+wX5+OEDXsVB60Hc2ZzQGYdyo1kZWfbFae
cZHFMetim7I/vXkE0RzymAMnhp/nLB5YQC+gSMgiDRDAvckKksBvj7U1dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbTTgg+mrTcnzv2zH24QSVN9iHBMB8GA1UdIwQY
MBaAFPVhU8ULiBW9KN+7AOI+byYyAxcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDZhY2EtMzc3Zi00ZmU5LWIyN2Ut
OGM3MjYyOTFkODZjLzEvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MDZhY2EtMzc3Zi00ZmU5LWIyN2UtOGM3MjYyOTFkODZj
LzEvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRLd5kQs
8GJfawjsjpw5U9ZU69sDkJvpgCFM61WbPMG4Gf5TyjvPAwMV29mLA9El019GZWbl
pQ4fSAhtDU93gHIXHB10BMOio0myDPdLa4B+4KkCz3iVWOmJieLheLvONnkt20Cp
EXRn1TT34fAyIaoEtuQofQ17HGsTOnj/0cDT3Yzg8CT/aKbj5MX6et9Pw8eh2Y91
S3rWtCTUy+G0PqYHPxFIVjLt8qDEHlVtiunHNMsvlIY55uMA6NaS4E5poblfns9K
7Ybsj8UbIci9+GmGdFwxy6E/p8CVKafiVGep356SEPdu29YNWFu9fHa8gdRcE4Ua
hHF2yu0U719Isg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 04:06:59 2026 by rpki-client