Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File:                     K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier:          +JTjtk1ah4CfKBdUHCpuhKgYYsMt5TcJQ1kHBFDQ2KQ=
Subject key identifier:   3F:82:EA:AE:E6:C6:03:7B:84:20:70:7E:0C:17:6E:07:DD:01:3F:BC
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer:       /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial:       01A08FE95C53A12E99AE48626238A793EAD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number:          1218
Signing time:             Fri 11 Sep 2026 10:00:30 +0000
Manifest this update:     Fri 11 Sep 2026 10:00:30 +0000
Manifest next update:     Sat 12 Sep 2026 10:00:30 +0000
Files and hashes:         1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: +jrxpb5Oe8YiKRNnVs8lsbt6vDgXG4FzQa5zbj7WkIs=)
                          2: tpy9FJHevA7odk2TH7YsmtN7UFs.roa (hash: HA5XrfWMN5EyPeGIHUHIkCKTU3wDBfCSNcRoSlAlDv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8f:e9:5c:53:a1:2e:99:ae:48:62:62:38:a7:93:ea:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
        Validity
            Not Before: Sep 11 10:00:30 2026 GMT
            Not After : Sep 12 10:00:30 2026 GMT
        Subject: CN=3f82eaaee6c6037b8420707e0c176e07dd013fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:bc:26:63:3d:08:30:34:84:f2:c0:a9:21:
                    1f:ef:9a:a4:25:a2:49:6d:d9:e0:87:09:d2:60:68:
                    1f:f3:2a:bc:ce:f9:cc:d2:4a:f3:f7:2c:c2:2f:2c:
                    fb:4e:d4:53:a6:da:dd:f7:57:9b:3b:4e:b0:9b:e7:
                    58:2c:2a:35:12:10:70:c5:c3:3d:e1:ae:0d:fc:12:
                    0f:47:b8:ae:8c:64:fc:e5:71:ba:a1:a4:52:52:6a:
                    c3:76:aa:8f:9d:87:67:91:b7:06:3a:a4:29:92:f0:
                    e6:f5:88:f1:57:7b:7d:95:71:b7:83:c9:a4:f2:e5:
                    b2:a5:db:7a:9b:ba:d3:5a:d2:07:e8:6f:1c:c3:d5:
                    d2:94:eb:a1:2f:cd:29:86:b8:ad:fc:f0:10:df:48:
                    f0:f6:4c:b3:f8:05:48:57:c8:6c:09:0a:19:89:80:
                    6f:50:9c:bd:80:2c:f9:27:34:aa:eb:93:fb:37:66:
                    ff:8d:22:7d:68:9a:69:a3:31:3e:24:21:19:d9:4e:
                    93:21:f3:34:80:47:bf:bc:95:6a:31:e5:c6:c1:6d:
                    98:ce:7a:51:8f:76:fd:f7:71:34:a6:22:6a:c1:2e:
                    eb:f8:fa:97:fa:a4:3c:21:ef:bb:23:10:69:f8:b3:
                    aa:d0:5f:99:c5:a0:00:4e:63:c8:11:ad:ea:5d:2e:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:82:EA:AE:E6:C6:03:7B:84:20:70:7E:0C:17:6E:07:DD:01:3F:BC
            X509v3 Authority Key Identifier:
                keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:dc:1b:f8:4f:4d:cf:48:1a:ac:85:2b:54:7b:0e:d4:89:db:
         36:da:f4:cf:83:94:f9:e2:04:20:f1:7b:80:fc:40:e9:66:25:
         d5:2e:67:04:68:da:ac:42:b8:61:cd:24:5e:30:68:5b:30:6a:
         33:d8:a0:44:c2:d4:4b:57:79:b3:1c:c9:19:5a:46:23:a5:cd:
         dd:1a:3a:61:05:33:10:68:a0:c7:96:63:58:74:15:6a:51:5b:
         27:41:da:df:d8:95:cc:dd:81:64:14:21:dd:37:7a:9a:c0:09:
         3e:20:93:4e:12:b2:79:61:98:9c:c9:8f:21:95:e1:25:ae:fc:
         ec:2a:6a:0c:de:32:fe:b7:62:18:16:f7:30:a8:95:fb:48:9d:
         19:dd:64:94:1f:3f:0e:91:e6:bb:40:f5:59:66:5c:28:0e:20:
         6d:a9:df:47:88:25:b0:91:03:d0:2f:14:50:68:9b:81:6c:58:
         c8:46:79:60:f0:a5:51:d4:8c:bf:c2:37:47:6a:ca:73:38:95:
         1a:b9:9f:fc:c8:57:cd:31:8a:52:a8:b8:f4:08:f4:50:76:1e:
         ef:19:c8:56:3c:89:4a:af:02:76:33:6a:bd:5e:e4:7e:e9:cd:
         dc:9f:4c:24:ec:00:0a:69:cb:2c:ee:10:0f:07:d7:af:cf:b6:
         b3:e7:7b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCP6VxToS6ZrkhiYjink+rZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjc4ZjE0ZjhiMjI4OGQ0OTU1N2NhNmZiMWJkZjQ3OTM5
MjdkY2UwHhcNMjYwOTExMTAwMDMwWhcNMjYwOTEyMTAwMDMwWjAzMTEwLwYDVQQD
EygzZjgyZWFhZWU2YzYwMzdiODQyMDcwN2UwYzE3NmUwN2RkMDEzZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jK8JmM9CDA0hPLAqSEf75qkJaJJ
bdnghwnSYGgf8yq8zvnM0krz9yzCLyz7TtRTptrd91ebO06wm+dYLCo1EhBwxcM9
4a4N/BIPR7iujGT85XG6oaRSUmrDdqqPnYdnkbcGOqQpkvDm9YjxV3t9lXG3g8mk
8uWypdt6m7rTWtIH6G8cw9XSlOuhL80phrit/PAQ30jw9kyz+AVIV8hsCQoZiYBv
UJy9gCz5JzSq65P7N2b/jSJ9aJppozE+JCEZ2U6TIfM0gEe/vJVqMeXGwW2YznpR
j3b993E0piJqwS7r+PqX+qQ8Ie+7IxBp+LOq0F+ZxaAATmPIEa3qXS5brwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+C6q7mxgN7hCBwfgwXbgfdAT+8MB8GA1UdIwQY
MBaAFCtnjxT4siiNSVV8pvsb30eTkn3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEt
ZjFjYzg3M2MyZTI3LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEtZjFjYzg3M2MyZTI3
LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtwb+E9N
z0garIUrVHsO1InbNtr0z4OU+eIEIPF7gPxA6WYl1S5nBGjarEK4Yc0kXjBoWzBq
M9igRMLUS1d5sxzJGVpGI6XN3Ro6YQUzEGigx5ZjWHQValFbJ0Ha39iVzN2BZBQh
3Td6msAJPiCTThKyeWGYnMmPIZXhJa787CpqDN4y/rdiGBb3MKiV+0idGd1klB8/
DpHmu0D1WWZcKA4gbanfR4glsJED0C8UUGibgWxYyEZ5YPClUdSMv8I3R2rKcziV
Grmf/MhXzTGKUqi49Aj0UHYe7xnIVjyJSq8CdjNqvV7kfunN3J9MJOwACmnLLO4Q
DwfXr8+2s+d71A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 12:41:58 2026 by rpki-client