Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
File:                     9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json)
Hash identifier:          qjsGBA2cG43AZ5tSfTRa+8EZBLIR0GCALZRis6OZ214=
Subject key identifier:   52:0D:C6:75:15:37:B7:C3:1F:45:65:C9:FD:3E:7F:82:A7:75:3B:4D
Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
Certificate issuer:       /CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Certificate serial:       01A00101C3CE9652AD1A343A5107073509C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
Manifest number:          09CE
Signing time:             Fri 14 Aug 2026 16:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:27 +0000
Files and hashes:         1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: n62xQWBO5tsGTgWQ3iCIQvsY+Dr4qJonJVdDtd6679I=)
                          2: FsiQXTQNPgnlk7n5k6ny75SvAeI.roa (hash: u0ugT8qOwrczaf2dJSuiLbaGjKBSdb+eJY/Q3htlxMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:c3:ce:96:52:ad:1a:34:3a:51:07:07:35:09:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff
        Validity
            Not Before: Aug 14 16:01:27 2026 GMT
            Not After : Aug 15 16:01:27 2026 GMT
        Subject: CN=520dc6751537b7c31f4565c9fd3e7f82a7753b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:c4:d9:e0:5b:78:1b:e2:ae:fc:f8:62:ef:
                    f6:27:b5:66:b1:f5:ad:d5:e3:40:8f:2b:dd:fb:2f:
                    02:78:e6:55:1b:aa:2f:95:52:83:96:bb:b1:d7:b7:
                    d6:fc:e2:0d:64:c6:02:ae:39:45:00:da:53:71:32:
                    9e:ff:af:e0:3a:1f:aa:a4:13:65:13:ea:2d:2e:1a:
                    f8:e2:c1:a5:e1:49:0c:54:fa:02:8e:d2:d8:b1:66:
                    fc:ed:6a:65:e4:66:19:2c:be:1c:38:75:c2:00:8c:
                    84:55:3b:a0:b6:e8:fb:b5:94:5f:a8:1e:35:8b:86:
                    1e:2c:e0:86:ef:d6:03:ae:74:87:4f:5a:1f:59:b9:
                    d7:d1:b1:80:87:5f:cd:f5:15:23:f1:42:3b:4b:c9:
                    82:6a:2e:4b:ef:5d:9f:99:5b:03:2b:51:73:eb:3b:
                    5b:71:5c:a2:48:23:68:db:6e:4f:bf:50:a6:8f:a8:
                    b7:30:2b:19:46:b1:21:87:35:23:27:37:57:0c:0e:
                    79:9d:12:4e:a8:8c:68:91:5b:43:10:b1:9d:fd:b5:
                    31:5b:72:39:f6:fd:8f:96:58:57:59:c5:8a:99:65:
                    30:af:a1:ea:b4:16:92:80:64:5f:98:8f:0f:cb:01:
                    d1:73:0c:50:0e:2f:4e:9f:db:64:01:db:9d:c5:89:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0D:C6:75:15:37:B7:C3:1F:45:65:C9:FD:3E:7F:82:A7:75:3B:4D
            X509v3 Authority Key Identifier:
                keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5a:84:9e:6a:c3:02:34:77:39:e6:f7:60:ac:90:d4:18:bf:
         26:3c:6b:be:67:c5:40:42:39:40:0e:6b:e9:57:1f:ee:dc:7f:
         c5:bf:bf:95:78:08:b2:63:4a:ea:23:e6:7f:29:6a:ae:c8:f5:
         15:0f:7b:07:a9:a1:a3:de:30:ba:8f:50:2b:13:c8:b2:b9:33:
         c9:bc:18:96:e4:00:a9:2b:1f:d7:74:2c:4f:8a:b6:ba:e1:3e:
         69:67:2d:f8:32:74:d5:14:66:6b:71:61:32:9f:52:8d:f6:64:
         23:20:68:d1:93:20:5a:5c:eb:73:73:f2:11:20:c4:53:ab:dd:
         17:03:60:ca:09:b1:1f:e7:a6:c9:44:35:83:14:5f:e3:70:c7:
         32:b1:2c:b1:4c:d5:91:19:61:4c:5a:77:2a:b3:fc:fe:64:4f:
         7b:5a:d0:f6:e1:d1:d2:a7:fb:bf:c0:ef:e2:d6:67:c5:17:ee:
         86:92:e7:65:b2:55:e6:ec:fa:f6:ac:dd:1d:18:9e:5f:bf:18:
         3f:38:15:62:a2:a0:c3:d8:7d:89:41:28:e5:b2:08:b6:6d:30:
         28:75:18:ab:c8:bb:27:5e:11:c2:c3:f5:50:77:d8:41:4c:76:
         aa:33:9f:f0:33:7a:6b:ea:66:25:67:b4:0a:c6:6b:7e:12:e6:
         db:c1:ec:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAcPOllKtGjQ6UQcHNQnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTJhNzU5YzY1ZTk4NDliYjdjNTMyZDVlYmI0NDQ5OWE1
MTViZmYwHhcNMjYwODE0MTYwMTI3WhcNMjYwODE1MTYwMTI3WjAzMTEwLwYDVQQD
Eyg1MjBkYzY3NTE1MzdiN2MzMWY0NTY1YzlmZDNlN2Y4MmE3NzUzYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD3E2eBbeBvirvz4Yu/2J7VmsfWt
1eNAjyvd+y8CeOZVG6ovlVKDlrux17fW/OINZMYCrjlFANpTcTKe/6/gOh+qpBNl
E+otLhr44sGl4UkMVPoCjtLYsWb87Wpl5GYZLL4cOHXCAIyEVTugtuj7tZRfqB41
i4YeLOCG79YDrnSHT1ofWbnX0bGAh1/N9RUj8UI7S8mCai5L712fmVsDK1Fz6ztb
cVyiSCNo225Pv1Cmj6i3MCsZRrEhhzUjJzdXDA55nRJOqIxokVtDELGd/bUxW3I5
9v2PllhXWcWKmWUwr6HqtBaSgGRfmI8PywHRcwxQDi9On9tkAdudxYnR7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFINxnUVN7fDH0Vlyf0+f4KndTtNMB8GA1UdIwQY
MBaAFPUSp1nGXphJu3xTLV67REmaUVv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJLbldjWmVtRW03ZkZNdFhydEVTWnBSV184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ZTQ1ODItZGZlOS00MTQ2LThjMTQt
OGFhZGY3YTk4NTZiLzEvOVJLbldjWmVtRW03ZkZNdFhydEVTWnBSV184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82ZTQ1ODItZGZlOS00MTQ2LThjMTQtOGFhZGY3YTk4NTZi
LzEvOVJLbldjWmVtRW03ZkZNdFhydEVTWnBSV184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlqEnmrD
AjR3Oeb3YKyQ1Bi/JjxrvmfFQEI5QA5r6Vcf7tx/xb+/lXgIsmNK6iPmfylqrsj1
FQ97B6mho94wuo9QKxPIsrkzybwYluQAqSsf13QsT4q2uuE+aWct+DJ01RRma3Fh
Mp9SjfZkIyBo0ZMgWlzrc3PyESDEU6vdFwNgygmxH+emyUQ1gxRf43DHMrEssUzV
kRlhTFp3KrP8/mRPe1rQ9uHR0qf7v8Dv4tZnxRfuhpLnZbJV5uz69qzdHRieX78Y
PzgVYqKgw9h9iUEo5bIItm0wKHUYq8i7J14RwsP1UHfYQUx2qjOf8DN6a+pmJWe0
CsZrfhLm28HsWA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:51 2026 by rpki-client