Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
File:                     9vSDrNiLUfXUf1d_EBtUV3heDts.mft (raw, json)
Hash identifier:          /qZUdswI0kL+5VXV+YcryQ/W+j8t50dyez005Cy8GYU=
Subject key identifier:   EE:9E:0C:77:07:C7:74:09:70:1A:61:42:41:F4:63:D8:D9:5B:32:7C
Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
Certificate issuer:       /CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Certificate serial:       01A17AA88A335B37BEAE1A8ABEEDF1435AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
Manifest number:          0306
Signing time:             Tue 27 Oct 2026 00:00:28 +0000
Manifest this update:     Tue 27 Oct 2026 00:00:28 +0000
Manifest next update:     Wed 28 Oct 2026 00:00:28 +0000
Files and hashes:         1: 9vSDrNiLUfXUf1d_EBtUV3heDts.crl (hash: ns4XkgZ7YQ56HhNJiGGlLI0i6rVjyW8T+s9QUYLfaUI=)
                          2: OkuL0jFH9Wxr8ze3v5vO1jQoo0c.roa (hash: iUfKzVmd555jisXL+xnaTzJDpDNsG+ROIoI7/2+6dXE=)
                          3: h9dclcnj73gGMmqKRNemWaDpAK4.roa (hash: mJuahx80L+X55SPmqYQeNyVRCkJnTbE2MlO0Pta3IEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:a8:8a:33:5b:37:be:ae:1a:8a:be:ed:f1:43:5a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb
        Validity
            Not Before: Oct 27 00:00:28 2026 GMT
            Not After : Oct 28 00:00:28 2026 GMT
        Subject: CN=ee9e0c7707c77409701a614241f463d8d95b327c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:7c:e5:74:5c:11:5f:cd:4e:c8:ca:76:e9:
                    45:47:a9:db:8e:98:1a:00:02:93:d3:e0:b8:cc:4d:
                    e7:b9:7e:b2:cc:e0:a0:b3:d3:91:84:65:8a:66:84:
                    33:e6:7b:5b:3c:fd:0f:ff:c9:cc:a5:c3:2a:ff:0f:
                    d0:7c:db:ef:a6:94:ee:06:fc:4a:43:62:82:da:f3:
                    ac:fb:29:1e:64:88:90:d2:33:fc:ee:c9:43:69:f8:
                    d8:f8:15:22:8c:3e:cd:6b:16:92:0a:1f:8e:f2:fb:
                    16:2d:ff:d9:29:81:24:5e:7b:6d:76:df:ce:80:8b:
                    8d:fb:6a:94:b2:e1:05:30:4c:0b:bf:36:48:0c:3c:
                    05:4f:66:01:55:80:35:00:b2:54:c0:13:b4:1e:a6:
                    f0:34:9e:c7:a7:e6:9c:bb:f8:4b:71:bc:6d:25:cb:
                    3a:8f:ce:dd:e5:1f:5d:63:6f:c4:d3:bd:62:c8:3b:
                    a5:f3:e0:47:83:cf:54:cf:0b:3d:ec:6c:aa:24:b6:
                    f9:58:74:39:b9:77:16:5c:d8:73:75:d2:56:39:2c:
                    9d:24:98:59:6a:a8:80:92:e1:56:ae:79:48:62:4e:
                    84:1c:59:e2:e7:27:3e:62:11:67:97:cd:0a:93:54:
                    5e:ef:e2:28:6d:95:d2:46:27:d8:58:77:83:0b:8f:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:0C:77:07:C7:74:09:70:1A:61:42:41:F4:63:D8:D9:5B:32:7C
            X509v3 Authority Key Identifier:
                keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:97:4c:0c:79:2d:d6:20:90:18:84:2f:45:65:41:76:f9:de:
         11:a3:bb:62:18:61:ba:a8:22:37:42:44:60:34:ca:c3:66:59:
         19:55:cb:ab:33:32:ce:cc:89:be:2c:8d:c7:ae:4e:16:b2:8a:
         be:f1:f6:63:28:0b:e6:ea:d4:22:77:ae:cc:0d:a7:63:18:57:
         5c:71:62:58:2d:ef:6d:e0:7d:53:50:84:19:be:9f:d8:0c:4c:
         68:a8:a2:0f:5a:b5:c5:b4:57:4c:99:6b:af:a3:c0:1c:07:7b:
         87:9e:49:40:64:8b:8a:63:6e:eb:86:bf:2e:64:2d:dd:36:2c:
         fc:6d:a7:55:7c:01:7b:ba:8a:00:ae:60:db:06:1a:89:60:86:
         48:84:07:8d:38:91:d4:d4:17:31:5e:0a:a8:91:3c:cd:28:28:
         ed:57:30:42:f3:de:83:6a:1b:c5:48:c4:84:38:e6:d9:39:b0:
         5a:22:61:3d:be:5c:4b:35:74:7e:7d:65:2c:b4:16:7a:a3:cc:
         2d:8a:cd:9a:76:2e:1c:04:9b:34:19:82:b7:8c:c4:9c:4f:71:
         9c:e9:8f:13:02:30:51:2a:5b:f2:b6:7e:d2:f3:dc:cc:17:d2:
         be:f9:25:e3:9f:86:8d:00:c8:c7:42:68:df:6d:99:fd:95:c4:
         97:a9:0a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6qIozWze+rhqKvu3xQ1q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjQ4M2FjZDg4YjUxZjVkNDdmNTc3ZjEwMWI1NDU3Nzg1
ZTBlZGIwHhcNMjYxMDI3MDAwMDI4WhcNMjYxMDI4MDAwMDI4WjAzMTEwLwYDVQQD
EyhlZTllMGM3NzA3Yzc3NDA5NzAxYTYxNDI0MWY0NjNkOGQ5NWIzMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLV85XRcEV/NTsjKdulFR6nbjpga
AAKT0+C4zE3nuX6yzOCgs9ORhGWKZoQz5ntbPP0P/8nMpcMq/w/QfNvvppTuBvxK
Q2KC2vOs+ykeZIiQ0jP87slDafjY+BUijD7NaxaSCh+O8vsWLf/ZKYEkXnttdt/O
gIuN+2qUsuEFMEwLvzZIDDwFT2YBVYA1ALJUwBO0HqbwNJ7Hp+acu/hLcbxtJcs6
j87d5R9dY2/E071iyDul8+BHg89Uzws97GyqJLb5WHQ5uXcWXNhzddJWOSydJJhZ
aqiAkuFWrnlIYk6EHFni5yc+YhFnl80Kk1Re7+IobZXSRifYWHeDC4/J0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6eDHcHx3QJcBphQkH0Y9jZWzJ8MB8GA1UdIwQY
MBaAFPb0g6zYi1H11H9XfxAbVFd4Xg7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zZjZkZDQtMjI4My00MmJhLWJkNjIt
NTJhMTVkNzg1NDAzLzEvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8zZjZkZDQtMjI4My00MmJhLWJkNjItNTJhMTVkNzg1NDAz
LzEvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5dMDHkt
1iCQGIQvRWVBdvneEaO7YhhhuqgiN0JEYDTKw2ZZGVXLqzMyzsyJviyNx65OFrKK
vvH2YygL5urUIneuzA2nYxhXXHFiWC3vbeB9U1CEGb6f2AxMaKiiD1q1xbRXTJlr
r6PAHAd7h55JQGSLimNu64a/LmQt3TYs/G2nVXwBe7qKAK5g2wYaiWCGSIQHjTiR
1NQXMV4KqJE8zSgo7VcwQvPeg2obxUjEhDjm2TmwWiJhPb5cSzV0fn1lLLQWeqPM
LYrNmnYuHASbNBmCt4zEnE9xnOmPEwIwUSpb8rZ+0vPczBfSvvkl45+GjQDIx0Jo
322Z/ZXEl6kKmA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:39:42 2026 by rpki-client