Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
File:                     DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json)
Hash identifier:          t9XL6U0GwN5l2qNKzObKXJ836jlBJ9chpymk/3BtYJE=
Subject key identifier:   BB:31:81:DA:B1:B6:0D:27:A1:D4:2D:8D:9C:D4:E0:9F:D9:A7:E4:37
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Certificate issuer:       /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial:       01A13E5CD9FB69E4815E2D9FB095A685C652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
Manifest number:          149F
Signing time:             Thu 15 Oct 2026 07:00:34 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:34 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:34 +0000
Files and hashes:         1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: jdVuOWa02nGH4IzYM+IvKUnLiR87Dx/v+WHTmBJGT4Q=)
                          2: N-AM4196SXnGQPm10SOwk3Kk_fQ.roa (hash: +8w6gH3OBa7d0A6n/57m2bB3Ovd8KSYObWMM+h3ENfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:d9:fb:69:e4:81:5e:2d:9f:b0:95:a6:85:c6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
        Validity
            Not Before: Oct 15 07:00:34 2026 GMT
            Not After : Oct 16 07:00:34 2026 GMT
        Subject: CN=bb3181dab1b60d27a1d42d8d9cd4e09fd9a7e437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:20:70:da:93:aa:14:e9:ef:89:20:33:7f:
                    51:c1:02:cd:96:d3:74:dd:eb:1b:4b:53:2f:32:17:
                    52:47:a0:0f:c4:df:3e:77:5e:11:58:ee:a6:d1:1f:
                    48:92:b8:bc:94:15:22:37:be:db:36:17:84:81:eb:
                    1c:56:e3:72:0c:bf:69:35:fc:14:b6:f1:fe:eb:69:
                    b1:79:a5:fc:da:64:a4:c8:de:ed:78:67:00:58:48:
                    e1:b2:63:4c:ad:0c:78:c9:38:9b:c7:05:9e:9d:88:
                    99:8e:64:41:70:df:36:5f:23:43:83:5f:f7:75:d0:
                    08:fe:c8:23:f1:fa:df:a4:ec:fb:5c:bd:db:69:fe:
                    b1:a7:8f:d3:b8:99:2e:2a:01:77:77:9a:54:ba:f0:
                    52:22:81:20:dd:4c:11:e2:6e:b6:20:b5:b9:e8:73:
                    bc:55:f7:ca:19:b6:6d:fe:09:2a:fc:73:7e:c5:1e:
                    d1:7d:a6:c8:33:8a:0b:23:e6:47:b2:d1:81:c1:ee:
                    c7:9a:e8:b6:e1:eb:8b:e9:77:11:a4:04:d8:fe:0b:
                    c6:fa:94:6b:47:5c:f3:af:c2:59:7b:1f:bd:5f:11:
                    03:cf:d4:9f:70:e0:73:99:a6:57:14:69:b3:61:39:
                    e8:56:c2:de:8d:80:65:73:4e:b9:f4:1e:ea:e4:e4:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:81:DA:B1:B6:0D:27:A1:D4:2D:8D:9C:D4:E0:9F:D9:A7:E4:37
            X509v3 Authority Key Identifier:
                keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7a:6a:be:7a:44:b8:36:7b:c4:95:63:f5:27:68:e1:aa:7e:
         96:bc:3f:7a:59:e8:d7:50:6d:ea:6d:04:e9:a8:34:9e:64:24:
         90:ca:51:56:77:fd:68:80:f4:15:1c:0a:f6:0b:7e:bd:98:0e:
         8f:dd:2a:62:fb:19:c2:81:b5:b6:c0:b4:77:20:22:9f:46:a3:
         91:ed:ba:a0:1d:a7:71:fb:f1:e8:d0:5c:25:4a:73:56:2c:ec:
         84:5c:d6:c5:b4:c6:6b:4b:39:ed:56:10:38:bc:eb:52:d3:01:
         a6:48:40:99:19:c4:99:96:ec:30:e6:ef:5e:cf:ea:85:ee:15:
         8b:79:ef:6d:f7:7c:4e:71:58:b2:d3:fb:7e:24:17:44:f1:66:
         6b:80:8d:c7:97:bb:08:4d:d2:1f:b6:c8:ea:99:75:bd:a5:d0:
         c9:ff:37:a6:b4:23:4d:15:17:03:ca:06:56:18:7f:60:ac:5b:
         1d:61:bf:3e:04:0a:15:49:7b:e4:58:52:3b:50:50:09:ae:37:
         6c:4f:d0:da:d2:c2:36:78:f9:ec:ce:d6:98:aa:e7:2e:5c:bb:
         b7:ff:6e:9e:69:4c:98:22:1b:8d:c2:a9:44:d4:a8:a3:2c:05:
         53:9a:f3:97:58:fa:2b:73:88:ff:22:18:1f:08:42:d9:d1:fc:
         05:84:2e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XNn7aeSBXi2fsJWmhcZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjE1NDI4YTRiNWJlNWU3M2U3ZDIyODJiNTFjODE5YWVh
MzhmOWIwHhcNMjYxMDE1MDcwMDM0WhcNMjYxMDE2MDcwMDM0WjAzMTEwLwYDVQQD
EyhiYjMxODFkYWIxYjYwZDI3YTFkNDJkOGQ5Y2Q0ZTA5ZmQ5YTdlNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIsgcNqTqhTp74kgM39RwQLNltN0
3esbS1MvMhdSR6APxN8+d14RWO6m0R9Ikri8lBUiN77bNheEgescVuNyDL9pNfwU
tvH+62mxeaX82mSkyN7teGcAWEjhsmNMrQx4yTibxwWenYiZjmRBcN82XyNDg1/3
ddAI/sgj8frfpOz7XL3baf6xp4/TuJkuKgF3d5pUuvBSIoEg3UwR4m62ILW56HO8
VffKGbZt/gkq/HN+xR7RfabIM4oLI+ZHstGBwe7Hmui24euL6XcRpATY/gvG+pRr
R1zzr8JZex+9XxEDz9SfcOBzmaZXFGmzYTnoVsLejYBlc0659B7q5OT8pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsxgdqxtg0nodQtjZzU4J/Zp+Q3MB8GA1UdIwQY
MBaAFA7xVCiktb5ec+fSKCtRyBmuo4+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYt
OTI3NDkyMGRjYWExLzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYtOTI3NDkyMGRjYWEx
LzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3pqvnpE
uDZ7xJVj9Sdo4ap+lrw/elno11Bt6m0E6ag0nmQkkMpRVnf9aID0FRwK9gt+vZgO
j90qYvsZwoG1tsC0dyAin0ajke26oB2ncfvx6NBcJUpzVizshFzWxbTGa0s57VYQ
OLzrUtMBpkhAmRnEmZbsMObvXs/qhe4Vi3nvbfd8TnFYstP7fiQXRPFma4CNx5e7
CE3SH7bI6pl1vaXQyf83prQjTRUXA8oGVhh/YKxbHWG/PgQKFUl75FhSO1BQCa43
bE/Q2tLCNnj57M7WmKrnLly7t/9unmlMmCIbjcKpRNSooywFU5rzl1j6K3OI/yIY
HwhC2dH8BYQuEQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:40:41 2026 by rpki-client