Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File:                     97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier:          n8yVWecPjm2pLgV/jD1zOqXEDPQ2+NRJ4MLvK6NA91I=
Subject key identifier:   19:7D:75:35:F0:F9:90:DE:6D:94:8C:3B:41:0F:A5:28:E5:FB:F2:BE
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer:       /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial:       01A13FDDD8F827CB470EF4031F0C2F8C8BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number:          0E42
Signing time:             Thu 15 Oct 2026 14:01:05 +0000
Manifest this update:     Thu 15 Oct 2026 14:01:05 +0000
Manifest next update:     Fri 16 Oct 2026 14:01:05 +0000
Files and hashes:         1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: +sj5SlFhpC5BeiTyseBgGsdNAnUBO409Fe51OJiXu5E=)
                          2: uIJ0IS79WDVVxYIbBz_R4fqspJQ.roa (hash: h35WdtQ05WmybDkYDylEfj+xzINWR/bUtvARmeLtlc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:dd:d8:f8:27:cb:47:0e:f4:03:1f:0c:2f:8c:8b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
        Validity
            Not Before: Oct 15 14:01:05 2026 GMT
            Not After : Oct 16 14:01:05 2026 GMT
        Subject: CN=197d7535f0f990de6d948c3b410fa528e5fbf2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:50:09:38:51:58:0a:99:d5:96:17:36:b4:
                    a9:18:0a:dd:02:2e:e2:f8:1c:20:86:42:a2:d2:13:
                    a6:89:fe:f9:26:d5:a4:a4:11:08:31:ce:ae:1a:9f:
                    d4:55:b3:ec:27:ab:ce:6c:64:a0:ac:52:d3:de:a0:
                    e0:91:4f:aa:77:d0:6e:2c:ca:82:bf:ed:bd:da:67:
                    16:0f:70:41:5a:81:4b:a6:15:d3:01:7d:13:c8:4c:
                    1d:e6:e8:20:00:c8:27:86:b7:05:97:a3:97:85:ce:
                    bc:a6:f5:3e:aa:c9:0a:a3:63:43:50:57:a8:77:f3:
                    df:be:17:0c:0d:69:e2:e6:cf:0b:a5:d4:3e:1d:09:
                    a1:57:66:79:49:5a:fa:f3:5b:52:03:3c:c6:81:8b:
                    45:5f:e5:b4:47:9e:84:6e:83:a7:ac:21:20:b5:5c:
                    b1:f4:a6:d0:45:dd:41:ef:03:8e:51:60:23:7a:44:
                    9a:96:b5:d5:ce:b2:1f:f2:9a:11:73:0b:ba:5b:0e:
                    34:35:94:30:13:09:9a:20:2d:b0:88:0d:fa:5e:b9:
                    d5:b8:33:46:cb:47:de:ac:db:c6:fd:2c:bb:e4:7c:
                    1c:c9:80:07:8e:f5:51:95:a5:6a:d0:02:9a:03:12:
                    a6:de:fe:75:cc:cd:82:25:10:49:c2:10:ab:13:04:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7D:75:35:F0:F9:90:DE:6D:94:8C:3B:41:0F:A5:28:E5:FB:F2:BE
            X509v3 Authority Key Identifier:
                keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9d:78:ab:fc:72:7e:98:71:b4:b5:fa:da:dd:6a:2e:92:c6:
         02:1c:d7:72:6d:24:c0:2d:5a:7c:30:64:4d:ba:04:03:24:60:
         09:da:e7:56:1e:16:15:43:97:0c:6c:66:3b:8d:70:a8:57:48:
         41:c0:6e:05:a6:f9:17:fe:ef:d7:38:b6:1c:12:54:43:54:a4:
         d5:ba:85:c5:37:b7:e0:5c:4d:fe:e5:8c:a6:63:c8:cf:7c:65:
         fa:b4:7f:d4:48:54:07:9e:f8:b2:64:32:98:8a:66:f0:7f:a4:
         78:f9:64:36:14:27:49:5e:16:90:ba:db:b4:03:bb:da:df:07:
         ac:fd:bb:13:64:e8:35:24:44:ff:57:07:7d:6c:ea:de:4a:62:
         09:b7:9b:c2:d8:e3:69:88:d7:40:53:9f:b3:48:9c:f7:e4:43:
         f7:b0:19:41:d4:27:cb:c0:f7:08:1a:7c:81:cd:e3:80:cc:6b:
         92:a8:aa:4c:c5:a5:04:b2:27:ca:03:47:b8:e7:36:45:2b:c7:
         e0:a6:6c:e3:17:fc:61:21:9f:9d:94:2b:6b:5f:cf:d7:21:3f:
         f8:02:64:41:9f:50:82:a2:f6:38:6d:d3:22:c9:1a:dd:be:b5:
         5a:2e:05:06:7c:94:0b:38:a8:57:54:a9:7e:4e:f7:39:92:6f:
         8c:ae:61:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/3dj4J8tHDvQDHwwvjIvcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjE0M2Y2NGQ1MTBiYTMxMjk3Y2JhZTU2ODJmZDQxYjJj
ODExOTYwHhcNMjYxMDE1MTQwMTA1WhcNMjYxMDE2MTQwMTA1WjAzMTEwLwYDVQQD
EygxOTdkNzUzNWYwZjk5MGRlNmQ5NDhjM2I0MTBmYTUyOGU1ZmJmMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtRQCThRWAqZ1ZYXNrSpGArdAi7i
+BwghkKi0hOmif75JtWkpBEIMc6uGp/UVbPsJ6vObGSgrFLT3qDgkU+qd9BuLMqC
v+292mcWD3BBWoFLphXTAX0TyEwd5uggAMgnhrcFl6OXhc68pvU+qskKo2NDUFeo
d/PfvhcMDWni5s8LpdQ+HQmhV2Z5SVr681tSAzzGgYtFX+W0R56EboOnrCEgtVyx
9KbQRd1B7wOOUWAjekSalrXVzrIf8poRcwu6Ww40NZQwEwmaIC2wiA36XrnVuDNG
y0ferNvG/Sy75HwcyYAHjvVRlaVq0AKaAxKm3v51zM2CJRBJwhCrEwS1zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBl9dTXw+ZDebZSMO0EPpSjl+/K+MB8GA1UdIwQY
MBaAFPexQ/ZNUQujEpfLrlaC/UGyyBGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdGRDlrMVJDNk1TbDh1dVZvTDlRYkxJRVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTJkOWQtMjFhOC00NTIyLTk3ZGUt
MGZiZTJkZTA2MzZkLzEvOTdGRDlrMVJDNk1TbDh1dVZvTDlRYkxJRVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTJkOWQtMjFhOC00NTIyLTk3ZGUtMGZiZTJkZTA2MzZk
LzEvOTdGRDlrMVJDNk1TbDh1dVZvTDlRYkxJRVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ514q/xy
fphxtLX62t1qLpLGAhzXcm0kwC1afDBkTboEAyRgCdrnVh4WFUOXDGxmO41wqFdI
QcBuBab5F/7v1zi2HBJUQ1Sk1bqFxTe34FxN/uWMpmPIz3xl+rR/1EhUB574smQy
mIpm8H+kePlkNhQnSV4WkLrbtAO72t8HrP27E2ToNSRE/1cHfWzq3kpiCbebwtjj
aYjXQFOfs0ic9+RD97AZQdQny8D3CBp8gc3jgMxrkqiqTMWlBLInygNHuOc2RSvH
4KZs4xf8YSGfnZQra1/P1yE/+AJkQZ9QgqL2OG3TIska3b61Wi4FBnyUCzioV1Sp
fk73OZJvjK5h2Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:24:59 2026 by rpki-client