Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File:                     9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier:          Tzn/JwlGJOMmAgKmcazW4G5o2UHa/a8Xxz2wWDlxdxg=
Subject key identifier:   44:C6:CB:79:81:F3:D1:8F:C6:B3:D2:51:62:9C:2A:53:18:14:7C:6C
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer:       /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial:       01A0D8040665D93276972DFE0024B17DA42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number:          0E99
Signing time:             Fri 25 Sep 2026 10:02:17 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:17 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:17 +0000
Files and hashes:         1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: yx33no+w61Oc+mpjT6HG8ErgF9D5b32HPxJXwjc3Nc8=)
                          2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:06:65:d9:32:76:97:2d:fe:00:24:b1:7d:a4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
        Validity
            Not Before: Sep 25 10:02:17 2026 GMT
            Not After : Sep 26 10:02:17 2026 GMT
        Subject: CN=44c6cb7981f3d18fc6b3d251629c2a5318147c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:1b:9c:52:ef:57:93:94:83:a4:ae:ab:c9:
                    a4:5a:c5:39:32:9f:72:11:d6:c1:75:de:84:9c:35:
                    75:4d:48:68:fb:de:b7:ed:ec:13:a1:6b:aa:19:f3:
                    69:ae:90:1b:64:e1:ab:3f:fb:40:ef:63:7d:66:b0:
                    ec:60:15:34:22:13:23:00:97:01:e6:35:fc:c7:74:
                    0f:96:d0:cf:3b:ba:bf:8e:a0:d5:b5:87:b6:0c:3d:
                    d5:f6:36:00:64:5a:0f:1a:61:dd:d0:94:9a:4c:02:
                    e9:99:7d:75:c6:a9:01:c0:fa:a6:a5:94:8d:64:83:
                    61:57:8c:0b:4c:fa:71:69:c9:a6:52:f6:bb:4a:45:
                    e9:a0:59:69:77:e0:3c:e5:71:26:12:2d:ec:a3:73:
                    8b:2a:8f:bd:ce:35:01:61:bc:af:23:7a:d5:b5:6e:
                    21:f8:67:68:48:6f:70:95:f1:6b:db:07:8a:ba:ca:
                    94:6c:d2:2e:f6:fc:06:18:3a:8e:58:2b:6f:e8:56:
                    32:6e:69:0f:65:07:b5:37:93:c9:93:ca:56:b2:fd:
                    3a:57:8a:8b:3f:99:e8:85:bf:5e:26:56:8d:ae:22:
                    83:09:f0:a3:91:87:07:14:b4:08:85:b5:49:31:91:
                    54:7a:9c:39:97:a9:fc:b5:fc:92:d9:73:bb:9e:4e:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C6:CB:79:81:F3:D1:8F:C6:B3:D2:51:62:9C:2A:53:18:14:7C:6C
            X509v3 Authority Key Identifier:
                keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:62:94:63:83:82:7e:01:7d:b6:ce:06:6f:a7:75:81:a9:fa:
         5f:24:b8:65:8c:18:5d:88:4b:45:85:3d:91:ae:f8:16:05:6e:
         5b:f2:5c:c1:1f:32:b0:e9:3c:b7:83:3d:b2:b0:a1:37:f5:f3:
         df:7d:85:f7:37:03:ab:45:f7:a1:97:41:c5:a2:2b:9f:dd:9b:
         46:2a:de:54:48:5c:0f:47:d8:e5:4d:3f:47:5a:ee:ce:36:c9:
         50:14:c9:9d:37:7d:b3:a9:8e:44:ef:4e:06:25:d2:c1:d8:a4:
         a4:0e:8d:7a:4b:19:98:e5:1a:76:e0:a4:84:07:f9:66:48:c5:
         14:62:97:7b:9d:ab:d5:07:d7:ed:26:95:9d:20:a2:b5:c5:f6:
         c5:4a:fe:e7:6f:a4:31:a7:91:2c:d9:90:44:e9:d4:f0:59:17:
         48:a6:c9:df:b9:38:bb:ec:04:3d:cd:3c:08:73:83:e9:b0:9a:
         c5:f2:78:c4:75:c1:24:e6:17:d5:e1:6e:b3:ef:3c:90:e5:8d:
         cd:83:e1:77:cd:f1:56:1c:d9:b1:c8:1a:c4:03:6b:9c:cd:cd:
         12:03:22:d2:b4:cc:c5:f7:60:52:b3:34:e3:83:ff:54:72:b0:
         b2:e9:8e:62:c7:cc:8a:d8:80:58:db:cc:34:f1:95:bb:d8:e0:
         53:e0:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:44:38 2026 by rpki-client