Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File:                     9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier:          5FqaGF9bArzd3s/odmFXHWG+hoaf/euALgYkIDVSBmw=
Subject key identifier:   8E:5C:FD:8A:4F:13:CE:A8:C8:9C:09:F0:2D:CA:8E:31:5E:AE:ED:C1
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer:       /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial:       01A112CEA0ABD63E422E1156E912872629C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number:          0599
Signing time:             Tue 06 Oct 2026 20:01:33 +0000
Manifest this update:     Tue 06 Oct 2026 20:01:33 +0000
Manifest next update:     Wed 07 Oct 2026 20:01:33 +0000
Files and hashes:         1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: iVOBlxYbDQYvzfYlA8+XCDiRp1T1GPcuabOLcnvYYp0=)
                          2: AkoNp7KMgHGVYiPoIBw5-QnySUI.roa (hash: uyKZlkMV8M0PkPA0yQESHwlyfJoIcH2x8/4qjtDWr6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:ce:a0:ab:d6:3e:42:2e:11:56:e9:12:87:26:29:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
        Validity
            Not Before: Oct  6 20:01:33 2026 GMT
            Not After : Oct  7 20:01:33 2026 GMT
        Subject: CN=8e5cfd8a4f13cea8c89c09f02dca8e315eaeedc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:31:30:dc:2e:b7:23:1e:24:7d:63:73:45:
                    64:06:04:fe:e7:9e:cb:8b:e2:4e:83:89:4b:f8:28:
                    07:ca:85:eb:2d:96:6a:77:15:e5:b1:38:e8:ce:63:
                    df:b2:f2:f2:15:73:b1:a4:03:38:7b:8b:07:a5:cc:
                    93:ff:66:7f:90:78:35:e2:73:ae:4c:40:cb:96:d7:
                    1f:b1:a2:68:6e:0d:69:b8:5c:24:67:50:21:dd:e6:
                    1a:39:5f:5f:58:c3:4b:9c:1d:74:3f:be:37:02:68:
                    3d:e2:de:a2:83:0a:a3:83:81:b4:13:97:b0:1f:0d:
                    60:9e:ea:95:8c:83:a6:ac:56:4b:1d:91:b6:99:ba:
                    c7:19:19:96:ff:9b:38:e6:6b:48:68:0c:6f:73:a6:
                    74:84:ad:e5:09:2b:84:21:a0:25:5f:1d:0b:1e:b9:
                    fa:27:a3:2c:36:44:12:ae:ac:4b:db:80:cc:eb:ab:
                    8c:97:8a:8c:ed:92:7a:e6:03:68:64:c9:a9:19:d0:
                    0d:c6:e3:df:e3:0f:5c:17:15:91:22:b1:40:d0:65:
                    fc:95:2a:a8:42:1c:1b:b0:2c:63:78:57:fa:41:10:
                    41:18:72:04:3c:2c:a7:74:ff:ab:01:25:c2:f6:93:
                    0b:60:ff:10:aa:63:36:98:c5:fa:5f:fa:70:f5:a0:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5C:FD:8A:4F:13:CE:A8:C8:9C:09:F0:2D:CA:8E:31:5E:AE:ED:C1
            X509v3 Authority Key Identifier:
                keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:97:dc:8a:3e:f5:03:e6:e2:81:d9:57:37:b9:a1:15:ce:
         f9:9a:10:6f:24:ae:45:35:cb:38:c3:60:e2:da:81:ff:03:35:
         1d:dd:64:4a:8d:50:12:bb:8c:c4:da:fe:f4:fd:fb:19:7a:38:
         0c:a3:69:58:03:38:c5:b6:ed:5b:6d:b0:76:b6:63:e3:06:4f:
         34:2d:44:3f:d2:9b:6c:89:9f:70:7e:82:50:86:6d:38:84:d0:
         a3:d8:fa:20:fe:8a:6c:ac:37:f2:9f:e2:84:94:3d:6a:f7:93:
         22:38:f6:a9:2d:c9:ac:4e:ea:81:24:14:1d:3a:3c:8f:4e:d1:
         94:bc:97:e7:65:92:7a:b1:2c:d0:c0:f2:31:cf:6d:64:8b:6c:
         ce:2e:6c:53:8f:df:fb:a3:ae:d6:32:7e:88:0c:64:ee:c6:bf:
         4b:fa:ad:6a:1f:eb:14:2c:9d:90:43:30:45:70:4d:03:9f:c8:
         62:35:3b:94:75:b5:3c:ef:8e:6b:f2:8e:e0:46:9a:2a:4f:29:
         ce:be:c1:ac:16:c2:6f:ae:31:f4:a8:dc:1c:7e:cd:77:7a:6a:
         2b:da:25:1a:01:ee:50:81:0e:8a:17:27:dd:7f:0d:9d:59:ed:
         c9:4e:77:1a:16:18:11:41:d0:89:b3:61:54:c3:6c:de:23:d9:
         df:b4:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:19:29 2026 by rpki-client