Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File:                     9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier:          f0OukzHkHAZlozboHu97FhvJthfVA184S/TnuphtU1Q=
Subject key identifier:   F0:07:F4:17:AE:DE:C9:52:DF:1B:BE:7E:3F:65:69:DF:A6:AF:1E:9E
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer:       /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial:       01A0D0800905880D6F48770287205680C30F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number:          0794
Signing time:             Wed 23 Sep 2026 23:00:46 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:46 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:46 +0000
Files and hashes:         1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: AMAPhSNh9/qVOo2hevqoBfogimKGIkG0AyIlgOzDT88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:80:09:05:88:0d:6f:48:77:02:87:20:56:80:c3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
        Validity
            Not Before: Sep 23 23:00:46 2026 GMT
            Not After : Sep 24 23:00:46 2026 GMT
        Subject: CN=f007f417aedec952df1bbe7e3f6569dfa6af1e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9b:6f:58:2e:06:4d:4c:8b:52:7d:0d:74:dd:
                    b2:cc:48:e3:3b:9e:75:20:7f:9e:e7:7f:0b:14:35:
                    4c:cb:67:88:98:1e:74:b0:12:65:ed:d4:f0:ba:72:
                    23:18:67:05:88:22:8e:fc:6f:1b:f9:9b:15:65:18:
                    58:02:0c:42:d6:a7:92:d2:a0:e9:cd:78:ce:39:63:
                    56:d0:78:27:5e:9a:b5:48:c8:6b:cd:65:5a:d8:02:
                    5e:64:ff:38:2b:30:9c:c2:ad:09:b9:cb:61:45:f0:
                    d6:97:85:1a:21:a3:a6:b7:f5:c4:70:b3:11:fa:fe:
                    22:66:d2:68:7d:fd:8b:0b:bf:2b:29:ca:d8:d9:e5:
                    19:48:28:ca:2d:56:a6:96:83:b4:5b:c2:3c:07:c5:
                    76:df:88:ce:55:1e:bc:c4:0e:4f:a8:f5:53:f6:24:
                    5e:b5:7f:61:e2:d7:b5:47:5d:58:b4:aa:64:47:ed:
                    e2:ab:a8:09:47:75:42:37:a8:41:7b:8f:0c:32:51:
                    95:02:95:59:b2:44:54:5e:ae:e3:a1:60:74:c4:83:
                    6a:12:fb:e9:b0:f7:4d:28:50:c2:3f:f3:92:46:16:
                    46:d1:4c:e2:c8:7c:c8:72:c8:b2:ab:f7:87:e2:9c:
                    d4:0c:c1:4c:6e:97:99:fb:45:e8:92:83:f9:2f:26:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:07:F4:17:AE:DE:C9:52:DF:1B:BE:7E:3F:65:69:DF:A6:AF:1E:9E
            X509v3 Authority Key Identifier:
                keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7f:b2:9c:39:bc:22:b2:6b:c4:7b:57:99:58:8d:42:96:dc:
         18:d5:ef:83:c6:72:38:03:76:07:8f:ad:56:c5:32:4c:6b:5b:
         60:23:2c:b2:37:10:33:6a:c4:6a:0f:8d:fb:9d:5a:7b:d7:dd:
         61:3b:03:09:1b:fc:2b:49:2a:d6:53:a1:a6:ca:a5:b4:ac:f6:
         55:c2:6b:38:9f:2c:7a:79:80:ab:b3:d9:17:17:1f:5e:4a:ae:
         14:5b:da:d6:67:2a:5f:ea:f9:46:fc:f3:1a:92:6e:19:bc:1f:
         96:11:ec:4e:1f:ae:7a:10:42:bf:49:83:d4:ac:ab:9e:ae:2d:
         87:da:9b:96:dd:78:ad:13:a5:55:2d:75:34:72:48:04:bd:b0:
         62:97:b9:a6:f8:ab:36:bc:14:62:ef:50:74:66:82:21:b1:ff:
         d3:f1:32:52:74:0e:d1:ae:06:2d:a4:14:6e:c4:84:54:25:1d:
         01:7c:ef:c9:bc:6e:a9:17:85:3b:e2:f8:c8:2d:66:9a:da:4c:
         2f:3e:7c:06:9e:47:f1:5b:4d:b7:2b:41:31:13:59:24:c9:3e:
         18:d0:7e:0d:44:2b:63:7f:14:81:6a:24:59:77:df:1c:f9:ff:
         1c:33:f7:41:5e:cf:e9:00:8d:d0:33:a1:d6:aa:5d:57:2a:54:
         2f:59:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:17:40 2026 by rpki-client