Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
File:                     9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft (raw, json)
Hash identifier:          /F3fK6LJJHyR9hF45XH+F69AmZTrmXXdrEV/oRd1M2U=
Subject key identifier:   BF:9D:7D:F3:0D:6D:8C:BB:80:92:F1:2E:8A:49:A9:4C:A9:68:E6:E0
Authority key identifier: F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
Certificate issuer:       /CN=f503b683d74086443bd44e6d92b71776c5c35170
Certificate serial:       01A0CC35431A32DD70723FA5836268C28BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:00:37 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:37 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:37 +0000
Files and hashes:         1: 9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl (hash: L4XgdqUx4i5EOMWbACd4OlLrlCNl2JHmCRZFl5Tr3Gk=)
                          2: HTNsugke4MWbq-KA8tY6qGsGFPU.roa (hash: Mi9NVud1o7sRwVPeXhNA2XrKJJxoAf4148gfz5Otapk=)
                          3: JJ3xHddZ0I1G4GC6ngsCT2Z1AKg.roa (hash: p0H/nJ8SSJawvhGyEkFr2hf/MirWYL1XCitw4pi102Q=)
                          4: _tSwCFIyoro2_8fyrvvppEiqvS0.roa (hash: TVivWAxuruX7VGe8Ch5xumfC8p0/dufE200KVqqhK0s=)
                          5: eFymynVjt6vNLX6dgR8AMKIzfPY.roa (hash: HmoMiqC9o5KMCkBBFDS5GyMpNG5AXy7PpIEPOGUNk+k=)
                          6: yPbTPygA04jm5b6RI-fjv8j8p54.roa (hash: Mw7So9/gLa1JzNMQ+Fuh1uffOAeMJx7QSDexSxpXoso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:43:1a:32:dd:70:72:3f:a5:83:62:68:c2:8b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f503b683d74086443bd44e6d92b71776c5c35170
        Validity
            Not Before: Sep 23 03:00:37 2026 GMT
            Not After : Sep 24 03:00:37 2026 GMT
        Subject: CN=bf9d7df30d6d8cbb8092f12e8a49a94ca968e6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:13:43:c7:19:e2:b0:e9:6f:19:8e:e6:64:
                    74:7a:95:a9:d9:6c:6b:56:00:2c:f8:2f:5c:f5:69:
                    d2:b3:17:3e:7b:bc:5f:87:c5:e5:2e:49:13:0d:5c:
                    ee:14:70:10:90:82:41:5d:02:3e:4d:ad:74:5b:91:
                    87:ed:f2:c6:2c:5b:8a:ab:d4:25:e2:2b:8a:19:9f:
                    b9:de:e6:19:84:d1:23:a2:dd:b7:59:d2:2b:0a:fa:
                    3d:ce:7a:65:b2:4b:4b:78:ca:af:0f:29:c3:ad:45:
                    29:b4:3d:f3:d0:1e:5b:19:94:6a:ec:c0:53:46:90:
                    41:03:be:45:e3:da:82:9a:69:bb:f0:8b:99:3b:1c:
                    4d:d4:fc:ee:9b:03:2b:f7:08:53:76:34:31:33:f6:
                    72:d6:1e:11:30:08:ad:ef:1b:8e:3b:d9:61:ee:0d:
                    7c:4a:d5:1f:18:24:f4:e3:e2:a7:49:40:4f:90:8d:
                    43:ac:fb:5a:57:55:43:5f:eb:54:a5:2b:ed:9f:7e:
                    80:9e:4f:3c:3a:83:4d:e2:20:07:0d:b1:1b:eb:36:
                    24:5f:4f:38:8d:11:cd:57:da:80:ec:c7:b0:52:85:
                    d2:2e:b5:e4:3e:7c:7b:41:64:41:4f:02:bd:a5:f8:
                    8d:7f:cc:0c:bc:0a:49:5c:95:53:ee:27:81:12:61:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9D:7D:F3:0D:6D:8C:BB:80:92:F1:2E:8A:49:A9:4C:A9:68:E6:E0
            X509v3 Authority Key Identifier:
                keyid:F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b3:46:9e:ea:5f:a7:cd:0d:a6:6d:05:a4:cc:9f:10:33:fd:
         e3:c5:64:22:74:c8:f2:33:ec:8d:e9:6d:7b:4b:27:d5:ac:63:
         1b:e5:8d:a3:19:14:4d:19:42:b2:a5:77:5f:00:de:81:9d:75:
         7a:78:71:3c:a0:a4:c6:02:93:60:96:e4:1c:9c:bc:f1:15:e6:
         67:88:6d:81:01:f7:59:cd:70:07:98:8e:a0:8a:42:83:2c:99:
         8b:05:f5:11:39:3d:f5:3d:dd:e1:f0:b4:73:62:a9:68:17:40:
         3e:b3:ab:f1:88:c4:4a:2f:ba:ab:38:83:df:77:71:00:09:d2:
         00:3e:31:4a:13:d2:81:9d:ad:0e:9c:0f:9d:16:52:b5:89:75:
         e4:70:5b:32:c5:e4:91:8d:38:6f:5f:a8:00:93:d0:24:ab:ac:
         4e:19:7c:b5:11:18:cb:88:98:d1:53:c3:7c:d6:93:cb:ac:55:
         82:83:b5:86:81:a9:8a:fc:ac:70:e8:51:6a:3c:ae:f5:6d:12:
         27:87:bb:1b:8d:e6:fd:f6:d0:d4:78:ac:33:83:31:ab:2d:dc:
         f5:c1:2f:6c:a8:ae:88:7a:e4:ae:07:fb:bf:e5:ef:28:d1:5a:
         c1:be:5e:4a:6c:07:6a:70:1a:78:94:3b:48:a0:8e:9c:b6:ef:
         ee:cf:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:16:31 2026 by rpki-client