Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File:                     n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier:          Fw36kQ6ebtMkKEVrd9o2KhaRHUqUnUNnWVUSjS7yZt4=
Subject key identifier:   0A:38:9A:EC:FC:78:FB:28:D2:16:B1:90:22:11:E8:45:3A:6B:72:15
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer:       /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial:       01A0DA28ACB140DAA4EC19C0FBA16C8153A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number:          082F
Signing time:             Fri 25 Sep 2026 20:01:33 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:33 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:33 +0000
Files and hashes:         1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
                          2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: 3MLBoDcnACyU3+BttOrK9vj3b8bz2ADgixR51N3vLFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:ac:b1:40:da:a4:ec:19:c0:fb:a1:6c:81:53:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
        Validity
            Not Before: Sep 25 20:01:33 2026 GMT
            Not After : Sep 26 20:01:33 2026 GMT
        Subject: CN=0a389aecfc78fb28d216b1902211e8453a6b7215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:eb:73:52:ca:8e:04:54:2d:6b:4c:88:33:
                    7f:68:c6:17:ce:34:46:72:fb:d2:d2:50:e3:fa:0e:
                    9b:83:5f:e8:bb:fe:42:fa:44:5d:7b:49:3e:88:58:
                    8d:df:dd:ed:07:8d:9a:49:c6:94:fd:c1:8c:a0:b8:
                    86:6c:d2:21:22:c0:ef:a9:87:85:40:ba:da:71:a2:
                    18:44:4d:12:5b:fe:2b:65:c3:20:c3:69:3e:8e:25:
                    8d:ee:85:15:c4:ac:ee:3d:95:d5:05:32:6f:eb:0d:
                    ad:f1:7c:41:78:d5:c7:62:48:75:61:9f:91:95:59:
                    90:a6:a5:06:cd:61:52:d5:40:d5:a6:86:03:53:54:
                    42:a6:76:5a:49:52:f1:75:e2:31:60:e7:0e:0a:df:
                    60:bf:d7:ec:10:cf:15:70:5c:e8:98:d4:e3:a0:ab:
                    f1:f5:85:8b:ae:1f:2e:7b:d5:35:b4:51:0a:9c:62:
                    ab:43:25:2e:be:25:f1:a0:95:ac:60:78:f3:3e:4e:
                    c3:e9:2f:d7:77:32:6d:54:7e:f8:78:3c:6b:6e:ef:
                    14:b4:50:a4:7d:81:5f:0e:5f:b4:c4:37:0b:32:37:
                    f2:3c:da:29:5f:13:db:5c:84:1f:cc:05:b3:cc:7b:
                    1a:55:61:95:a4:8a:8b:86:b2:fe:61:d7:e5:29:2d:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:38:9A:EC:FC:78:FB:28:D2:16:B1:90:22:11:E8:45:3A:6B:72:15
            X509v3 Authority Key Identifier:
                keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:87:d8:a9:3e:87:ee:ff:e9:3e:cf:7a:f5:e7:4f:8b:54:80:
         46:80:21:c4:5c:e1:ea:8f:fb:16:d9:f0:de:68:e6:33:40:a3:
         73:27:64:81:8d:d9:21:40:c3:22:15:34:ae:c5:6f:ac:dd:4a:
         04:08:7b:72:07:00:7c:03:91:10:37:0e:a7:f7:fa:22:73:75:
         54:f2:56:8f:52:81:2e:80:9e:72:fd:b7:57:fb:c8:f3:ef:57:
         1f:13:6a:e2:69:ec:65:36:1b:18:31:da:d7:51:c0:c1:24:30:
         cc:2d:b3:cf:34:82:b6:91:19:c5:76:a7:7f:7a:e3:4d:83:49:
         08:bb:2b:90:b5:8a:fb:00:c9:c1:ec:0d:01:0d:4b:ca:1a:36:
         29:b0:1e:ae:2b:66:d6:53:ad:39:3f:85:4d:b7:af:36:9f:0c:
         54:d6:7e:14:ab:98:02:dc:18:dc:df:97:ba:e2:41:99:b9:dd:
         74:89:52:d4:86:b8:2e:56:11:f9:38:e6:3f:5d:1d:71:64:1e:
         42:96:86:87:2f:28:b0:6d:dd:12:f7:db:49:47:e4:77:81:9c:
         be:90:79:8f:56:39:79:86:05:3c:ce:38:94:ed:5e:ee:2c:91:
         f9:59:29:bb:1c:61:8c:fe:64:bb:e8:0f:14:48:58:0f:8d:a9:
         80:96:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:42:21 2026 by rpki-client