Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File:                     du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier:          bE3K1VtJstliAd3oGBjjQ6DdmtJZZXmh3Oz+Cxo9xgk=
Subject key identifier:   CF:18:37:75:A6:77:A9:36:D2:08:1A:D3:37:67:C9:80:08:10:7C:2D
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer:       /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial:       01A0D94C9E2D1D9168490C82CADD739A8170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number:          09E6
Signing time:             Fri 25 Sep 2026 16:01:11 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:11 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:11 +0000
Files and hashes:         1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
                          2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
                          3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: as3PzI3PVjgNbsdW+NZeyUdJCpX5LR6UIhv+Ny+qT9g=)
                          4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
                          5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4c:9e:2d:1d:91:68:49:0c:82:ca:dd:73:9a:81:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
        Validity
            Not Before: Sep 25 16:01:11 2026 GMT
            Not After : Sep 26 16:01:11 2026 GMT
        Subject: CN=cf183775a677a936d2081ad33767c98008107c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:1c:22:a5:aa:4a:94:12:2d:ad:c2:e2:4d:
                    9a:08:f8:76:11:0a:14:ef:46:c6:43:94:bd:88:71:
                    29:9e:8e:de:a7:28:d2:e9:0d:f5:c3:1a:27:4e:46:
                    e2:d1:16:4d:d4:98:32:f8:b3:ab:59:53:b5:06:28:
                    97:b6:20:c7:ab:03:8e:b7:06:4e:e2:95:54:8e:1c:
                    fa:71:8f:4d:f7:9c:88:78:4b:fd:70:bf:d4:7a:d7:
                    76:11:ba:9b:da:2b:f1:2f:2e:e6:ea:a9:38:bf:86:
                    9f:aa:70:de:8e:7f:17:21:1f:f2:ea:fb:54:77:2d:
                    07:1f:a2:11:9d:e2:dc:e5:d2:6b:79:b9:75:c4:f3:
                    67:e6:f9:26:27:c2:01:37:59:d4:99:2e:c4:b1:b4:
                    0c:11:14:18:01:c5:6a:e0:fe:49:5f:bf:1a:b4:b8:
                    19:2f:c5:f2:8f:62:00:d5:9c:32:5a:f2:5b:c0:c5:
                    de:ea:89:34:0e:f6:b7:10:81:1b:c7:82:83:65:95:
                    d4:17:4a:6c:e7:2e:7d:f8:da:b2:9c:4d:d2:fd:a4:
                    7f:be:40:2a:08:cd:d9:b7:c0:35:79:e9:d6:62:33:
                    5c:7c:db:a0:b2:12:a3:62:94:86:6c:31:5f:36:40:
                    a1:54:01:94:9b:b3:28:b5:a6:a5:34:fa:da:1d:3c:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:18:37:75:A6:77:A9:36:D2:08:1A:D3:37:67:C9:80:08:10:7C:2D
            X509v3 Authority Key Identifier:
                keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f5:8d:7b:b5:46:a5:a7:e7:8a:c9:6e:7c:43:3a:95:0b:f7:
         fa:91:d1:7c:af:00:c9:34:36:f2:fa:bd:21:5c:31:68:03:19:
         6e:80:41:fb:0e:ef:9a:61:21:b3:97:fb:25:17:1f:34:c6:0e:
         28:30:d1:af:32:81:6a:4b:76:b8:cf:bb:7a:d8:7b:e0:e9:d0:
         2c:2e:f6:72:e9:11:99:58:f4:18:dd:a5:8c:57:af:e5:9f:5c:
         89:4d:41:68:49:a6:33:6b:08:35:8c:29:20:fc:96:42:e6:15:
         1a:6d:9a:5a:d9:1a:76:6e:51:b7:9a:92:c7:20:0e:57:00:fa:
         c1:e3:f1:4b:d8:ba:7f:c1:3f:ba:da:e8:1f:40:6f:da:46:dd:
         30:b8:55:98:00:a0:8d:94:6d:55:45:29:d6:5d:59:e9:c3:72:
         15:62:52:a7:4e:48:52:13:2f:da:7b:e8:08:e0:88:c4:50:29:
         ed:b6:04:fc:fa:1f:57:1e:cf:1f:93:34:05:9c:16:b9:c2:5f:
         ce:02:ad:6e:c0:9a:20:2d:a2:d9:57:8e:d2:a2:58:aa:59:f2:
         52:1c:93:c6:2a:a1:16:81:34:c2:1f:20:89:28:cd:cf:47:38:
         41:19:31:0e:29:76:8e:55:c8:7d:73:c4:22:a7:d3:c3:00:b6:
         76:ab:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:47:54 2026 by rpki-client