Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
File:                     m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json)
Hash identifier:          QWspuzDPhlmp50AO1jyp2T4NPPwRnJQUEc9x+P4EIVc=
Subject key identifier:   CB:F0:35:47:EA:A7:47:C1:C0:3E:EC:FF:7B:46:CD:64:CC:49:F8:88
Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
Certificate issuer:       /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Certificate serial:       01A0DBA97795D8CFCB3D9E2CCEBC5EEF66E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
Manifest number:          15C4
Signing time:             Sat 26 Sep 2026 03:01:51 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:51 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:51 +0000
Files and hashes:         1: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: z1c9IH9i1g+OCZuXpUDhmezRfP0w5HJTSOiR4KXIYwk=)
                          2: wSRzYr55-4ZeS-gPCPrQ29jB9iw.roa (hash: NbvG7X6vkEtFD9/ZukAk8NJl9uOur/Cl3YOKKjQ2YLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:77:95:d8:cf:cb:3d:9e:2c:ce:bc:5e:ef:66:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
        Validity
            Not Before: Sep 26 03:01:51 2026 GMT
            Not After : Sep 27 03:01:51 2026 GMT
        Subject: CN=cbf03547eaa747c1c03eecff7b46cd64cc49f888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:b3:be:8f:f6:62:81:ae:1a:d2:5e:7e:17:
                    34:67:79:0f:b8:83:12:c5:69:b6:33:20:74:39:04:
                    4d:ac:05:ef:1c:52:ea:c9:89:b6:ea:a6:0e:19:59:
                    3d:e5:aa:2e:ec:ba:a1:60:5e:85:af:d8:a7:ef:06:
                    76:a7:0c:96:2a:22:19:ea:5c:54:3e:85:97:69:de:
                    0a:d9:e2:c7:7f:5e:c9:d8:f2:cc:ab:10:98:cd:87:
                    7c:7c:57:6d:af:39:8b:de:50:fc:d2:62:9f:44:b6:
                    76:39:36:b3:4b:e5:47:89:84:41:b4:e5:ff:42:78:
                    ed:e4:d8:aa:47:11:16:ba:98:7c:8c:0d:2d:f4:9a:
                    83:99:2a:e9:76:a5:4b:24:ee:11:00:86:57:40:9b:
                    43:b2:d2:7e:26:51:20:d1:7e:12:8b:51:e7:9c:ac:
                    46:a7:7e:80:f0:c0:87:e8:06:5b:11:d6:f4:9b:17:
                    d6:2f:7d:0b:be:7c:7b:f9:78:f8:67:2f:45:20:b6:
                    9e:9d:2a:bf:21:15:30:de:9a:ed:94:44:d9:14:bf:
                    16:f9:b9:13:1d:9e:89:c0:e9:7e:de:ca:31:d0:67:
                    b6:c5:8c:7a:fe:8c:08:ea:4b:f2:92:02:8a:11:5f:
                    ca:0d:bb:8d:ee:6d:dc:91:00:49:e3:12:d5:fc:4c:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F0:35:47:EA:A7:47:C1:C0:3E:EC:FF:7B:46:CD:64:CC:49:F8:88
            X509v3 Authority Key Identifier:
                keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:90:05:82:46:65:98:02:35:6c:5b:cd:22:8c:08:d1:eb:78:
         a8:e9:d5:ff:26:27:cd:09:71:4a:c6:fc:13:97:00:63:6d:e2:
         33:ee:ea:ad:cc:49:5c:78:16:63:11:1c:0a:a8:39:15:8d:d0:
         a9:6f:75:46:a0:f3:79:5e:41:b1:85:57:46:8d:47:7c:86:9c:
         ad:52:9b:e4:56:43:34:70:d3:98:f1:d8:2f:d5:36:03:84:35:
         45:fa:0f:ce:c4:72:a6:8f:66:d9:05:8a:5f:a3:09:c7:26:4f:
         a1:dd:ae:ec:0e:be:82:d9:71:b9:f4:c0:35:0c:ce:89:8c:92:
         7e:5c:b7:dd:b6:02:5b:b0:4b:4c:5c:c7:4b:fd:3f:d7:fc:08:
         15:0f:c4:4b:0d:e8:33:42:be:29:9f:34:3d:fd:51:1b:51:81:
         42:27:a7:18:35:b4:98:ab:dd:b0:c4:91:4e:f6:bf:d1:62:75:
         d6:86:22:69:e6:4a:14:62:d2:24:1e:29:be:35:7c:f7:ca:83:
         7c:69:19:bf:61:77:b3:c4:e8:18:30:a9:3a:83:62:71:33:f5:
         ae:ca:65:d4:05:0b:17:0e:4a:6b:10:d5:e5:69:3f:a5:25:0e:
         3f:fb:1e:ea:ef:ba:78:08:22:fd:96:b5:8f:e1:ad:b8:a0:7f:
         fd:84:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:10:21 2026 by rpki-client