Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
File:                     9oBoAaqBnIocqImNFZiUkJzoKCk.mft (raw, json)
Hash identifier:          MQnVm+/ZUqdBbLKwoc7E0fYOXfp7GF44/RjQkuck/Yg=
Subject key identifier:   4A:B6:15:E6:6B:82:D9:E7:E2:4A:79:21:C7:C7:AB:F9:48:DF:00:A0
Authority key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Certificate issuer:       /CN=f6806801aa819c8a1ca8898d159894909ce82829
Certificate serial:       01A0D383D0511316423DF595ACF59A333EE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
Manifest number:          017F
Signing time:             Thu 24 Sep 2026 13:03:46 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:46 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:46 +0000
Files and hashes:         1: 9oBoAaqBnIocqImNFZiUkJzoKCk.crl (hash: gjoTx6KpCidLsRiyrLO2GzMxiKh9IpOs69OMFbAsR38=)
                          2: ystfWuwLG_sjkRPz74-K9kJmCS0.asa (hash: A/Zpc7HU31s0tuJut1dPdLlpZdSrvy9Su9vtCFoJBpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:d0:51:13:16:42:3d:f5:95:ac:f5:9a:33:3e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6806801aa819c8a1ca8898d159894909ce82829
        Validity
            Not Before: Sep 24 13:03:46 2026 GMT
            Not After : Sep 25 13:03:46 2026 GMT
        Subject: CN=4ab615e66b82d9e7e24a7921c7c7abf948df00a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:fb:e4:0a:26:40:3f:28:b3:82:e4:53:94:
                    f9:1d:d1:ba:f9:a1:d3:58:b0:2e:41:db:58:b3:9d:
                    af:f6:97:53:b4:c7:a8:0f:02:e3:84:9e:f9:22:8f:
                    9b:f3:e9:94:91:1c:ce:9e:27:49:1e:4c:e8:a4:c9:
                    13:c3:a5:60:e9:37:0d:5e:f4:88:6f:0b:0c:2d:c5:
                    08:a0:36:11:d7:13:e7:ce:04:00:e6:24:93:53:ce:
                    9a:49:97:44:52:56:78:3a:db:8f:14:29:7c:e3:e6:
                    33:71:7b:1c:dd:d6:96:a4:c4:6e:77:fa:6a:4b:20:
                    15:db:20:23:46:59:8f:ee:3d:d0:ef:77:e0:6c:de:
                    bf:9e:9f:62:c2:c5:fa:dd:d1:ad:3f:ff:51:57:24:
                    f6:81:c1:ef:6f:f5:a0:b2:51:64:9d:f4:ff:50:d6:
                    9d:ae:9e:d6:22:42:8c:c2:16:77:bf:57:f5:1f:dd:
                    26:00:f2:80:ae:dd:01:99:c9:fc:e3:49:bf:58:f2:
                    59:e5:0f:ca:13:30:78:f6:5f:07:78:63:a6:e9:71:
                    c5:bb:f2:4a:b1:9a:4e:15:d7:12:74:dd:aa:db:6c:
                    de:f0:65:83:fb:db:0b:1f:fe:8d:44:b9:a5:6a:e5:
                    b7:8b:53:53:b5:a0:63:da:de:68:b4:c3:07:a5:aa:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B6:15:E6:6B:82:D9:E7:E2:4A:79:21:C7:C7:AB:F9:48:DF:00:A0
            X509v3 Authority Key Identifier:
                keyid:F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a8:e9:85:1f:92:f6:e6:b5:9d:d3:3a:ba:2c:d1:c7:b6:35:
         52:90:91:f6:ba:66:ea:d1:1b:20:06:ff:d3:56:10:0f:76:ce:
         40:33:35:3c:44:11:e5:12:22:00:15:7c:0a:69:eb:d1:ae:72:
         bf:eb:bb:6c:d9:e0:ce:0e:93:a1:e7:4c:f5:48:dd:98:8e:3f:
         9e:8e:5e:da:de:7a:57:14:03:d8:b5:d7:27:9f:52:d4:5f:50:
         3f:34:18:2e:98:5c:7c:54:f5:8b:7e:4c:53:f7:93:85:51:a4:
         e9:5f:9f:db:71:36:c3:56:b1:14:4d:cb:44:b4:f2:74:e1:84:
         06:9d:b7:08:ad:50:de:fb:2f:83:72:1f:e0:9a:d4:b8:9e:72:
         27:c8:a7:b9:ac:e8:65:9a:51:f7:de:af:ae:ca:d7:33:d2:92:
         57:66:15:1b:d8:5f:8c:c3:16:4c:5e:bf:55:75:0e:9e:ca:3a:
         f6:5f:f3:04:de:a9:66:18:39:e4:f4:4e:22:69:1c:dc:8d:dd:
         3d:01:f9:22:e2:a5:c5:75:72:a9:50:fd:ac:ee:9b:7d:dd:9c:
         bb:56:b9:8d:07:33:a0:7a:5c:ca:f5:b4:18:e9:f9:de:2f:23:
         09:b7:d9:60:a4:f8:54:41:28:78:04:3a:17:33:07:7c:df:45:
         26:71:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:20 2026 by rpki-client