Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/9mdTRY_iqSQPU98eSDYHaCCAvGQ.mft
File:                     9mdTRY_iqSQPU98eSDYHaCCAvGQ.mft (raw, json)
Hash identifier:          GK+wMmN3t37E5vJCYfzHhYRKDvWWtlI3+euYGvivvwg=
Subject key identifier:   E7:A3:C7:15:62:10:24:C8:C2:87:FF:E3:60:88:B7:1B:50:DB:51:3B
Authority key identifier: F6:67:53:45:8F:E2:A9:24:0F:53:DF:1E:48:36:07:68:20:80:BC:64
Certificate issuer:       /CN=f66753458fe2a9240f53df1e483607682080bc64
Certificate serial:       01A0CE246D6FADAF5BC2AC3F3824B584924E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mdTRY_iqSQPU98eSDYHaCCAvGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/9mdTRY_iqSQPU98eSDYHaCCAvGQ.mft
Manifest number:          97
Signing time:             Wed 23 Sep 2026 12:01:28 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:28 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:28 +0000
Files and hashes:         1: 9mdTRY_iqSQPU98eSDYHaCCAvGQ.crl (hash: qvOeSY+cqyuFa5GZ3Tqg5FgVH6R9Ru2gNgeVP1uTTUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/9mdTRY_iqSQPU98eSDYHaCCAvGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/9mdTRY_iqSQPU98eSDYHaCCAvGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9mdTRY_iqSQPU98eSDYHaCCAvGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:6d:6f:ad:af:5b:c2:ac:3f:38:24:b5:84:92:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f66753458fe2a9240f53df1e483607682080bc64
        Validity
            Not Before: Sep 23 12:01:28 2026 GMT
            Not After : Sep 24 12:01:28 2026 GMT
        Subject: CN=e7a3c715621024c8c287ffe36088b71b50db513b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8f:70:58:7b:6a:7a:62:d3:05:dc:80:48:d4:
                    6f:ae:ef:3c:f6:09:eb:02:8d:46:f8:c0:0e:33:03:
                    aa:c5:70:f1:28:5e:4d:f0:c7:28:96:db:66:8c:9b:
                    08:d4:12:66:b2:46:37:a7:25:1f:b4:dd:27:3f:d2:
                    20:a7:7c:44:cc:58:b8:6a:13:54:d5:5e:c4:3c:c4:
                    d8:08:05:2b:95:b5:ee:da:16:0e:b0:59:cb:1d:fb:
                    38:28:17:23:0d:e3:5b:1f:b1:cd:6f:f6:ce:7e:6e:
                    9b:17:18:72:8f:6c:f9:42:c5:9a:63:cc:8d:69:b1:
                    ee:b5:83:48:5c:cc:e4:2d:53:0a:78:b6:61:17:23:
                    8a:5b:b4:43:bc:e2:14:74:ea:9a:6a:1e:91:62:90:
                    de:04:69:25:0b:72:fa:7b:8e:51:95:30:0e:1b:5a:
                    ea:3e:d4:f0:66:57:06:ed:7d:d3:42:6e:61:ff:79:
                    6c:b5:e8:27:83:8e:ce:92:e7:aa:e3:1b:ac:c0:11:
                    32:f1:dd:c2:70:28:8c:1c:89:1b:67:0c:f9:30:97:
                    33:16:e1:ce:7c:35:99:11:f0:02:89:be:a0:b6:ae:
                    2d:a0:3e:ca:23:6e:02:2e:f0:a7:d0:2e:6f:59:f9:
                    c7:19:e9:cd:05:72:8a:61:73:c0:7f:e5:b3:37:78:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A3:C7:15:62:10:24:C8:C2:87:FF:E3:60:88:B7:1B:50:DB:51:3B
            X509v3 Authority Key Identifier:
                keyid:F6:67:53:45:8F:E2:A9:24:0F:53:DF:1E:48:36:07:68:20:80:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mdTRY_iqSQPU98eSDYHaCCAvGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/9mdTRY_iqSQPU98eSDYHaCCAvGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8f0ff8-32b9-4408-b0d8-d657fef4a05e/1/9mdTRY_iqSQPU98eSDYHaCCAvGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:4d:44:17:bd:80:21:8f:4b:5f:d4:e3:75:95:47:73:ca:
         2d:97:4b:8c:c6:5e:11:e3:2b:46:51:95:4a:b3:f9:e9:99:89:
         3a:57:8e:e6:b6:76:8e:de:9e:8b:5d:d7:01:e2:de:dd:2b:5a:
         aa:c8:3c:98:e5:f2:dd:16:6a:b6:4f:c1:a9:bf:a2:8a:cf:02:
         90:2b:cb:c3:ba:80:a8:a9:5e:6e:fa:4b:4c:a1:34:b6:0b:09:
         5a:09:01:48:fe:fc:f5:1e:23:d7:52:af:fa:8a:80:18:23:21:
         83:56:6d:1a:5f:4e:39:b4:39:7b:f3:5a:d7:5c:7f:51:07:bf:
         8b:8a:12:3f:1b:e8:c3:28:34:03:82:85:68:2c:77:e9:39:24:
         fd:11:f7:de:a9:b6:73:27:a1:0d:8b:52:65:ce:b3:a1:cf:6c:
         94:33:c6:18:6a:43:ca:0d:45:99:47:7d:6e:c5:64:59:97:75:
         a1:11:4c:13:40:00:0b:a5:d9:ae:2c:65:1a:78:2b:bb:0e:8f:
         25:62:ca:75:22:b3:ff:6a:d8:1c:dd:39:55:b3:40:d7:ae:cc:
         ba:da:b2:8d:dd:20:34:62:ee:0f:50:c0:98:8c:d7:46:dd:5f:
         89:ff:50:47:62:1c:21:a2:c7:eb:8d:b3:9f:ec:ee:38:01:c5:
         23:68:5b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:36:21 2026 by rpki-client