Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File:                     0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier:          15Ihkr5uZB9dkjmBcZ1yJSgnF1SbPZbznw1tzvSRbjw=
Subject key identifier:   F0:3C:DF:A7:68:74:75:9B:EB:77:58:FF:89:FC:91:A8:2F:13:5D:4A
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer:       /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial:       01A0CE91D081F6896585AB97B39352A98619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number:          09F0
Signing time:             Wed 23 Sep 2026 14:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:57 +0000
Files and hashes:         1: 0HODiJ6zETUxB5V-7gVm2tivJwY.roa (hash: qGeG3nhf+YLEqzJKX+7cT8wuG9iiTSfd9cCIvKbcpI4=)
                          2: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: au+JZrC11D2VwrckA0cbRMM+m057kPkrYEAdchsYSo4=)
                          3: UwYA2ZqOaaqxV-SbROLNU0LYhKs.roa (hash: yo5jrp46t5eed1f0aD/LDv5fDkeM+5705upQY6SakhI=)
                          4: VVzdT8i8Ic0mJD0Mcn7QSzTVqqg.roa (hash: 2cduIqBhGdf+BQ9zIXwABKUp5BhlSqCikGKIR7rcdp8=)
                          5: jguZW_JXxXZXEs7UeDtL_uxFA7E.roa (hash: Di5fz7I66QZtyKR+rBwTjQSM3JlDgDmbsZZusapxtVw=)
                          6: s3WGIAUoxaXezGvnamEPgxxSe6s.roa (hash: m+UVZt/8nZjpbFNEjpwY5nsDKhbrb260ASrF4yP760c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:d0:81:f6:89:65:85:ab:97:b3:93:52:a9:86:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
        Validity
            Not Before: Sep 23 14:00:57 2026 GMT
            Not After : Sep 24 14:00:57 2026 GMT
        Subject: CN=f03cdfa76874759beb7758ff89fc91a82f135d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:f9:99:af:8f:38:f1:c4:44:d3:26:0f:8a:
                    4d:51:35:08:4e:82:30:49:cd:3c:90:50:ef:6f:6d:
                    7d:98:ad:d7:21:96:d7:c2:47:20:ae:6e:3b:25:ff:
                    0b:04:68:7d:ef:04:0b:0c:46:a0:67:75:12:45:cd:
                    eb:8e:29:05:d8:13:6a:88:8e:56:8f:af:24:ad:89:
                    0b:e9:72:93:1c:9b:ea:e5:c3:f4:a3:51:29:87:83:
                    78:9a:cd:cf:cb:07:9e:12:62:fb:31:13:c0:63:7a:
                    22:86:b7:cf:a3:43:2a:7e:e2:61:ab:0b:e9:a6:ad:
                    78:9f:8b:ec:cf:26:40:3c:a8:32:5b:60:6d:d9:d7:
                    82:eb:40:1d:49:09:a8:c6:db:96:59:97:09:6a:c4:
                    3e:95:79:ce:b4:2c:c0:e1:e2:91:87:cd:cf:55:81:
                    fb:2b:65:bd:ef:0b:66:dc:8e:14:56:1f:44:f2:5b:
                    59:6d:dc:82:4a:07:e6:53:d6:04:28:f5:1e:de:18:
                    8a:66:23:6a:fc:c9:33:78:36:22:16:d3:51:75:40:
                    7f:c7:58:2a:d2:7e:bd:00:de:6f:01:97:be:18:96:
                    47:d0:c8:67:0d:67:95:dc:24:32:f8:08:f6:ff:b4:
                    19:ce:5b:e4:c7:68:21:e6:44:d4:82:8a:73:ec:6b:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:DF:A7:68:74:75:9B:EB:77:58:FF:89:FC:91:A8:2F:13:5D:4A
            X509v3 Authority Key Identifier:
                keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:e5:b2:d6:73:ff:65:26:c1:53:96:22:3f:20:e9:d4:ac:
         aa:bb:fc:a9:9a:f9:39:1d:f4:81:01:a2:cb:0d:68:c2:66:5a:
         fa:85:ca:2d:b5:d6:7e:48:f4:73:bf:cd:e8:04:9c:c8:00:79:
         5a:a2:5c:5f:79:6a:97:a1:29:5a:e8:a9:83:ea:a4:25:95:72:
         23:be:14:4f:76:89:79:09:97:7d:05:7c:3f:36:19:99:5e:5f:
         c2:7f:97:ee:8a:17:15:f6:52:f8:61:06:c7:83:8e:5c:b9:16:
         71:97:09:1b:29:95:17:5a:5b:99:d3:36:4d:f8:c4:e3:12:c3:
         54:91:ec:d5:ed:67:06:7e:9c:7a:49:e9:2d:bf:da:90:a6:0d:
         ff:42:32:d3:de:42:7c:a0:79:c9:50:7e:15:b0:34:1f:fb:09:
         04:3d:29:a3:02:34:00:20:61:0a:30:76:dc:79:ef:ad:2a:d4:
         0d:b4:be:cd:24:e2:bc:58:b6:51:a9:63:76:e1:0b:9c:2c:9f:
         6f:fb:66:43:78:d0:08:33:0b:12:92:b9:95:a5:b9:97:48:53:
         a8:39:64:d6:e1:42:66:6c:c5:14:08:ea:99:ca:9b:4a:5b:95:
         f1:d6:09:45:01:19:4d:ca:8b:3e:96:f2:fd:4c:02:3b:01:27:
         c0:de:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:17:14 2026 by rpki-client