Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File:                     39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier:          lpZsHsgw4jXkol8Mnrch7euMXY3osKKcu3tz3R1E2NU=
Subject key identifier:   08:F3:65:C4:B7:C2:AE:C7:3D:49:D7:F5:D5:6F:40:D5:20:65:88:97
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer:       /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial:       01A0D0B6D0AFB764DF86AEEBB7F246C28549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number:          0955
Signing time:             Thu 24 Sep 2026 00:00:36 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:36 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:36 +0000
Files and hashes:         1: 1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa (hash: tt15uIuTQgd6Syibc3srDH+USXZ4ejIXqOAjH/FfWt0=)
                          2: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: nGxbQzIHeKdvXn5Kx8KIAwcDOivPcXqZ7MePdpWWa5I=)
                          3: DbKSgaJwD4s0pMi5dIKaS74GVd0.roa (hash: T+MZOVnJ5hOhtVk6sS/9F3yH/t9bf3m1uORMjvQu1Mw=)
                          4: FcXv6_6IBhw3gOJhd-oIzN0MdTA.roa (hash: QOZ8gHmHm+d2woOpHnxCfU5p8HTqH4kCDsC9bYWmmqM=)
                          5: QTUs2t29sOiO1bQndfZmKxNAYdQ.roa (hash: myzQSNEVPstuOfu5qsB9AEg4A9vQ4YhsK6/lq/QzmjU=)
                          6: V0dM0OGiOIRr_LANVdvcw5kopNw.roa (hash: LNRzC3fIfmhFsLHaDaO4AM9qxVQUMv8ErtHtGjlMGJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:d0:af:b7:64:df:86:ae:eb:b7:f2:46:c2:85:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
        Validity
            Not Before: Sep 24 00:00:36 2026 GMT
            Not After : Sep 25 00:00:36 2026 GMT
        Subject: CN=08f365c4b7c2aec73d49d7f5d56f40d520658897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:1e:97:1c:51:62:b8:4e:f1:7f:52:b5:53:
                    2f:64:89:52:44:3e:e9:91:fd:ac:54:2a:24:3b:24:
                    b0:07:e0:ba:4f:6f:8e:93:15:9e:fe:6e:2e:0d:0d:
                    e3:f3:44:d8:f7:21:08:a1:a1:5e:4e:ce:ba:fb:10:
                    3a:09:06:26:8c:0c:b3:bb:13:91:01:98:b6:2f:8e:
                    ee:33:24:cf:4b:3d:29:51:dc:aa:9a:e4:9d:83:c9:
                    3a:e7:8d:7a:19:2a:55:3c:4d:2b:47:c7:f9:c8:ca:
                    21:34:6f:b1:58:75:e0:5d:61:a8:35:9c:81:2e:5e:
                    40:7c:11:bf:d6:85:af:e5:0c:f0:ec:55:30:61:d1:
                    5a:53:89:63:75:05:6a:ce:c5:4d:91:33:5e:ec:ad:
                    a4:1c:fa:64:05:48:b6:20:78:10:a5:85:fa:11:a0:
                    2a:3f:22:76:71:49:db:fe:b8:8e:5f:63:a5:0e:de:
                    16:91:41:ed:f3:42:23:ba:fd:44:03:3c:28:17:a6:
                    01:2a:67:a3:33:b5:a2:28:95:04:ff:3e:0b:26:1a:
                    95:75:d6:d1:df:be:0d:e9:4a:23:be:ad:15:bb:54:
                    9d:35:db:0c:1b:e9:01:ce:2f:c2:52:ec:5d:82:ed:
                    d4:82:00:5b:f8:e7:a4:7a:35:d8:f4:93:49:d0:c8:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F3:65:C4:B7:C2:AE:C7:3D:49:D7:F5:D5:6F:40:D5:20:65:88:97
            X509v3 Authority Key Identifier:
                keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:07:e9:a7:44:d4:14:ac:55:24:d3:07:7b:6d:1f:d0:dc:1c:
         bf:11:54:30:79:07:17:fe:7f:e1:77:ba:7d:8e:cf:d5:b2:a1:
         1d:48:22:60:52:39:82:b2:b4:7e:56:66:8f:02:35:02:8d:df:
         4f:f1:c4:e4:56:9d:96:11:a7:77:a6:36:35:0a:a2:44:e6:97:
         a5:8e:f1:23:72:83:cd:5a:b5:49:92:0a:95:64:16:0a:86:a0:
         c2:3b:e8:01:d2:a7:8f:b3:1d:1d:d7:82:f3:0e:d3:89:c7:ca:
         7a:e6:2d:08:53:62:e7:c5:c6:22:5c:b7:0d:2b:75:45:9d:27:
         25:08:d4:f1:bf:d3:b6:1f:73:b0:a5:a0:0b:d2:a5:8f:dd:3d:
         f9:a4:74:98:f3:1d:36:54:40:99:7f:d6:db:15:d1:99:67:dd:
         4e:8f:22:78:4f:e9:73:8e:ea:f9:17:87:45:df:f0:fa:e9:c2:
         09:88:f7:b6:a3:c7:7c:c3:47:64:37:df:c9:26:a5:c2:d9:61:
         42:4e:02:7a:c2:63:21:4d:8b:cb:47:fd:2f:63:f8:8b:42:64:
         10:e2:a3:c6:79:da:47:f0:44:95:dc:d3:6c:0a:74:5d:f3:2a:
         d6:c1:96:e7:c3:42:80:19:c6:d9:e3:80:e9:82:7b:06:55:af:
         4c:f5:1b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:01:55 2026 by rpki-client