Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File:                     9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier:          Nqei/T+0LouwNfYjJPYmfzHkxMPT8GMkyvw159JrN1I=
Subject key identifier:   11:BA:6B:70:16:8A:F5:0D:E9:FD:0D:E4:4C:1A:F8:10:40:C7:F7:51
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer:       /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial:       01A0D0493086052BC13B08A557B5570046F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number:          1543
Signing time:             Wed 23 Sep 2026 22:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:52 +0000
Files and hashes:         1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: gBy7parikMUmSY0YbNz6NGboFfrn4J/AQ6TLjOLaCS0=)
                          2: ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (hash: /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:49:30:86:05:2b:c1:3b:08:a5:57:b5:57:00:46:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
        Validity
            Not Before: Sep 23 22:00:52 2026 GMT
            Not After : Sep 24 22:00:52 2026 GMT
        Subject: CN=11ba6b70168af50de9fd0de44c1af81040c7f751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:1a:44:2a:82:99:ca:97:44:97:ce:38:7e:
                    0d:67:df:21:8d:0a:8c:aa:20:00:c7:c9:73:26:a2:
                    34:82:2f:db:7b:48:7e:49:e4:c6:32:16:95:63:f6:
                    29:4d:65:bf:00:37:34:e0:b7:4f:76:3e:62:51:bf:
                    a1:6e:c7:12:b5:76:bd:b2:70:d4:52:3d:d8:33:79:
                    f4:bf:45:7a:6d:b6:29:e9:8b:a6:d9:5e:1f:d2:6a:
                    d1:cf:c0:2a:99:d7:d1:d0:a3:c4:cd:1c:90:e8:2a:
                    5d:5a:4c:1d:a0:5e:a2:7f:6d:7e:e4:1a:4c:4f:06:
                    ba:0e:d1:a2:51:a4:96:1a:87:ab:df:e4:6f:c5:e3:
                    3f:ef:8b:2b:e1:ed:00:3f:74:3d:c2:61:d1:11:1b:
                    db:9d:9a:1e:d6:0f:52:6e:7d:40:a7:cf:0a:a0:e3:
                    1d:54:a1:51:5e:86:0c:62:64:d5:f5:15:fc:4f:e5:
                    d8:1a:f7:d7:ad:ab:27:26:75:aa:05:1e:da:d0:c7:
                    40:8d:b0:7a:40:ca:45:fd:a0:a6:10:30:31:0b:3b:
                    46:e7:22:9a:16:81:20:7d:11:c5:c5:d6:12:c4:77:
                    74:e6:35:1b:8d:0d:83:19:3b:8e:49:50:cc:ac:1a:
                    3a:3e:36:ed:76:8f:00:a8:2a:3d:a2:4a:95:80:6b:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BA:6B:70:16:8A:F5:0D:E9:FD:0D:E4:4C:1A:F8:10:40:C7:F7:51
            X509v3 Authority Key Identifier:
                keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:fb:d8:25:eb:be:61:b0:ca:39:8a:b2:d4:34:1c:c8:eb:
         9d:f2:4d:5c:43:d3:4e:c3:3d:a7:ad:c7:8c:27:51:d5:f1:86:
         0a:d7:f3:fe:3e:8c:58:fa:23:10:dd:25:30:dd:c3:c5:d0:ee:
         9f:f9:5c:2d:5b:5f:5d:57:4d:db:04:67:23:8d:47:fb:8f:5e:
         b3:aa:cb:42:22:7c:22:e3:8c:c6:ce:15:ec:db:6b:a9:ed:e2:
         45:e4:5f:b3:2e:ea:df:f7:a7:9d:c9:54:57:c5:19:a8:7c:4b:
         1a:bc:1b:77:3a:3f:95:94:33:f5:5e:d4:15:a8:49:1c:1e:3d:
         e6:f6:7c:02:bb:0f:a6:b0:48:cf:a5:1b:ef:b4:26:ee:7c:c4:
         53:f4:f8:e9:87:b7:d8:69:45:b4:34:65:63:00:5d:a4:47:79:
         91:2b:bb:2a:f4:40:96:a1:aa:77:87:13:e7:da:fb:dd:bd:2b:
         37:ca:1b:1e:33:1a:f7:6b:74:72:6a:79:18:cb:ae:b8:c2:60:
         7e:ce:ee:3a:f7:f7:2f:e8:6b:18:38:65:c9:e7:b8:9d:08:a9:
         3d:21:fd:fa:46:8d:75:22:d4:88:04:2a:17:47:fd:af:b2:9d:
         f9:a9:21:d6:0a:42:17:34:ef:5b:80:3f:85:89:09:37:d0:b5:
         de:fa:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:36 2026 by rpki-client