Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File:                     9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier:          HmOLP6+pN9EMmbRYAsFc0JJwjLBzKR8Z0cWFep6bjX0=
Subject key identifier:   A0:11:4F:D7:48:9A:D2:F8:E8:75:57:A6:C7:42:07:C6:39:27:F8:1A
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer:       /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial:       01A1231D8A6C301CDEB520A25F911108FF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number:          17D2
Signing time:             Sat 10 Oct 2026 00:01:40 +0000
Manifest this update:     Sat 10 Oct 2026 00:01:40 +0000
Manifest next update:     Sun 11 Oct 2026 00:01:40 +0000
Files and hashes:         1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: EAZI783dMUiaQ8Y3Z8OePrDQP6v/aZm/C9XqMIbm+g4=)
                          2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:1d:8a:6c:30:1c:de:b5:20:a2:5f:91:11:08:ff:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f501b9e20616d686b405da906afa597635063640
        Validity
            Not Before: Oct 10 00:01:40 2026 GMT
            Not After : Oct 11 00:01:40 2026 GMT
        Subject: CN=a0114fd7489ad2f8e87557a6c74207c63927f81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:59:45:05:2d:21:60:31:55:1d:8f:8e:b4:
                    15:32:88:da:44:b3:7f:a9:29:32:55:9b:82:bc:b8:
                    24:74:25:d0:56:d4:58:61:05:90:c8:f8:fc:0e:4d:
                    db:57:55:63:4c:2d:46:d0:2c:b9:7a:d4:40:c5:0c:
                    ca:5e:43:fe:8c:c8:44:6c:dd:57:ed:98:fa:a0:09:
                    17:8a:78:59:f9:45:70:e6:29:eb:5d:70:92:49:0c:
                    7a:59:73:0a:0f:47:7a:62:28:28:58:0c:c8:33:d0:
                    23:7b:7a:fd:07:9b:8a:91:2d:2b:4d:6b:41:ab:08:
                    15:9d:be:10:58:72:61:73:5c:a2:16:85:76:42:3d:
                    8a:8b:21:96:82:f5:4c:5d:45:bc:2e:d1:76:75:43:
                    f2:0a:9b:3a:2c:0c:f3:59:58:70:59:4c:6d:9b:91:
                    48:d4:05:f6:e6:83:6a:16:db:32:3b:a7:8c:52:23:
                    95:f0:e5:d7:73:e3:16:d5:72:d7:55:58:2a:7a:ce:
                    13:6e:06:ed:45:ac:cc:ef:c8:c5:2b:02:45:13:24:
                    fd:b1:99:28:36:31:19:75:97:f6:f8:91:e1:61:ec:
                    93:d5:71:d5:c5:48:28:68:54:7f:bd:20:64:16:09:
                    73:8b:58:3f:ff:d4:31:cc:6a:9f:3c:c8:1c:a0:58:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:11:4F:D7:48:9A:D2:F8:E8:75:57:A6:C7:42:07:C6:39:27:F8:1A
            X509v3 Authority Key Identifier:
                keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fe:27:7a:28:a3:f5:fe:e6:3e:49:97:f6:c5:e9:5d:b7:b9:
         6a:28:0e:3d:8d:e1:4a:df:59:c7:47:35:5f:3b:3e:3e:7f:5d:
         a2:42:7d:b2:66:6b:35:94:94:d0:c3:a2:fb:8b:84:11:3e:09:
         38:23:38:c3:07:9c:56:aa:75:44:e6:53:0a:e1:b9:12:00:16:
         76:83:9c:c7:52:15:2f:72:bf:97:a5:37:54:49:a9:85:bf:46:
         62:67:39:dc:5f:e1:ef:7e:51:81:cf:0e:c9:26:d3:52:89:a2:
         ee:14:81:ab:a2:85:96:22:7a:aa:37:e1:b5:c2:b1:77:25:7d:
         51:59:34:ab:c7:08:a6:e0:49:86:37:ad:d1:d3:02:19:d4:56:
         10:94:f2:ed:5f:ad:29:bf:e7:69:4c:f8:bf:d6:82:27:f4:ef:
         e5:32:c8:3b:14:0e:a2:24:2e:34:2c:c6:a0:1c:45:4c:47:cc:
         f0:56:fc:73:d4:b4:10:f8:6a:b5:b0:40:f0:ec:a4:1d:8e:00:
         dd:d7:d6:ad:80:92:a9:b1:c4:6a:17:95:a0:6a:88:a3:d8:d8:
         85:8d:0e:2f:54:bd:98:70:70:9b:63:60:66:6f:f2:bc:0a:e3:
         25:48:68:8e:56:3d:fc:ea:20:5d:40:db:da:b1:58:63:e2:18:
         ce:8c:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:26:33 2026 by rpki-client