Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File:                     9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier:          mGPzQ5RUgCGsxsjn3GF3PfZlSsKA/qLZ3fMRSjWOXIs=
Subject key identifier:   60:4B:F3:4A:F8:3D:39:84:37:FC:FF:F1:BB:D4:01:2C:47:34:0E:22
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       01A0DB0427EF6D473006EDEEB655FF951F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number:          1A79
Signing time:             Sat 26 Sep 2026 00:01:17 +0000
Manifest this update:     Sat 26 Sep 2026 00:01:17 +0000
Manifest next update:     Sun 27 Sep 2026 00:01:17 +0000
Files and hashes:         1: 1JViNUEn6ga0QROJtxU4AEvMLww.roa (hash: jcckW1pekqq2a3ZEiyHcZr/yXCAySkb6WGxv2ggL9FI=)
                          2: 5c-tVeqgckJuAp6JbI43ZWb85Ik.roa (hash: cjN5erR2DEEsrEuY7GbmW+pLwmDRQL+9OgSiLHhDtIc=)
                          3: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: WlI9Ot69HzYrXfJUGJ5WBQFGVW7Jpb7nuWz6VXN31JU=)
                          4: SiBbiHVr7AC0u90Fwok04bc86Is.roa (hash: IBa2+mQ/TjNwKvca48jtPUnqiSXDlYjx7SDm3vYP5Ys=)
                          5: YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa (hash: m/hv4iobL1Tq4Hnl7IKJyfEevy78U6kNT70maANZhgM=)
                          6: i_WQhoivfiPNt_r8E0ASaD2knr0.roa (hash: ZsmBZD3QOznmcRlV4BtsmhxZ3ocoJk7WQB1P/qL5Ad0=)
                          7: zRYCcQ03Zo7Mtjwf5o0jfcWViDY.roa (hash: hObMfSwMh57HZlCx8OTlbluNMpET5Cy14GAtqwnhGDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:04:27:ef:6d:47:30:06:ed:ee:b6:55:ff:95:1f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Sep 26 00:01:17 2026 GMT
            Not After : Sep 27 00:01:17 2026 GMT
        Subject: CN=604bf34af83d398437fcfff1bbd4012c47340e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:56:69:64:33:c0:a1:b4:7a:18:7f:28:59:
                    b9:1a:93:52:34:59:9c:b3:e2:1f:b6:89:d6:46:4e:
                    53:8c:30:54:fc:e0:24:b5:64:1b:60:ae:8a:12:fd:
                    b7:be:e7:26:8a:95:55:dd:f1:49:d2:1b:b5:dc:c6:
                    32:07:fc:fb:98:90:4e:52:34:e7:19:42:76:27:6a:
                    bc:f2:03:fb:2f:6e:2f:c9:41:73:1b:a0:27:2c:68:
                    32:81:ff:f5:f1:2b:99:fc:a3:96:31:38:e0:be:ae:
                    e6:98:f7:1e:99:98:c3:58:a3:8e:70:8a:42:f2:b6:
                    81:25:22:a4:7d:9a:7a:26:9b:e5:df:ea:12:bf:f5:
                    5a:d5:4b:1a:28:68:87:f3:9d:6f:c8:f9:e6:1f:ef:
                    01:a8:3b:cc:2a:dd:65:08:2e:15:62:c1:61:07:2a:
                    c2:6f:6e:2d:b4:55:30:04:e1:a4:63:87:25:5f:5d:
                    25:78:a3:61:cb:8a:c6:33:97:ee:26:80:69:54:e4:
                    10:24:e8:b1:a2:7f:88:7f:04:05:45:1a:13:da:ae:
                    7d:77:87:98:f1:0b:e5:e8:97:ad:84:ec:ea:e5:03:
                    32:17:d8:3f:7d:74:11:0c:81:2e:01:5c:ce:4a:b1:
                    d7:fc:07:c8:ce:b8:8e:95:39:13:0b:e6:d0:5a:8f:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4B:F3:4A:F8:3D:39:84:37:FC:FF:F1:BB:D4:01:2C:47:34:0E:22
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:48:8e:a5:f7:bd:90:f6:8f:b8:7f:ab:5a:0a:d0:e9:4b:
         c6:a9:a9:15:fd:f1:d3:30:a6:a7:54:ff:ed:7b:a5:69:78:87:
         7e:d9:21:b6:da:d1:6f:73:a8:06:46:74:90:26:af:94:1f:ee:
         20:8f:b8:14:c9:ae:0b:2f:50:3b:16:3e:ab:3b:7e:e5:c4:d5:
         f8:f5:fb:f1:80:b0:82:5b:e8:7f:4f:ea:01:12:9d:a8:65:53:
         10:72:2a:1d:1e:89:c7:69:36:fe:a2:e2:1d:5b:aa:89:41:33:
         95:a1:52:57:a4:87:a7:9a:57:6b:ec:e3:05:b0:e4:69:4b:34:
         7c:5e:7d:32:5d:5e:91:34:10:2b:9d:e8:04:0c:8d:b5:68:6f:
         01:59:c9:30:47:ca:21:18:14:96:f7:c7:3e:10:4c:69:6b:03:
         f5:ec:18:11:06:e5:9a:8c:6b:02:b0:b6:5f:c7:67:42:69:b2:
         eb:64:cf:ed:1e:08:9c:33:d8:a2:39:cf:a5:8c:4f:e1:ef:46:
         3b:ae:3b:0d:4f:5b:e3:8d:d8:7d:3a:11:f7:e9:a4:fe:e0:7d:
         ce:8a:06:c9:17:da:56:c1:18:4b:85:54:50:40:d4:3e:2a:ad:
         40:1f:47:48:13:7c:60:24:28:37:41:c4:86:00:fa:c8:39:20:
         15:59:fc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:21:17 2026 by rpki-client