Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
File:                     9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json)
Hash identifier:          D26HIvBgQBOtRwN1kTeshMmlonyhEeinH1ztrTpPr7Y=
Subject key identifier:   B0:37:45:F9:1D:92:1D:A2:0C:CA:C5:CC:A9:B0:E0:73:A6:C7:62:F3
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Certificate issuer:       /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial:       01A0D2375ADF7EE2AA9017B67780C6B9EB0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
Manifest number:          1A70
Signing time:             Thu 24 Sep 2026 07:00:38 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:38 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:38 +0000
Files and hashes:         1: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: 6q/Kft+seD/7IlIHHfa+xOHaZByxrpszhySX175oSEc=)
                          2: WR2mMv7qmUceN0Mkq4FVsAqss34.roa (hash: BI2UfIzSLpmq5ZqkIGDg6SgwwPzP/38b7CPwIY4B+T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:37:5a:df:7e:e2:aa:90:17:b6:77:80:c6:b9:eb:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
        Validity
            Not Before: Sep 24 07:00:38 2026 GMT
            Not After : Sep 25 07:00:38 2026 GMT
        Subject: CN=b03745f91d921da20ccac5cca9b0e073a6c762f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:f1:02:b0:56:87:f6:da:2d:3b:4e:e8:16:
                    3a:67:d9:a5:51:dd:23:67:6b:9c:46:26:d3:08:0f:
                    b8:51:81:6b:59:fd:95:83:3e:2b:b6:3d:e2:fe:b6:
                    90:32:7d:96:35:28:9e:93:70:cb:d9:20:fe:6e:5a:
                    48:e1:b7:c3:48:65:87:87:ca:40:3a:5d:1e:b8:47:
                    58:d3:e7:89:21:b1:8f:d8:a7:7c:5a:a6:2a:b6:34:
                    04:8f:35:60:57:9b:aa:5d:b4:69:e7:b3:b8:46:12:
                    01:d7:4a:ed:0a:f8:46:36:8e:84:63:8b:51:05:56:
                    46:67:0f:02:77:d4:f1:02:61:03:62:76:f8:e1:02:
                    90:30:8d:32:b1:6d:92:20:7b:34:07:6e:27:cf:fd:
                    67:24:29:a7:ec:3e:f8:51:20:9f:4b:09:a4:4f:cd:
                    ad:99:68:d1:76:3d:52:8b:45:8c:e4:51:7f:57:68:
                    d5:1a:e6:f8:a7:bf:3d:29:f2:07:d8:24:f8:55:55:
                    58:79:48:3b:c7:e3:82:25:bb:4d:e7:0c:3c:f9:a0:
                    ea:70:a7:0a:89:37:4f:13:30:c3:96:24:21:7a:ec:
                    93:39:04:20:df:69:dd:d5:19:e8:c5:60:5b:2c:2f:
                    73:e7:c7:e6:32:f5:52:58:57:df:bb:34:a4:97:4d:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:37:45:F9:1D:92:1D:A2:0C:CA:C5:CC:A9:B0:E0:73:A6:C7:62:F3
            X509v3 Authority Key Identifier:
                keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f4:29:0d:c4:a7:93:ef:e6:d8:f8:b2:22:dd:22:ee:93:5c:
         e2:63:94:99:51:29:4a:9d:31:24:4e:e5:79:a5:89:f6:fe:0a:
         0e:40:a0:26:ef:6e:ea:43:fa:bc:5a:1d:bb:3d:15:5f:ab:c6:
         0a:06:bf:c6:5a:d8:68:b0:67:34:b6:8b:e4:0d:c9:8a:d9:32:
         c9:cf:d5:e4:53:b0:ea:77:af:4f:d1:e8:2c:a9:7a:50:88:3a:
         00:a3:53:e0:29:59:27:5b:97:3f:57:3e:0a:c3:d1:ba:1a:44:
         ff:92:87:3b:c2:48:47:50:0f:bb:80:24:ee:1d:e0:fb:c5:e9:
         6c:6c:d3:43:75:92:6f:d0:8a:aa:84:df:aa:5f:de:e4:f7:81:
         aa:23:24:55:aa:6f:3c:87:87:0b:40:f8:65:14:19:ce:0d:f2:
         d2:29:e1:72:2a:42:4e:02:2a:8c:02:7c:49:0a:21:74:ed:91:
         9e:bc:61:72:fc:fb:06:d5:98:81:f1:63:62:53:7a:6e:88:10:
         f2:e4:42:c1:5e:b1:ee:ad:a0:19:f0:08:33:f1:75:37:e0:e5:
         8d:66:10:51:88:d4:1d:0c:d2:6c:72:24:ef:9b:d4:b8:9e:a8:
         68:77:c3:73:23:97:94:62:33:21:75:0e:c9:d1:7d:45:b5:6b:
         da:46:4f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:06:50 2026 by rpki-client