Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File:                     n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier:          g0cnZLvPScpGgpzT+r9YH9VGT2quaavUVgVlKJTlsMY=
Subject key identifier:   90:CB:DC:31:DA:B2:6C:E8:4C:80:80:B2:07:41:93:46:9C:F8:7B:47
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer:       /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial:       01A0D34A491594B3BD8ED1DEC6B5E5C5E7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number:          13A8
Signing time:             Thu 24 Sep 2026 12:00:55 +0000
Manifest this update:     Thu 24 Sep 2026 12:00:55 +0000
Manifest next update:     Fri 25 Sep 2026 12:00:55 +0000
Files and hashes:         1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
                          2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
                          3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
                          4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: L9ziMDDeD5u85s1ca+ytQX/kcXEkMj1lwTSyLffuwl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:49:15:94:b3:bd:8e:d1:de:c6:b5:e5:c5:e7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
        Validity
            Not Before: Sep 24 12:00:55 2026 GMT
            Not After : Sep 25 12:00:55 2026 GMT
        Subject: CN=90cbdc31dab26ce84c8080b2074193469cf87b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:52:8a:c1:19:ef:b4:19:0c:7d:08:4b:97:48:
                    f2:a7:c1:ca:ed:e0:e6:9f:bd:0d:6c:fa:0e:a2:81:
                    a6:6b:fa:e2:1e:92:a7:3a:98:29:79:00:2c:64:1f:
                    d4:f2:9c:05:0c:48:36:0b:88:74:13:11:28:62:37:
                    16:2d:43:30:a0:89:80:21:5e:79:72:5a:e8:d6:b5:
                    99:0d:4e:73:5f:4a:a9:58:36:cd:f4:b9:07:3f:f7:
                    53:d5:35:2e:3e:df:16:5e:02:8c:2d:0b:e6:dc:e6:
                    1f:cf:80:17:6b:24:d5:58:f1:0a:d3:da:23:12:f1:
                    e7:c6:1d:64:6e:be:ab:d2:be:f0:76:d0:02:40:23:
                    cb:76:a9:ad:c3:07:60:66:69:eb:75:d4:df:b7:2f:
                    53:bd:c9:71:9b:42:cd:f4:98:85:3c:e2:45:a5:be:
                    08:05:4e:f0:35:4d:cd:f3:f8:26:24:02:ab:4d:19:
                    8b:f3:76:3e:81:96:90:bd:c6:31:2c:37:52:1d:54:
                    40:26:09:f0:4d:bf:ee:50:dc:99:aa:9a:81:c1:3e:
                    ec:96:3f:1e:64:03:8d:c8:0c:d8:e6:fd:82:01:00:
                    b0:62:1c:5b:48:ed:3f:99:f6:18:13:d9:1a:a1:04:
                    52:b1:e3:ee:8d:ad:05:71:e5:da:0f:fa:9c:46:01:
                    5f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CB:DC:31:DA:B2:6C:E8:4C:80:80:B2:07:41:93:46:9C:F8:7B:47
            X509v3 Authority Key Identifier:
                keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:eb:43:d9:d6:4f:1c:ff:dc:d1:10:0b:cf:bd:ee:e4:e1:
         80:3b:55:6b:0e:53:b6:ae:15:ae:db:94:f0:0f:24:ff:d7:fe:
         58:63:92:1d:a8:29:50:69:c8:7d:c9:07:2b:46:62:b9:f9:db:
         94:c1:7f:3a:86:0b:e2:a9:f4:b4:2f:9e:52:ba:41:1b:24:fb:
         c5:58:fe:ee:9a:40:25:50:ad:b0:5f:04:d8:7e:37:26:a6:a6:
         7c:57:11:ba:75:f7:0d:51:52:49:a8:60:95:11:c2:00:5c:f4:
         3a:67:e9:5b:48:0b:dc:c7:a1:e4:29:e0:b6:30:16:72:f3:08:
         a0:e1:d9:66:06:09:18:9a:8c:e3:ee:4e:e3:ef:03:11:40:55:
         60:15:a6:a0:77:78:6e:13:b0:11:ad:6a:f6:93:8c:b0:1b:1d:
         3e:76:1a:95:3b:74:51:8d:09:7f:b2:0c:ed:95:9d:2a:8c:90:
         b2:fd:95:d3:e7:f4:90:ea:74:73:a1:35:82:59:13:2c:6c:cd:
         98:48:55:46:ed:ea:86:55:13:e9:a7:21:2b:51:88:47:db:d0:
         d5:0b:0c:61:9f:c6:97:92:42:6f:82:e5:08:bd:59:3a:48:fd:
         a8:33:db:c9:35:df:fb:14:26:99:ce:fb:26:1a:07:4e:28:68:
         8d:8f:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:37:18 2026 by rpki-client