Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft
File:                     9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft (raw, json)
Hash identifier:          LusbuJrTULaHPNobugCEP56TMp/Q5mlyZZCYtvFIDwA=
Subject key identifier:   07:10:72:E7:3D:ED:58:90:B1:10:E2:EB:62:E3:45:84:CE:74:33:EF
Authority key identifier: F5:93:15:BF:5C:5A:38:ED:48:A8:B2:65:4B:AC:D1:5E:C6:76:49:B5
Certificate issuer:       /CN=f59315bf5c5a38ed48a8b2654bacd15ec67649b5
Certificate serial:       01A0CC35D4F3FB55AFD2A045477B6E3D4CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:01:14 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:14 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:14 +0000
Files and hashes:         1: 9A3OlY5RVtIFwtO7WI6eXK4tHgI.roa (hash: EiKfGC2WJXQAmYJmkMrTLU9ck5ZhlvrZW0WhXxUuwYg=)
                          2: 9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.crl (hash: siRUjdZzWbv3Q7uR8DVm1M8w+jA8HLnYjJe4R+DmyFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:d4:f3:fb:55:af:d2:a0:45:47:7b:6e:3d:4c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59315bf5c5a38ed48a8b2654bacd15ec67649b5
        Validity
            Not Before: Sep 23 03:01:14 2026 GMT
            Not After : Sep 24 03:01:14 2026 GMT
        Subject: CN=071072e73ded5890b110e2eb62e34584ce7433ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5a:7e:e1:40:c9:da:5e:52:52:ad:11:6f:c2:
                    b1:28:19:b1:55:63:7e:ef:e4:dc:80:03:ef:b7:e5:
                    1b:7b:d4:6f:58:94:76:4d:07:63:69:66:98:94:da:
                    83:2c:45:e2:b5:56:d2:e1:71:17:b3:72:35:ea:2f:
                    23:5b:8f:72:0f:d2:7b:c8:3c:c2:14:8e:0d:4c:06:
                    66:e1:e7:c3:5b:e7:3e:49:1f:cf:21:79:34:b8:e0:
                    1f:9c:e5:91:1a:ab:6b:7e:9f:a5:6d:1a:f3:ee:d1:
                    f6:c6:98:d2:e1:e9:8a:89:7a:fc:a1:92:c6:59:f6:
                    58:c3:9c:e5:3f:0e:28:ec:92:16:da:e4:6e:e4:d5:
                    57:eb:3f:dd:6c:5e:da:ab:45:69:3c:12:a4:90:e0:
                    95:ab:cd:3d:93:c5:bd:61:74:04:d2:80:8e:2b:36:
                    9b:63:3a:f7:a2:35:fb:df:96:ed:7b:3b:fc:ae:b5:
                    e7:e4:81:d6:dc:cf:5d:73:50:9e:a9:f4:90:6f:d3:
                    7e:0d:87:f8:28:62:7d:5d:1d:4f:62:c2:09:32:4e:
                    cb:9f:b5:69:9f:cd:b7:7a:de:f6:1d:3d:f4:68:18:
                    31:5b:75:a7:0a:18:12:f0:f8:db:ab:5a:9c:79:17:
                    c4:81:71:b2:ad:f6:b1:4d:1d:aa:52:3b:b5:50:dd:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:10:72:E7:3D:ED:58:90:B1:10:E2:EB:62:E3:45:84:CE:74:33:EF
            X509v3 Authority Key Identifier:
                keyid:F5:93:15:BF:5C:5A:38:ED:48:A8:B2:65:4B:AC:D1:5E:C6:76:49:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:d8:32:16:31:45:65:e5:3c:3f:8e:71:f8:4e:0e:a9:89:
         00:79:04:9d:8a:29:be:ef:64:9f:2a:45:1c:80:73:5f:37:f0:
         ea:e0:3f:82:09:01:90:f7:7d:08:dd:22:91:2c:99:c5:fb:63:
         9d:46:62:5f:5c:6e:32:5b:a0:d5:9d:c8:e8:6b:d2:d6:4c:74:
         b4:16:79:e6:52:0d:c0:ec:5d:ad:7c:1f:8a:b7:e8:a1:ee:b8:
         60:c1:2b:38:65:19:fa:54:df:72:7f:a0:b9:2f:8a:63:00:d1:
         cd:f8:0b:5c:6f:8d:45:1e:1d:e6:e3:c8:dc:04:82:3b:ba:1a:
         cf:56:9c:4c:7d:fe:8e:6b:b3:24:47:5b:a5:02:33:8f:0e:24:
         fa:3d:5d:04:8a:4d:bd:ae:7a:ba:20:7e:c2:23:b7:e3:53:03:
         d6:94:7f:6f:70:15:5d:f3:33:7f:e8:54:2c:f9:6a:ce:80:05:
         54:76:59:c1:53:98:9b:de:d9:7f:4a:ca:ef:b6:43:35:32:be:
         6a:8d:8e:db:7d:c0:a8:b7:12:41:98:1b:b6:37:0c:08:76:a3:
         3c:79:0b:29:0b:88:58:bc:08:37:ff:ff:5b:15:31:74:6c:94:
         3a:39:53:f0:34:f8:0c:c1:7a:d1:20:24:29:f4:47:2d:7d:3f:
         f4:b8:24:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:57:29 2026 by rpki-client