Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
File:                     9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json)
Hash identifier:          hBMflD3t4noAAEEZVRGpAoJzo/VsOyqEcPV8W3JU7jE=
Subject key identifier:   62:ED:2D:BE:EE:81:42:14:A9:F2:A1:C1:08:54:B7:B3:67:3F:76:D0
Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
Certificate issuer:       /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Certificate serial:       01A11AF4BF7231EB434AA093ED2C18E72073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
Manifest number:          097E
Signing time:             Thu 08 Oct 2026 10:00:09 +0000
Manifest this update:     Thu 08 Oct 2026 10:00:09 +0000
Manifest next update:     Fri 09 Oct 2026 10:00:09 +0000
Files and hashes:         1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: FnQJJSCpgG6n+SqtbFN+9bgeWdT8wUcMUikOro64zhc=)
                          2: PYpH8aQrBxgmiCTPPp0V-EcnxfE.roa (hash: TZmRjK93W2lQuniNqsjJViZK/7sITb6I/CE3q5KADNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 10:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:f4:bf:72:31:eb:43:4a:a0:93:ed:2c:18:e7:20:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
        Validity
            Not Before: Oct  8 10:00:09 2026 GMT
            Not After : Oct  9 10:00:09 2026 GMT
        Subject: CN=62ed2dbeee814214a9f2a1c10854b7b3673f76d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:41:37:da:7f:a6:e2:da:1d:5c:5b:66:6c:
                    ec:f3:d3:0f:19:2d:79:be:c8:0e:61:61:82:bc:ea:
                    ab:2a:e8:75:30:01:be:86:0e:fe:c8:a7:91:21:3f:
                    5b:80:e7:5a:a9:bf:4d:e5:83:a4:e6:c5:08:56:1d:
                    48:76:db:56:5c:2c:69:1f:82:f1:08:22:c6:8a:df:
                    a5:e8:46:23:4f:44:b5:e8:41:f8:c5:fd:a5:7a:9f:
                    7f:0c:0a:3c:fd:92:75:c7:50:7f:8a:de:00:72:c7:
                    10:9d:82:16:a7:63:08:bd:5e:8d:df:50:98:13:b2:
                    48:f1:8c:49:a4:fd:63:a8:0c:95:e1:23:4b:5e:ec:
                    97:c1:cc:4f:c2:9b:33:97:39:e8:46:19:25:9e:96:
                    65:f1:5c:ed:43:1b:1d:7e:7d:05:e5:66:85:dd:11:
                    24:74:6b:01:69:91:33:26:04:3d:e5:0d:a8:1b:ee:
                    b8:38:5a:29:c6:dd:67:cd:53:53:8a:ff:b8:77:42:
                    8d:6f:90:d3:b0:30:f0:a6:ee:e7:d0:50:5f:95:3f:
                    14:8f:23:d5:07:6d:0c:3a:19:08:b5:17:2d:ad:3b:
                    45:bb:41:37:77:e5:a4:ea:69:ae:73:9d:bd:30:fb:
                    6f:af:a3:3b:1d:64:d6:86:51:42:1a:4d:9b:ec:c6:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:ED:2D:BE:EE:81:42:14:A9:F2:A1:C1:08:54:B7:B3:67:3F:76:D0
            X509v3 Authority Key Identifier:
                keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:23:36:5c:f3:4b:ca:5e:1b:d8:02:e1:74:68:a3:7c:16:c1:
         ed:4c:f2:bd:01:88:67:94:7d:21:5a:bf:05:fa:2d:9f:4b:54:
         33:3e:d3:83:f9:15:2a:0a:5a:92:36:de:f5:b0:78:70:e9:ce:
         09:c9:68:2e:91:77:cf:b2:49:9c:d4:6c:c5:5f:89:a8:3d:8a:
         12:30:db:8a:ab:25:08:7a:f9:c5:38:0a:5e:fd:f1:ca:55:7e:
         42:09:af:bd:c9:4b:1e:15:19:4b:ec:c9:78:74:95:15:bd:59:
         99:83:68:57:35:33:bc:ac:1d:f8:97:4e:7b:4c:ca:49:d5:9c:
         91:0d:60:fc:e1:75:6c:34:de:ce:43:9b:2c:6e:d9:af:1d:08:
         8b:9b:22:7c:6d:de:68:17:cd:f6:49:bf:8b:18:48:aa:d5:d1:
         f6:77:bb:01:c1:fc:0e:64:ad:2b:5f:37:67:ce:13:88:f7:cc:
         c3:b1:8d:e2:08:a8:b5:42:24:0a:3a:f7:cf:c4:03:e0:b7:aa:
         88:32:96:e2:be:62:e4:6a:4f:22:fa:c6:59:09:2a:cb:c9:b4:
         5b:40:75:47:d6:e9:9d:21:00:b8:b6:86:02:7b:d9:f3:18:e3:
         0a:08:26:62:e9:4f:3d:16:32:74:c1:ef:ce:df:38:c7:b3:40:
         dd:bc:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:23:13 2026 by rpki-client