Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File:                     h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier:          GOIuSTL/wxhnkPWYmoMR2Tskne6UUxmWFuyEb3lLxl0=
Subject key identifier:   F0:38:A8:CA:C3:8A:43:88:8E:F8:6D:3D:BD:8F:53:49:35:C0:FB:92
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer:       /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial:       01A0D4CB73358BD5FD7713A38791D54FB5E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number:          1A82
Signing time:             Thu 24 Sep 2026 19:01:38 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:38 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:38 +0000
Files and hashes:         1: 4L2HrkOMp5Px3ZdgqOBGMnz6oXw.roa (hash: qjbkKzm11wnXRFJIt4quryujdmBS5m5m8Id3/w9vHFw=)
                          2: 78tSQmB_UZC_rIGDHLnxnqOm3fI.roa (hash: 3kNkwMTWy/XYCkJODFF1IVosQpGtDfhW2/dwVf0UwBQ=)
                          3: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (hash: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg=)
                          4: PY323kbvCRFsNrwGFI26gXv0gpE.roa (hash: U0ksXLpw7uH4vwqe/cNwV58+FVim6JoHjXiFGt1giNE=)
                          5: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: nD15eGwrEmh5Rw8T4b1L8IHB9vuAqvfkvxI6qKaEqP0=)
                          6: oLb_BG6B2irYYvpJ_Dg1uPHKCq8.roa (hash: iEVASa2ks9RBbT4CSfXOVtY8JacDD8nYL36EtVLSvLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:73:35:8b:d5:fd:77:13:a3:87:91:d5:4f:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
        Validity
            Not Before: Sep 24 19:01:38 2026 GMT
            Not After : Sep 25 19:01:38 2026 GMT
        Subject: CN=f038a8cac38a43888ef86d3dbd8f534935c0fb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9b:a2:4d:06:10:87:1b:d1:92:c0:52:60:f1:
                    2e:0a:58:63:c5:4a:cf:b0:bd:bb:e8:20:1a:d4:3a:
                    c7:79:ec:35:09:b1:de:91:5d:f4:3e:d0:a3:ae:f5:
                    d2:38:3b:c6:ab:9f:b9:25:28:e0:1a:7e:3c:c2:49:
                    a1:80:7d:bc:10:6f:26:40:a4:98:21:91:77:06:3c:
                    34:20:0e:55:4e:49:88:0e:2b:c2:70:65:87:59:3c:
                    6c:a2:1e:22:ac:d5:47:a0:db:5c:40:e5:3d:fd:5f:
                    b6:89:9c:18:ef:f2:ec:16:03:2b:8a:52:1c:20:52:
                    e3:d8:1c:a4:78:c6:8c:4d:0f:03:87:e6:cc:e2:61:
                    ad:7a:c7:c7:d0:3c:ea:d1:8d:c8:be:34:39:b9:78:
                    95:b3:19:7b:b9:87:6d:fc:cc:47:bf:e3:a2:5c:59:
                    4d:30:53:cb:17:2e:2a:2b:44:53:be:94:4e:4a:5f:
                    0d:dc:5e:49:b8:97:a6:30:5d:da:40:ce:40:4e:dc:
                    39:fe:60:30:4a:fb:a5:e2:a5:1f:e8:2d:a5:e5:ac:
                    f7:6d:06:0b:1b:cd:8d:65:1e:16:44:ab:66:a5:3c:
                    05:07:68:19:1e:67:5b:88:7d:e0:3a:da:33:f2:87:
                    8e:cd:d6:95:5a:ec:a0:e5:df:56:74:d4:64:0c:6e:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:38:A8:CA:C3:8A:43:88:8E:F8:6D:3D:BD:8F:53:49:35:C0:FB:92
            X509v3 Authority Key Identifier:
                keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:da:9d:65:69:aa:10:c3:a0:5a:1c:63:04:9e:68:9d:2b:c7:
         6d:16:7b:a8:ff:ef:26:a5:b9:44:24:73:91:3b:40:d2:8c:0c:
         d3:a0:2a:56:dc:8a:2c:c6:0b:2b:e3:d6:93:d0:18:b7:9b:e8:
         17:a8:0b:2b:76:52:00:d7:8a:6f:ff:e7:fa:f8:2c:8e:5a:87:
         91:08:de:bd:72:41:7c:34:6f:e2:04:6d:9e:5c:7f:7e:44:75:
         0f:99:8a:a8:7e:98:aa:4e:8f:54:3a:64:e3:b1:9e:55:58:91:
         c6:0b:61:cf:20:7f:5d:55:51:4a:b4:f0:04:c5:ba:b3:88:2a:
         48:cd:19:e8:92:70:13:87:01:98:9b:a5:ce:52:95:c5:93:70:
         f8:b3:0a:7b:a3:8b:8f:55:93:05:d8:11:e2:91:dc:f7:99:0f:
         8f:d7:d8:4c:e1:49:34:89:44:5a:cd:86:f5:42:d6:a2:bd:9a:
         f1:88:68:40:47:70:1d:4c:3a:b1:4d:d2:12:ad:15:3b:4d:35:
         ab:87:a9:1d:72:84:5a:c8:f2:1b:4a:41:48:0c:06:bf:b4:bf:
         7c:9d:f0:59:bd:65:20:8c:4d:81:4f:91:fe:45:92:58:a1:e6:
         6d:ff:89:58:76:01:f7:a8:49:21:ed:fe:a6:08:ca:36:a7:07:
         a0:0e:c9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:40:25 2026 by rpki-client