Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File:                     9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier:          9FDux6d7kJLYA/uY9Ecu2VZ0AG5FYPjkQ8CFauCci3Y=
Subject key identifier:   FA:E2:30:39:5C:65:EF:46:B6:D7:93:44:A1:12:27:F3:3C:65:66:0C
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer:       /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial:       01A0CDECD015193A27DB474B01B73F08889B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number:          0E32
Signing time:             Wed 23 Sep 2026 11:00:44 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:44 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:44 +0000
Files and hashes:         1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: Diw00Q7wEIxK30LQPoq2C6j7PEjW3ylalD4Eg/Nk0ww=)
                          2: rNpV2NAxJGTfyqIp99f3JpRlSOc.roa (hash: eUZrZrbKbWLWi5DObK4ndFnE2RLvQXE9bQ1Dpvymgcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:d0:15:19:3a:27:db:47:4b:01:b7:3f:08:88:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
        Validity
            Not Before: Sep 23 11:00:44 2026 GMT
            Not After : Sep 24 11:00:44 2026 GMT
        Subject: CN=fae230395c65ef46b6d79344a11227f33c65660c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:a7:bd:da:57:39:3d:9b:4b:cd:24:67:cd:
                    f0:80:74:7a:d6:ce:2a:fd:f0:eb:bb:b9:9b:50:11:
                    b5:e6:05:d1:96:dc:ae:c5:44:a2:e2:69:74:3e:83:
                    d0:59:08:02:41:71:99:55:37:08:a3:fb:00:85:d4:
                    e2:60:1b:c7:21:97:49:7b:b9:81:cd:31:89:86:5e:
                    df:09:27:8e:54:a7:3f:24:05:be:0a:54:7c:14:d4:
                    56:74:0c:9b:72:25:c9:81:52:1a:ab:be:72:5c:a2:
                    4c:91:cc:fc:96:f0:ee:03:23:a3:7b:71:e7:bc:c5:
                    05:0f:6c:bd:fa:3c:d8:3d:83:85:40:98:74:cd:40:
                    61:ef:40:29:09:f4:da:73:44:64:42:da:d1:51:9d:
                    df:73:bf:e8:08:20:b0:cd:72:c1:0c:12:16:b1:c5:
                    ca:8b:94:10:dc:0e:56:76:2e:cd:be:e0:41:87:51:
                    62:43:ae:cc:6c:61:8b:71:52:14:4b:0e:51:d0:c9:
                    60:46:4d:e9:0b:68:b0:fa:d8:59:f1:1a:70:ba:55:
                    94:4a:e0:4d:ec:15:07:63:e6:44:68:6f:61:60:4a:
                    17:94:e7:89:2e:20:be:9a:28:09:94:5b:83:68:84:
                    fc:c9:e9:3c:a9:ea:25:5a:76:93:78:39:ce:0a:1e:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E2:30:39:5C:65:EF:46:B6:D7:93:44:A1:12:27:F3:3C:65:66:0C
            X509v3 Authority Key Identifier:
                keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:71:2e:70:a0:ad:b8:c2:00:c9:f4:85:f9:35:be:8f:53:18:
         48:d3:d1:8a:d8:a0:a1:1e:31:92:10:ec:41:e8:08:04:8a:50:
         b9:b9:b7:1e:40:a8:30:3c:3a:aa:7b:4f:47:b9:e9:d2:c6:7d:
         09:73:07:4e:15:02:47:eb:13:12:68:ac:e6:09:6e:6a:0c:d0:
         f1:26:11:87:6a:2e:eb:1b:d7:92:43:09:79:d8:89:7f:57:39:
         e0:76:46:07:cb:c1:f9:92:ba:22:47:31:44:9a:73:4b:4c:38:
         3d:39:b1:87:79:46:9f:70:b9:c3:a7:bf:9d:50:28:fa:c9:29:
         3b:c9:4b:83:b3:66:c9:40:0b:b8:12:27:c1:98:7e:d4:a1:3e:
         e9:b5:aa:28:fd:e9:17:5e:74:12:dc:f2:d2:08:96:6f:90:d6:
         ef:59:11:c3:c8:08:6a:fa:52:fe:15:99:f8:56:7d:8b:99:b2:
         69:a4:a8:b6:7b:32:aa:ba:94:8d:d0:f6:a1:e3:1a:e2:a6:32:
         31:40:18:da:e6:1d:8e:83:ef:03:8b:71:6b:be:b6:36:43:f5:
         4c:6a:f7:bd:da:d5:b2:d3:51:e4:8d:84:1a:d8:38:47:d9:8a:
         20:dd:e7:a4:09:50:07:df:a8:d4:c8:f5:fa:83:2f:fc:f6:1a:
         f2:27:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:54 2026 by rpki-client