Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
File:                     9cFt91G8fHGwA5bo7KeGnxYfbTM.mft (raw, json)
Hash identifier:          by1Mmjhy8FHpkwP9PGWjlUjjDJEthkBwIzQN1Je0PhQ=
Subject key identifier:   F3:FE:21:57:24:47:E7:7E:B7:35:AB:D0:FF:B6:33:CB:78:D4:9E:B9
Authority key identifier: F5:C1:6D:F7:51:BC:7C:71:B0:03:96:E8:EC:A7:86:9F:16:1F:6D:33
Certificate issuer:       /CN=f5c16df751bc7c71b00396e8eca7869f161f6d33
Certificate serial:       01A0CEFFEDDC4082E277160778C5AFA8508F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
Manifest number:          4F
Signing time:             Wed 23 Sep 2026 16:01:14 +0000
Manifest this update:     Wed 23 Sep 2026 16:01:14 +0000
Manifest next update:     Thu 24 Sep 2026 16:01:14 +0000
Files and hashes:         1: 9cFt91G8fHGwA5bo7KeGnxYfbTM.crl (hash: fo/QxPJcIy9l4VISuAyr0glNrccTx5WZVmwN+Z+YgeY=)
                          2: ky9geymSVrF0um29NL9Ks30dd4k.roa (hash: FEgPS5VaKHByfL43nfZ+MqpY7vFaNCLRziMzetcS2FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:ed:dc:40:82:e2:77:16:07:78:c5:af:a8:50:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c16df751bc7c71b00396e8eca7869f161f6d33
        Validity
            Not Before: Sep 23 16:01:14 2026 GMT
            Not After : Sep 24 16:01:14 2026 GMT
        Subject: CN=f3fe21572447e77eb735abd0ffb633cb78d49eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:0f:27:36:37:d5:d5:d8:31:0a:b4:4c:39:
                    26:15:41:83:57:62:03:c8:54:63:a1:21:15:8a:4a:
                    16:19:4e:e8:96:2a:73:f9:7a:95:f4:c9:e8:43:96:
                    38:c5:6c:7b:e5:71:5f:2a:54:7f:2c:c4:3b:ab:d0:
                    c2:32:59:6e:3d:fd:d5:3c:8f:10:95:80:9b:b7:b8:
                    45:00:8c:4c:da:ce:51:73:a3:1b:e4:19:fd:2d:55:
                    ac:cf:77:7c:ae:b5:e8:b9:69:fe:8a:43:ed:ca:6a:
                    f0:73:4d:3a:3d:23:06:93:42:96:b2:a1:e4:63:82:
                    f0:67:f8:a3:b1:52:a6:63:1f:ee:78:d4:b4:14:48:
                    ee:bb:35:b5:a7:49:94:75:ad:80:14:90:3d:d1:4a:
                    c0:40:b6:6a:8e:27:7a:cb:9d:e6:be:9f:90:bc:01:
                    2a:ce:33:29:ae:65:a2:2f:2f:f3:27:04:9c:0d:60:
                    87:01:9a:14:60:9d:bf:16:28:c8:5a:e8:12:78:47:
                    ea:6d:c2:3c:15:6c:09:33:17:9c:9c:45:77:fd:6b:
                    aa:89:59:19:c4:57:ef:43:56:14:22:91:67:10:37:
                    6e:5d:af:0d:66:3e:f5:30:34:c1:a2:33:00:65:81:
                    8b:d4:57:22:aa:ed:4e:f8:ec:7e:38:0a:28:b2:9d:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FE:21:57:24:47:E7:7E:B7:35:AB:D0:FF:B6:33:CB:78:D4:9E:B9
            X509v3 Authority Key Identifier:
                keyid:F5:C1:6D:F7:51:BC:7C:71:B0:03:96:E8:EC:A7:86:9F:16:1F:6D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:2c:6e:c7:8b:7b:5e:77:0e:8e:7f:d5:0e:db:f4:25:5c:
         66:ef:60:b3:f4:cf:2d:58:ff:cf:fa:ac:5d:f0:8f:fc:74:6a:
         a5:4e:2c:c0:bc:34:40:68:3d:a5:be:74:3b:ae:50:cb:e6:21:
         bb:03:83:d9:e3:f5:8e:07:fb:18:23:d0:80:1f:6d:ee:3a:69:
         dd:c8:95:01:cd:cd:fe:e4:6e:53:67:83:6f:cd:a3:f9:10:bd:
         79:20:41:fd:b3:be:87:9d:60:7e:fc:d0:6d:e6:32:d6:3c:e3:
         14:2e:03:5e:eb:dd:6e:8e:02:af:fd:01:7b:bd:43:36:07:2a:
         a5:61:74:2b:1a:d5:a0:6e:6d:38:db:9a:8c:7e:ab:33:87:ec:
         b5:88:0e:99:1e:fa:e9:fa:bc:29:a1:28:db:20:cd:67:06:e7:
         8a:bf:dd:8c:66:dd:80:ed:d7:65:60:c2:c2:e0:05:15:cf:a7:
         f6:0d:bd:97:90:53:4b:6d:47:17:c2:c8:e9:5a:06:39:0e:cf:
         3a:2f:31:ae:d1:e7:f7:f0:e0:b8:b7:0e:2d:a8:97:33:25:12:
         74:b9:19:6d:af:7e:1f:0a:49:58:05:73:79:36:9b:58:31:05:
         00:f4:4e:bc:78:f2:1a:20:ed:1d:23:6b:aa:79:86:d5:58:da:
         72:31:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:28:40 2026 by rpki-client