Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
File:                     9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft (raw, json)
Hash identifier:          XPmFQywXymA8X7Dcl+vUwkyMvSh/BMe6OFVd+OugSuw=
Subject key identifier:   4F:CD:6A:34:C5:3F:C5:EC:F3:E4:CC:05:8B:4A:81:5A:96:D7:66:CE
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Certificate issuer:       /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial:       01A0CBC74494466EE5524F9AB690748B0741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
Manifest number:          19C9
Signing time:             Wed 23 Sep 2026 01:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:29 +0000
Files and hashes:         1: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl (hash: XJY7BkduCu8H6GKIz5oCVbX51YZbjVcPsaOK1YQLXiQ=)
                          2: CKM45MzLL-Kr-1wHUJmYArBZNQs.roa (hash: zgA0VgHxkkAugxLOcgin3giUJuyrnUWyjPbTTAbl/sg=)
                          3: GM95Gkx5v40txz6JbU4oknnskUg.roa (hash: LMfCIqVoDwxmGh6lnvANNLlJl1/dvbPCyO8BYHqtVfU=)
                          4: XZ_pdWGRqhhlMj-zc2J3G0feaPs.roa (hash: 4yRNuv1IZ/fNsWUIhuk4rvJep02AUkMta6LPy8d8AZU=)
                          5: fta7rhlIzZLyvEwKrTYOqXfaI1o.roa (hash: wkfvDv19UKd8c+ZsdmvASGpolGZNSXvJMP6wVwFy+38=)
                          6: tK3EhqbEq4QRtst0UgwLWHhIHck.roa (hash: h+i8ZfbhVVe94VVW1glcQ01dnDaLK8FTDkoi7l88dTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:44:94:46:6e:e5:52:4f:9a:b6:90:74:8b:07:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
        Validity
            Not Before: Sep 23 01:00:29 2026 GMT
            Not After : Sep 24 01:00:29 2026 GMT
        Subject: CN=4fcd6a34c53fc5ecf3e4cc058b4a815a96d766ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:bb:d7:39:7d:b4:03:9b:65:b5:69:0b:9d:
                    bf:a7:0f:5c:4f:74:ee:f4:50:07:4e:42:7e:00:41:
                    ad:44:b8:f4:90:5d:01:be:3c:36:73:88:b9:cd:0e:
                    12:d7:b7:7f:e8:a7:ec:62:94:86:fe:3e:2e:31:24:
                    d5:3b:1c:ba:55:e7:22:9a:8a:46:d7:d8:e5:ea:b9:
                    2b:6d:80:57:d8:6a:35:74:c0:39:0a:44:29:b1:ee:
                    d6:56:25:4f:c1:ec:c4:65:19:b7:71:fe:b9:28:a2:
                    e8:a6:88:d9:e0:7b:3b:dd:21:62:e1:f8:79:e9:86:
                    70:21:81:6a:88:e6:97:84:b6:ef:61:71:1f:1b:c7:
                    20:ea:23:42:fb:de:9d:2e:0a:ba:48:8a:5a:3e:98:
                    c4:84:3e:71:db:e0:e6:cf:08:ed:b1:ba:d3:f9:98:
                    47:ff:48:bf:95:3d:bb:fa:35:48:11:33:61:b2:bc:
                    18:1f:bf:9d:72:77:3a:11:db:4d:f7:fa:9d:15:21:
                    d6:62:b3:bf:56:81:1a:b7:4e:ad:d4:97:ca:16:0c:
                    4d:c7:6d:3b:4c:c9:77:ff:f8:5c:26:94:4c:b7:7d:
                    21:08:63:9d:fd:d5:77:b7:0a:ca:c6:81:7a:0c:2f:
                    5c:9a:54:36:7e:02:7b:ac:44:79:38:26:88:70:a0:
                    5e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CD:6A:34:C5:3F:C5:EC:F3:E4:CC:05:8B:4A:81:5A:96:D7:66:CE
            X509v3 Authority Key Identifier:
                keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:da:3e:c0:01:b6:0e:bb:2f:bc:93:aa:00:c9:5e:53:50:55:
         67:cc:ef:6e:13:8e:ef:01:e1:b6:f0:1e:b1:00:c3:7d:39:1e:
         27:38:c4:ca:08:b6:32:44:37:9a:08:0a:84:88:50:e5:1f:46:
         4c:68:43:cd:f5:2e:24:d9:e9:86:ff:df:9e:bb:a5:43:f7:90:
         05:1c:fa:9d:5f:df:04:e5:a2:98:65:cb:8e:03:e2:bc:96:f2:
         70:aa:71:3c:70:1a:d3:38:06:5c:5a:ee:d2:91:49:c9:56:de:
         a5:8e:47:1d:aa:ef:e8:c3:38:22:13:e7:d4:24:90:a7:f7:4b:
         84:e4:71:48:a4:d6:b1:60:d0:26:db:fd:47:62:4d:70:c9:b5:
         22:ae:e3:43:79:9f:53:44:ed:0d:89:00:38:cd:de:45:61:ee:
         6c:d3:7b:0a:ba:a1:11:12:0c:bb:10:f9:21:eb:a4:01:ec:33:
         9d:d8:68:79:51:da:66:14:69:e2:75:43:af:5c:e7:19:04:23:
         96:8a:ec:ea:cf:1a:1d:0d:5b:55:35:09:d4:b8:c3:59:ba:98:
         f2:35:37:1e:f5:48:5a:1e:e1:36:b5:2b:10:ec:ec:c2:bb:6b:
         77:b8:cf:5a:ca:dd:c3:62:b7:e9:19:8e:d5:b9:31:e8:c6:95:
         ba:39:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:39:31 2026 by rpki-client