Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
File:                     vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft (raw, json)
Hash identifier:          aAS9aS9ZnkMePeycbmcGy6u2vYUgQ+3PCHu3wpo2/Jc=
Subject key identifier:   9A:C2:39:B6:8A:F1:F0:6C:82:72:A8:15:F4:2D:D7:21:7D:69:E5:76
Authority key identifier: BD:0B:08:01:71:8A:0B:A7:56:58:2D:60:54:6C:F0:4A:0C:4A:51:41
Certificate issuer:       /CN=bd0b0801718a0ba756582d60546cf04a0c4a5141
Certificate serial:       01A0E24FB16C014D5A1DB64FAED858169F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQsIAXGKC6dWWC1gVGzwSgxKUUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
Manifest number:          9F
Signing time:             Sun 27 Sep 2026 10:01:08 +0000
Manifest this update:     Sun 27 Sep 2026 10:01:08 +0000
Manifest next update:     Mon 28 Sep 2026 10:01:08 +0000
Files and hashes:         1: reeSo543-iiV_hwwXrGw1Fvughg.roa (hash: n9+iAAB1GwbtnN2Cb2yq5/uQtkeoVL1fosqNhMcu7iE=)
                          2: vQsIAXGKC6dWWC1gVGzwSgxKUUE.crl (hash: RHJBLm5bmieL2Ai/L3TCHXskTFZhdyop93wi9XsXK6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQsIAXGKC6dWWC1gVGzwSgxKUUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:4f:b1:6c:01:4d:5a:1d:b6:4f:ae:d8:58:16:9f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd0b0801718a0ba756582d60546cf04a0c4a5141
        Validity
            Not Before: Sep 27 10:01:08 2026 GMT
            Not After : Sep 28 10:01:08 2026 GMT
        Subject: CN=9ac239b68af1f06c8272a815f42dd7217d69e576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:41:b4:a4:b2:0c:b5:91:62:0e:69:43:d8:
                    62:61:14:01:f3:26:d3:5f:37:a3:77:4a:be:40:d4:
                    4f:e2:39:1b:ae:37:6c:b3:35:4c:eb:23:81:53:64:
                    71:fe:a4:b8:8e:00:45:41:f9:ca:4f:b8:4e:ef:f8:
                    a7:19:65:bd:79:35:8f:a0:6c:43:b4:dd:b2:20:08:
                    b7:6d:6a:a3:98:13:99:c1:20:0a:6b:e5:00:d9:11:
                    33:71:78:1d:2c:a3:3e:4e:22:b5:e0:4d:01:e4:52:
                    d2:26:aa:a6:bb:c1:19:35:c9:ed:bb:5f:ce:6f:72:
                    ea:c4:58:30:1c:f6:1a:82:ac:2f:9a:cc:37:54:51:
                    f4:36:bd:ac:0c:ea:0d:b4:44:08:5b:bc:41:9f:43:
                    08:fa:8c:2d:95:fc:26:75:4f:51:2f:75:c4:be:75:
                    db:04:cd:6e:a1:f4:79:77:0b:2d:bd:65:6a:71:9d:
                    7b:66:7a:3f:8a:82:76:85:d2:64:2e:53:7e:29:47:
                    5e:ab:61:45:a6:62:f7:75:9d:c3:2e:e5:ff:67:ee:
                    94:31:1f:3c:76:b6:35:f1:43:0a:c3:c9:b3:4f:82:
                    ec:fc:99:bc:0d:86:be:61:de:4f:6f:b9:7c:0b:c6:
                    6c:f9:a2:74:2b:c8:b2:4a:1d:f8:95:48:60:2d:66:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:39:B6:8A:F1:F0:6C:82:72:A8:15:F4:2D:D7:21:7D:69:E5:76
            X509v3 Authority Key Identifier:
                keyid:BD:0B:08:01:71:8A:0B:A7:56:58:2D:60:54:6C:F0:4A:0C:4A:51:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQsIAXGKC6dWWC1gVGzwSgxKUUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:03:32:7f:0a:89:36:52:2f:52:41:b0:ad:1c:2f:41:12:2f:
         07:78:e4:fa:6f:e5:80:1f:04:24:f0:9c:f0:38:e8:81:b9:99:
         d6:f7:64:2b:cd:88:f1:01:f2:62:a2:8f:46:dd:eb:01:c8:69:
         4e:e9:ef:e5:81:8e:6e:bd:31:9d:93:3a:6c:ed:14:13:08:39:
         bc:d3:8b:c8:95:07:96:37:51:ae:15:e2:35:be:fe:c5:47:b2:
         3f:79:ab:98:af:c5:a7:e2:20:fa:82:36:0b:32:5b:a6:35:48:
         33:0c:16:f9:e3:a1:8b:df:9e:5f:fe:0c:41:1d:5e:19:4d:2c:
         bc:15:ec:95:1e:8a:b2:8c:d1:69:b6:20:6e:ee:70:2f:d0:26:
         66:2c:f8:48:72:b2:31:8f:c9:b2:50:25:d0:48:26:7a:29:ae:
         d0:b2:73:60:dc:d0:eb:6f:56:20:20:24:29:4d:4e:b3:5f:53:
         2b:30:2d:10:7b:3d:60:28:5a:3b:50:8c:62:14:56:f2:0e:ae:
         a6:e0:33:13:0d:eb:61:55:a4:3e:56:94:79:eb:1b:53:18:f2:
         b3:33:da:65:4d:2d:13:52:fa:46:fe:05:35:f4:40:af:08:3b:
         71:cb:7d:b9:8d:c2:41:ed:ca:9b:00:96:74:fb:6b:e3:04:67:
         39:8d:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:59:20 2026 by rpki-client