Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
File:                     dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft (raw, json)
Hash identifier:          PBP+ODUgRQfSG5Va9f84w0K2RyoRfB8jM9zBTRVY92I=
Subject key identifier:   C1:23:02:85:24:0D:5D:0B:23:A6:CB:4E:84:F0:32:3F:24:FB:EF:43
Authority key identifier: 74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
Certificate issuer:       /CN=749304120ce64942efb3896623b386a041dcb364
Certificate serial:       01A0D15B9DA09A643ED77F27DC693EF94D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
Manifest number:          F9
Signing time:             Thu 24 Sep 2026 03:00:37 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:37 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:37 +0000
Files and hashes:         1: 1-NkprLROBhIrxdMdpHs0gAbXRhI.roa (hash: OgYkvU3JluSk0A3KrSnV7EBSOaUe4dV5FbvvMxEA9E8=)
                          2: Q5a6HBab7XkMUuUmzB37I_bZ51M.roa (hash: usPWG+ZUU2Ik0VUcffT2eLkXW+tgdFOyEMe83evsQaE=)
                          3: dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl (hash: 7PRorKJanAleSoeNr+88BGJ2BzBBDrdo5qsTwbYLrdg=)
                          4: x8Ef8kUk1ABUGDrdvpPX2q-sM5Y.roa (hash: eqyvuJE0kO0nJaVY9QksYF1dsyytJE+brJXIzn/oUAM=)
                          5: yn-UQ1pVJZDABMVLeJ9nhqXgCpk.roa (hash: 9X5Y2Cv2UIpJSqjKJPAjPpvZNJ4jzPmiAP1leQcKFxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:9d:a0:9a:64:3e:d7:7f:27:dc:69:3e:f9:4d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749304120ce64942efb3896623b386a041dcb364
        Validity
            Not Before: Sep 24 03:00:37 2026 GMT
            Not After : Sep 25 03:00:37 2026 GMT
        Subject: CN=c1230285240d5d0b23a6cb4e84f0323f24fbef43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:a5:ce:53:74:07:fc:d6:7b:c8:57:37:b3:
                    1d:e8:df:5a:ad:13:0c:c6:e4:17:a5:36:60:79:1a:
                    bf:7d:8c:c4:4e:ee:96:f0:ed:39:22:3f:65:eb:c3:
                    81:cd:99:58:68:47:16:3f:ed:9f:de:df:29:a5:a0:
                    7f:12:58:a3:d5:c8:b3:02:9e:9b:17:ff:ff:c5:fb:
                    29:df:7d:11:da:34:c1:eb:41:fa:9e:a7:7c:80:a5:
                    8e:a8:47:6f:84:83:3a:e5:3b:f8:3e:36:bd:ec:e9:
                    da:2f:b4:36:2e:bd:64:6f:bc:5a:28:f5:50:da:18:
                    85:aa:3e:81:9f:52:e1:97:13:a7:e6:ea:33:8a:45:
                    f0:58:a6:1d:97:b6:f6:5d:2a:04:3a:87:56:07:f5:
                    07:40:e3:e9:37:a7:40:32:bb:25:2d:48:4a:71:87:
                    3a:af:3f:ea:72:62:64:0c:7e:e9:ba:ae:04:e8:57:
                    78:56:cc:31:c1:67:ba:b3:f9:9b:fd:fe:de:8c:d6:
                    fb:e1:1b:ed:32:eb:86:75:47:18:fa:37:65:82:06:
                    11:18:65:8e:58:98:7e:41:b2:d0:64:28:50:f4:60:
                    10:27:91:25:bb:85:df:88:46:af:20:d7:a6:96:ef:
                    72:bd:05:bf:f3:1b:30:6c:95:b5:0c:6d:aa:c0:02:
                    35:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:23:02:85:24:0D:5D:0B:23:A6:CB:4E:84:F0:32:3F:24:FB:EF:43
            X509v3 Authority Key Identifier:
                keyid:74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:71:de:1a:6b:88:93:c1:d2:de:9c:1e:c2:b2:ce:16:07:16:
         28:14:a1:d9:a5:6e:98:1a:91:6b:0e:ed:c3:10:14:63:84:96:
         0c:c5:dc:71:e7:f6:4b:c7:86:cb:c4:90:16:c5:3c:79:56:97:
         82:93:2a:a9:76:66:b9:b2:11:6d:fd:5a:c1:63:de:9c:bd:55:
         d1:ab:67:1f:39:83:37:8c:77:1e:57:cb:6f:00:ab:48:93:9c:
         4e:25:60:46:61:80:bb:ca:36:7e:a1:52:57:99:ac:6d:bd:7f:
         a8:49:a1:8c:d3:82:0d:56:7c:ee:fe:66:ab:2b:e8:bc:44:12:
         a2:93:bf:a2:3b:18:8f:74:40:65:59:44:f2:9a:63:d5:b2:05:
         26:a7:67:d9:54:5d:f3:a5:78:1b:4d:cf:86:c4:3c:3d:23:9f:
         dd:be:76:4d:96:1d:b7:1e:61:af:a1:e6:4f:a2:4e:cc:bf:ee:
         28:1b:60:97:e4:76:79:81:42:10:67:7f:1f:9e:81:fe:eb:86:
         e8:bd:77:84:e9:9d:f4:79:84:29:67:58:bf:06:48:a7:b4:ab:
         d7:ce:46:a6:03:35:f2:79:87:42:33:21:10:f3:eb:41:50:81:
         eb:34:18:b5:e6:ef:fd:58:38:00:c0:1e:74:1f:df:f9:01:67:
         3d:73:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:01:54 2026 by rpki-client