Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File:                     9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier:          6znXox3o6fjjrmiu44g38M4WYgsxfy743V+D1Oa348I=
Subject key identifier:   55:8C:65:D1:97:7B:D8:AB:0F:DD:E2:90:A5:2E:1D:0B:B5:06:2D:05
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer:       /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial:       01A0EC660EE2D8A6010A4C321D94DA9EE525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number:          186F
Signing time:             Tue 29 Sep 2026 09:01:46 +0000
Manifest this update:     Tue 29 Sep 2026 09:01:46 +0000
Manifest next update:     Wed 30 Sep 2026 09:01:46 +0000
Files and hashes:         1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: VCLm/GEvFQK6rd0TqO9JbepM/Y2SAY7ikgK9pwdWofw=)
                          2: UEAaPo6VUETHn6B0u4mE40cQPvI.roa (hash: oDl/sgYlJlPoPDa6gI6+975HLzl7ybSw7kcsMPOBkCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 09:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:66:0e:e2:d8:a6:01:0a:4c:32:1d:94:da:9e:e5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
        Validity
            Not Before: Sep 29 09:01:46 2026 GMT
            Not After : Sep 30 09:01:46 2026 GMT
        Subject: CN=558c65d1977bd8ab0fdde290a52e1d0bb5062d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:19:02:63:76:56:a8:ea:03:89:b8:48:ea:
                    77:d8:55:16:e3:09:9f:3b:99:c5:ab:53:03:99:c2:
                    69:a9:f8:b2:b0:f6:bd:74:78:92:c4:1b:b0:b2:71:
                    1a:b2:66:6f:b4:89:53:dc:85:18:3d:50:65:48:a8:
                    ee:4f:22:c5:c2:dd:16:62:17:15:64:7e:ce:9c:06:
                    16:df:30:47:48:5a:d2:72:34:6e:6f:83:05:79:77:
                    d3:42:19:79:2b:69:76:15:7d:47:7b:52:7b:1f:53:
                    fe:30:8f:74:8e:72:bc:e4:12:a0:f6:df:f8:26:83:
                    45:8a:02:af:60:68:f4:92:ff:4d:bf:e9:a8:9f:1b:
                    49:22:49:22:53:c1:ae:f0:8c:53:d1:51:4f:51:9d:
                    f4:b6:e1:dc:55:de:e5:db:68:8c:a7:91:f1:f0:81:
                    ed:39:17:80:be:53:9e:9e:4d:94:7f:d5:53:83:71:
                    c6:29:28:af:3e:16:4b:52:59:33:18:8a:09:c9:4f:
                    49:5c:d9:d2:ea:e1:16:c1:e4:8d:e9:44:f5:f7:1b:
                    53:92:dd:61:70:e2:bf:69:ae:b4:1e:da:20:ec:69:
                    9c:c6:1c:9a:91:15:34:bb:f4:6b:a5:cd:6b:af:1d:
                    d0:f4:cd:10:20:76:6a:23:10:b9:5d:23:5f:2a:af:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8C:65:D1:97:7B:D8:AB:0F:DD:E2:90:A5:2E:1D:0B:B5:06:2D:05
            X509v3 Authority Key Identifier:
                keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:36:c4:78:5d:ea:cf:01:be:c6:c9:af:81:fe:50:49:21:
         d7:1a:b5:b8:86:6c:71:f8:ef:2a:4f:a1:c6:a2:a3:57:ee:7a:
         12:2a:fe:83:e6:16:6e:28:07:44:39:b7:22:b6:e4:9b:d0:6c:
         b1:05:20:0d:a1:20:4a:91:9a:29:eb:af:ff:2b:25:d8:28:3a:
         9b:4f:92:6c:71:1a:89:f5:ac:31:41:33:57:13:5e:3a:f2:f0:
         c2:3d:6b:89:03:19:b7:be:7c:07:ba:25:ab:eb:bd:c8:3a:c5:
         0c:f4:3f:cc:21:79:c7:c5:72:d6:ab:7e:47:cb:8e:35:aa:db:
         7e:89:a2:f4:95:d1:af:9b:f9:97:5b:7a:48:26:bf:53:9d:8c:
         40:51:55:af:c7:98:57:87:52:dd:b0:31:c1:38:79:31:5d:30:
         05:55:ef:3c:db:98:5f:5e:38:93:3e:29:c1:6e:68:b1:72:ec:
         52:b3:21:88:5d:74:8c:91:07:8a:56:a8:33:8b:9f:b8:a4:75:
         6a:0c:91:f0:3b:33:7d:bd:39:c3:a7:c0:e3:32:8e:96:bc:96:
         b4:78:3a:aa:f9:a8:e9:84:2c:c7:dc:d3:46:c4:16:d0:9c:67:
         e4:d3:cf:12:45:5c:2a:9d:05:d1:13:e1:54:38:2b:c6:c8:81:
         67:ca:62:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:01:52 2026 by rpki-client