Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File:                     g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier:          Rb9Cz+h0x7cL8L6/dRBeNAvLNjjLFNyY7cN46+BnlCM=
Subject key identifier:   4D:47:FC:FD:1D:5E:8B:DB:F2:0C:C0:96:B3:2A:1D:9C:11:13:50:F0
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer:       /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial:       01A0E43EFF72B997B20BFDB518ED88D5A672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number:          1A78
Signing time:             Sun 27 Sep 2026 19:02:08 +0000
Manifest this update:     Sun 27 Sep 2026 19:02:08 +0000
Manifest next update:     Mon 28 Sep 2026 19:02:08 +0000
Files and hashes:         1: e9eDn1it9NdIiHqx44a7i4SS4xg.roa (hash: D0mw6gNgZUzu18/xmTgF0h13ejYJeMIRk7OFNvDQw/g=)
                          2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: jRov+PvXYP9rnHwhlTd4TPK0wo4bZkKdMDWrtcY70K4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:3e:ff:72:b9:97:b2:0b:fd:b5:18:ed:88:d5:a6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
        Validity
            Not Before: Sep 27 19:02:08 2026 GMT
            Not After : Sep 28 19:02:08 2026 GMT
        Subject: CN=4d47fcfd1d5e8bdbf20cc096b32a1d9c111350f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:6f:45:8f:3a:1d:07:64:29:a3:f6:59:a9:
                    1b:2f:45:50:b6:4c:ed:22:cf:c3:c7:a0:a6:b3:5a:
                    43:73:b8:e8:62:7e:99:23:a5:ad:db:9a:81:4c:29:
                    c7:90:df:e4:2c:ff:51:df:6d:87:c2:9b:93:dc:2a:
                    8c:32:9a:3a:57:de:32:83:18:e4:68:c9:49:9c:e3:
                    d9:5c:1b:ec:4e:cb:7d:bf:84:50:83:8b:c8:4b:f7:
                    b9:6b:a8:e6:3c:63:75:46:88:29:b4:8d:cd:f3:89:
                    b3:24:1b:4e:a6:24:b4:c7:46:c0:ae:7f:45:94:67:
                    b8:f2:57:93:1c:6c:12:ce:3c:d7:96:4f:61:67:92:
                    d8:f9:a7:25:61:fb:13:73:2c:3b:65:d8:41:57:df:
                    3d:d1:9d:c3:31:0c:f0:68:82:28:52:1e:90:76:bd:
                    d8:ea:4c:fa:3e:17:28:45:3d:c8:bd:a5:48:bf:8b:
                    51:4e:70:d5:ff:8d:f6:a6:57:71:fd:60:6b:bc:8f:
                    31:c7:8c:66:c1:f4:bc:7d:55:c7:d9:ca:bf:fa:ed:
                    8f:1b:37:79:41:07:6f:45:f7:f9:5a:c9:97:68:66:
                    8c:56:6f:98:af:05:0e:c5:e9:96:01:88:96:e1:28:
                    79:c4:21:b0:0b:6e:1f:8b:d6:cd:10:7c:3c:54:83:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:47:FC:FD:1D:5E:8B:DB:F2:0C:C0:96:B3:2A:1D:9C:11:13:50:F0
            X509v3 Authority Key Identifier:
                keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:6d:9e:13:4c:7a:ad:fd:e7:bb:23:94:cb:6a:76:ed:62:
         bc:c2:a4:7f:d2:08:85:b0:a5:ae:7d:a6:2a:7a:60:f4:cb:99:
         57:3f:67:97:02:10:78:ca:e4:11:d5:11:12:9f:62:ab:5d:6b:
         33:86:12:aa:25:70:87:aa:73:09:47:73:41:87:38:6c:61:f3:
         5f:a6:bf:3f:bc:61:3d:ff:54:9a:6a:d6:2c:ec:b2:7b:be:ea:
         aa:8b:e8:cf:46:15:97:7a:f6:7d:61:89:65:dc:f0:7a:79:da:
         81:18:af:03:d9:de:36:b3:2d:c9:54:ff:5a:49:7e:69:48:53:
         9b:d1:ff:7f:e0:8f:94:ce:8d:a6:32:5f:9f:61:e1:e2:0c:79:
         a8:59:2d:e9:35:b4:a4:6f:d9:de:88:59:51:de:c5:39:78:24:
         3d:e0:b4:a7:a4:ef:46:fc:de:62:24:61:73:33:d4:56:bc:7a:
         99:13:eb:21:50:16:9b:26:b2:8f:55:ae:7b:78:36:74:0b:fe:
         1b:9b:be:58:2a:af:fa:9f:25:18:b7:84:d4:c3:be:5c:72:75:
         8d:a4:ba:f5:c6:15:0c:04:89:4d:1a:fa:0e:8d:4b:79:3b:7a:
         c7:97:2e:ac:ca:eb:12:2d:33:0c:49:50:31:64:10:08:dc:07:
         13:42:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:46:48 2026 by rpki-client