Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
File:                     F9vVrPH5x10YofdQMRFMSPCyM2M.mft (raw, json)
Hash identifier:          oqqFbWuwp1zAdlJeF1q8YB2aHWHB2o1Tvwyg9aTafyY=
Subject key identifier:   07:70:D5:41:67:F3:D5:D5:D9:53:AC:B6:95:51:10:BB:C9:96:7A:63
Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
Certificate issuer:       /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Certificate serial:       01A0DACD657BAC541FDD1D355B7671BCF757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 23:01:28 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:28 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:28 +0000
Files and hashes:         1: 0BO7Qdwz27n2_KQ3UWwFaifbI4U.roa (hash: ySd/2T8uWDeqpMyFGIs7aCT8IwZbW87LbSfPPcVdUwI=)
                          2: 1-s11mGcjC8aGEnsMAxCG4TDK4qI.asa (hash: re4iOsTgujK3n0SeH/pZVryx2miaF5Vx+USZ42XqMIM=)
                          3: 4bPjmPLYF-VsgIxEmwqrvspuat0.roa (hash: Mym6Vp+Xrsnjhxv/WkGy04wi/swDTPse9lPsRyVRLJ0=)
                          4: F9vVrPH5x10YofdQMRFMSPCyM2M.crl (hash: UPITb9h0Gf1He0AtpybkeMNkYhPU2w4bMBPmO+5aSB4=)
                          5: I0VG7HCBd1Osh567bGFIZjy7Y8k.roa (hash: dzX+qdW4OYoKn79MivAqWA+FWh3cN8TTDqbC+ueR/Po=)
                          6: Y-7M_UqcBNv4FZvSRza0hnEYbt0.roa (hash: l9lXOX5RLGIBYwkxjYc81W2wAYVBKWMt4amqOpB+mik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:65:7b:ac:54:1f:dd:1d:35:5b:76:71:bc:f7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
        Validity
            Not Before: Sep 25 23:01:28 2026 GMT
            Not After : Sep 26 23:01:28 2026 GMT
        Subject: CN=0770d54167f3d5d5d953acb6955110bbc9967a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:40:e7:95:ef:39:d8:af:d0:0d:2e:63:20:
                    39:4e:89:bb:12:88:2d:cc:af:a1:e8:ac:17:70:07:
                    fd:0d:ca:31:07:e5:71:11:9b:0b:29:ba:21:db:6e:
                    d5:9b:42:18:bf:d2:ee:c7:49:ff:9a:da:42:05:24:
                    1c:61:b2:ea:a6:4c:d0:f0:82:1f:04:0a:0d:60:66:
                    6c:ca:61:e2:16:a9:36:7b:08:17:dc:ab:09:a1:de:
                    81:ee:bc:22:bd:3e:f3:2e:a3:06:6a:e5:a3:6f:90:
                    74:0d:88:19:c6:1a:5a:eb:25:4b:48:05:e1:e4:be:
                    58:ed:eb:bb:99:23:95:a6:2b:5e:55:c1:25:b2:41:
                    50:22:c7:70:b4:75:42:d0:9a:29:7a:16:9a:d3:84:
                    fc:c2:43:03:17:1a:5d:d1:69:e9:0a:99:be:5e:04:
                    33:48:17:00:c4:13:fd:cd:48:cd:8c:ee:4b:4d:26:
                    fc:e6:1b:36:f7:33:81:66:aa:84:20:82:69:49:dc:
                    bd:3f:d2:34:e9:94:d1:d5:3d:d9:c6:44:e8:a8:a7:
                    69:92:b3:74:76:d4:e5:4b:75:d6:fa:ce:1f:83:96:
                    51:7e:2f:bc:d6:a7:74:cc:2c:89:d6:51:fe:3a:db:
                    e0:99:51:99:76:c4:49:84:43:44:a0:74:22:f3:45:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:70:D5:41:67:F3:D5:D5:D9:53:AC:B6:95:51:10:BB:C9:96:7A:63
            X509v3 Authority Key Identifier:
                keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b5:b3:88:16:b7:65:a9:36:e0:4a:af:19:7c:78:f1:99:33:
         2b:3b:b1:3c:96:e5:5f:13:d2:2a:51:1f:83:26:ae:bd:b8:48:
         f9:86:7b:f8:21:ec:cc:1b:73:20:8a:bc:2c:89:0c:73:7f:2a:
         65:b7:8a:82:54:cb:10:3a:3b:c3:da:a2:c4:62:89:51:10:42:
         e7:41:cd:a5:d8:e2:cf:52:32:b8:4b:e3:e3:16:69:48:13:05:
         d7:76:c4:fb:8e:ea:1b:e5:c7:16:0d:28:a9:87:f5:a6:6c:e5:
         ef:10:c4:b5:6d:d0:fe:75:7c:89:e9:f4:9f:a2:f0:fe:06:0a:
         23:86:8e:80:01:30:18:18:ec:38:be:bc:c5:6a:c4:aa:f6:67:
         2a:a8:49:d9:62:e0:fc:69:10:34:b0:69:f9:cf:85:8b:f3:05:
         c7:37:25:37:83:92:cd:3d:f5:b2:80:98:b8:2b:9f:1f:48:05:
         88:f9:48:c0:0a:c4:47:f9:2a:97:b4:8d:8a:7c:e7:24:16:11:
         fa:6b:56:8c:f4:05:d5:df:b2:9f:c6:0c:ab:9d:21:12:46:f2:
         f8:dc:4f:8d:a4:98:4e:c3:ba:02:d4:a7:48:5f:b6:58:d2:c9:
         7d:04:8c:23:4c:06:11:bd:97:e3:36:17:68:76:c0:4b:83:21:
         1a:ba:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:47:46 2026 by rpki-client