Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File:                     C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier:          W2KDgeSVRN/aBaCuMkvn4KYoQssWzq3uK1dqdAnl1yc=
Subject key identifier:   56:0F:46:85:02:1A:0F:9C:2E:4F:42:AE:98:C9:C3:B4:17:91:EC:15
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer:       /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial:       01A0CB22B884ACC416F32A924EDD6117E67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number:          068C
Signing time:             Tue 22 Sep 2026 22:00:45 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:45 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:45 +0000
Files and hashes:         1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: hR4SHTEEmOQcthf+CY98nlZ5uN/673xP9GV3yKXCXXw=)
                          2: WJTr2Tk1_nZlSZj0AI0um0QiPjI.roa (hash: mYhezBwJPYjVc5I7W3f+glCZHfaPOouHpLS/423/Sw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:b8:84:ac:c4:16:f3:2a:92:4e:dd:61:17:e6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
        Validity
            Not Before: Sep 22 22:00:45 2026 GMT
            Not After : Sep 23 22:00:45 2026 GMT
        Subject: CN=560f4685021a0f9c2e4f42ae98c9c3b41791ec15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:e7:f7:ca:19:4a:c6:67:56:d2:1c:35:dd:
                    95:30:26:fd:6b:7d:af:2c:be:1f:8b:11:d7:b5:84:
                    fc:18:2e:51:71:c5:1e:0b:ee:20:63:0b:bf:7c:30:
                    eb:67:2f:09:bc:d9:21:3a:2a:e6:74:ff:54:24:48:
                    20:ee:88:72:72:4f:a3:e1:44:e4:2f:45:2f:f0:73:
                    b7:c6:0c:3e:77:84:fe:67:a2:bc:47:dc:9a:7a:b2:
                    ca:1b:d6:b9:11:4b:94:fc:1e:e4:ed:6c:7f:fc:55:
                    5e:40:70:4d:7c:bb:29:e2:d2:22:9d:f5:f6:31:e3:
                    ec:8c:d6:53:6e:06:3d:d1:fa:31:7c:31:ef:ed:d1:
                    ae:80:e6:a7:63:7d:81:41:fe:e8:e9:7d:e5:3b:cf:
                    22:40:83:2a:e3:d9:19:38:b6:ee:29:17:87:95:fe:
                    42:8b:a2:86:4b:7f:42:3e:a7:e6:e6:80:e9:89:e3:
                    74:a5:41:2c:22:8c:44:7f:9b:fe:8b:25:e0:40:68:
                    46:d6:cf:4e:e8:4c:f7:d6:dc:c7:42:d0:c3:4f:45:
                    3f:a0:9e:b5:46:6f:02:01:f9:80:56:cc:87:ad:25:
                    c9:ab:c5:9e:43:33:e7:d9:a7:ce:43:3f:5f:80:20:
                    5e:15:89:26:1f:ba:ef:66:54:5f:c6:1c:54:e7:02:
                    70:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:46:85:02:1A:0F:9C:2E:4F:42:AE:98:C9:C3:B4:17:91:EC:15
            X509v3 Authority Key Identifier:
                keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:f9:1c:47:f8:0c:70:ea:b6:e9:6d:40:a1:b0:77:c6:6b:
         90:95:35:99:3e:3f:bc:51:4d:65:de:3e:b9:0c:94:1b:70:fe:
         12:f9:21:d2:4a:45:0c:9c:1d:b8:3b:1a:98:16:e1:e8:9c:98:
         71:83:77:86:0c:cf:4a:dd:4d:18:fa:0e:04:15:9f:8c:8e:50:
         85:26:40:9e:50:23:ba:04:84:f2:50:d9:a7:84:a3:3d:90:07:
         1f:74:b0:71:fb:1f:fc:90:fe:8d:54:a1:5e:22:69:c1:ca:8b:
         93:5c:ba:34:42:9e:ba:e0:62:28:14:2c:a6:4a:50:66:10:16:
         58:f3:ab:4c:8a:86:79:45:fb:3d:22:ee:3e:3a:45:e8:c3:5b:
         f6:66:05:df:38:df:d7:a0:a1:9f:e0:6c:42:3c:40:89:9f:d2:
         1b:8c:6f:00:58:b7:88:a4:e6:80:3f:3a:39:a3:70:7d:1f:4b:
         f1:67:db:93:ad:45:41:45:27:b7:c7:c9:4d:d8:e3:04:f3:66:
         cc:c1:fa:db:db:80:e0:6e:28:f1:e5:ab:c3:c2:0f:66:94:12:
         12:9a:7f:cd:ee:15:7f:fc:7b:00:cb:9a:1b:3b:af:48:83:ef:
         8d:d2:60:d7:a2:20:51:32:db:60:26:ad:47:b6:1d:12:44:40:
         47:03:a4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:19:41 2026 by rpki-client