Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File:                     9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier:          fNS/S3N87aLQbAcanHP6OerTb3juZaC/aik8dJYHI48=
Subject key identifier:   12:98:81:FE:D3:89:B7:C8:1D:D5:99:21:A2:C0:38:15:1F:A7:ED:9E
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer:       /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial:       01A0EB898DE2F9420E03646FBA6CC68A6C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number:          1A76
Signing time:             Tue 29 Sep 2026 05:00:55 +0000
Manifest this update:     Tue 29 Sep 2026 05:00:55 +0000
Manifest next update:     Wed 30 Sep 2026 05:00:55 +0000
Files and hashes:         1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: DWPuEG1zqXZ2UlZwhCGXKz56cfOpIeZtxzdDveKSpL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:89:8d:e2:f9:42:0e:03:64:6f:ba:6c:c6:8a:6c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
        Validity
            Not Before: Sep 29 05:00:55 2026 GMT
            Not After : Sep 30 05:00:55 2026 GMT
        Subject: CN=129881fed389b7c81dd59921a2c038151fa7ed9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:5b:a5:11:79:b0:47:aa:1f:2e:d4:6e:4a:
                    c6:f5:b1:43:92:c1:3a:99:ae:a0:7c:19:60:bf:37:
                    ef:92:46:31:ef:2c:08:b2:50:c4:33:b9:10:0a:53:
                    72:49:9a:11:46:85:83:de:5f:02:f9:74:0e:91:d0:
                    c8:12:b0:b7:e7:fd:ee:76:14:3d:f2:b0:95:1b:e3:
                    b7:3b:a2:4d:4a:fd:47:d1:c7:ef:5f:78:17:b5:8c:
                    ee:ae:f7:a7:f7:b9:8e:c8:50:b4:af:28:d7:e0:90:
                    39:b6:ab:b1:f6:28:bf:4c:eb:da:0e:cc:cb:78:00:
                    7c:fe:41:f0:1e:f9:f0:0e:4e:42:fd:d1:af:37:c7:
                    db:e8:3c:19:50:df:70:49:8b:62:1c:17:34:6a:2b:
                    7e:32:5c:ed:ae:b7:71:e1:b8:62:fd:17:a4:56:cf:
                    3e:66:59:f5:33:44:92:71:4c:09:e3:ad:61:00:5c:
                    42:99:8d:61:de:4e:08:ac:15:79:79:8d:3f:b6:8f:
                    db:2a:d8:7c:93:35:5f:41:c4:45:82:a1:65:e4:75:
                    b3:c7:48:85:39:31:dd:d0:49:85:65:a8:cb:0f:d3:
                    9b:e1:cd:62:01:29:e6:1f:51:08:30:ab:43:d2:c5:
                    62:64:34:5e:15:d5:91:1f:c9:7c:f6:63:50:55:1d:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:98:81:FE:D3:89:B7:C8:1D:D5:99:21:A2:C0:38:15:1F:A7:ED:9E
            X509v3 Authority Key Identifier:
                keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ff:31:ba:01:80:74:d4:1b:93:6f:39:eb:e8:69:f6:68:2a:
         83:26:b0:54:64:4f:5e:33:87:6e:da:67:d4:c5:3d:0d:be:29:
         fb:e8:4c:f0:c4:56:5f:42:04:c0:44:97:54:b5:a4:a4:dc:54:
         0e:5f:3d:21:e8:23:ed:c0:21:5f:df:88:38:5e:b2:33:90:7b:
         22:7a:b3:a7:c2:3c:d3:70:3a:82:c0:a3:73:47:8d:0f:94:29:
         c3:7c:dc:3e:d0:6b:d7:3e:cd:15:ff:6e:8e:91:c7:ba:88:2c:
         82:a5:3f:e9:09:47:38:af:11:c3:61:1f:95:79:5b:f2:ff:1d:
         98:02:b5:74:4d:7f:63:a8:b0:f5:da:9a:a8:b1:8b:b4:a4:a5:
         54:cc:de:45:b0:19:9b:a3:f2:cf:c3:ff:03:8f:6e:2f:e3:42:
         91:bb:60:b8:0a:7a:5e:7e:2c:50:0b:bb:d9:9a:2b:3f:68:b4:
         13:59:21:a0:30:19:e7:3c:12:f6:86:8f:b5:54:8f:fd:f3:2a:
         8b:7e:d7:80:27:37:57:17:92:08:38:ca:3f:5c:5d:cb:8b:48:
         6d:46:01:2a:17:19:c8:f7:75:4f:76:85:88:20:d4:62:42:5f:
         8e:fe:a8:98:5a:b1:06:b4:3f:93:39:58:bf:82:8b:7c:3d:07:
         7c:04:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:54:16 2026 by rpki-client