Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File:                     9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier:          ysVGlOcfzFNQYfk/7tvNEn3Qj6bmhCrb1Aohp+KyI9A=
Subject key identifier:   D4:47:CB:77:0D:33:04:4D:F8:BD:3A:F7:07:EC:F1:66:0F:43:1B:26
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer:       /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial:       01A0D5021BE20C1F3BE4B71D0F90072EBF19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number:          0862
Signing time:             Thu 24 Sep 2026 20:01:20 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:20 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:20 +0000
Files and hashes:         1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: Mg8yRP02RSA8QV++OKSVpIZUfWfZwk9pRkfz5WootJ0=)
                          2: MSkSuk2uY3DEvPKjzciz_6zSiBs.roa (hash: bKmP81Ny3lbO1lhfJcpvSqIFO1Qid3YCkNlkgwazZYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:1b:e2:0c:1f:3b:e4:b7:1d:0f:90:07:2e:bf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
        Validity
            Not Before: Sep 24 20:01:20 2026 GMT
            Not After : Sep 25 20:01:20 2026 GMT
        Subject: CN=d447cb770d33044df8bd3af707ecf1660f431b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:55:52:9a:3d:48:74:21:4f:ea:f7:6a:f5:
                    f3:7c:b1:43:45:85:82:b8:27:f2:71:f8:88:84:9d:
                    22:cc:78:c5:c7:0a:a2:f9:94:02:a2:0c:56:49:f9:
                    27:53:3f:48:e0:91:d8:7d:78:71:2f:3d:d7:95:82:
                    93:0b:fc:b5:66:b7:bd:c6:0d:ee:ef:de:c5:5d:dc:
                    45:32:6f:ef:db:3d:d4:86:ab:ac:28:fd:a8:59:87:
                    84:93:56:b8:99:82:78:1f:52:f3:ba:9e:fa:34:6e:
                    50:cb:ea:56:ad:3d:0c:f8:cf:61:29:d8:d3:d9:7a:
                    da:b6:39:fa:c3:63:e3:86:27:13:ea:5c:48:a4:e2:
                    85:fa:d8:dc:62:84:10:30:93:13:4b:a1:f9:4f:ed:
                    c1:b2:fb:b8:64:6b:65:bb:c1:4f:a3:bd:38:37:8a:
                    24:06:c6:bd:74:43:49:ad:2b:6b:0e:64:24:dc:97:
                    83:d8:5d:0d:27:cc:8b:a5:fe:e8:e3:17:db:ce:e3:
                    b4:60:8d:b2:92:e5:67:3d:99:e1:92:ce:59:c6:49:
                    1f:56:75:57:05:ff:b2:99:93:73:e5:f2:c4:25:53:
                    f6:02:08:50:7d:15:d0:42:97:0b:68:6a:07:9c:0f:
                    25:55:08:cb:87:24:48:14:f1:c1:c2:36:47:99:8a:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:CB:77:0D:33:04:4D:F8:BD:3A:F7:07:EC:F1:66:0F:43:1B:26
            X509v3 Authority Key Identifier:
                keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:03:35:1e:ac:3d:f0:94:59:61:3c:5b:6f:95:59:39:0f:56:
         25:50:88:a9:54:a9:37:0a:86:0c:2e:cc:47:3a:3e:57:e2:4d:
         42:24:45:7b:be:65:a1:8e:ae:0d:a3:26:1a:05:fc:e8:cb:a5:
         4a:5e:02:aa:55:31:8d:05:24:a1:14:8e:b1:03:19:e3:c0:c8:
         69:00:51:72:e1:56:9a:f8:5a:e9:09:aa:cd:1c:6f:e4:18:59:
         cd:44:18:80:41:f0:cc:82:cd:d6:18:37:28:61:f4:4e:9d:6a:
         54:0f:e8:73:2b:6c:67:e8:4d:ed:34:c9:75:3c:ea:46:78:ad:
         38:2b:3b:45:65:53:cd:48:5f:c5:0e:59:28:69:d6:ef:bc:47:
         e3:ab:2e:08:35:54:37:61:14:2e:f2:8d:fb:28:c2:cf:fc:44:
         13:10:50:03:f6:78:8a:9a:7a:92:b6:1f:32:df:0a:e1:e1:e9:
         92:d0:42:0b:ca:70:70:37:ee:e2:e6:8c:09:d2:73:06:a6:41:
         5a:0c:6c:85:35:ba:5a:0f:02:93:e8:c5:04:6a:b3:60:25:f2:
         97:b5:15:bd:da:29:03:f1:2e:53:ca:98:2b:b4:51:19:47:ab:
         29:aa:14:3f:93:67:e1:cc:a4:76:36:c3:23:7d:65:5b:86:6a:
         48:fb:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:38:00 2026 by rpki-client