Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File:                     9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier:          zgt0UW7/5v2dV+rsUViJZYrpWZ9eE9JG7VFIC4MmzFg=
Subject key identifier:   96:9C:4D:73:18:40:3E:F9:48:FA:74:FD:CF:59:4D:0F:13:23:22:F8
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer:       /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial:       01A0CB22E57677018774F41A3599C1053448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number:          1A65
Signing time:             Tue 22 Sep 2026 22:00:56 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:56 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:56 +0000
Files and hashes:         1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: ZHQolyqk29NbZ96ruyTVhkHs5hYaLLXlbbdsEhyMa0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:e5:76:77:01:87:74:f4:1a:35:99:c1:05:34:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
        Validity
            Not Before: Sep 22 22:00:56 2026 GMT
            Not After : Sep 23 22:00:56 2026 GMT
        Subject: CN=969c4d7318403ef948fa74fdcf594d0f132322f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:a7:2f:8c:46:cd:6f:20:c1:b2:e1:d2:29:
                    10:d9:fe:aa:af:3a:4e:58:27:25:cc:78:7b:55:29:
                    04:d1:3a:7e:c4:88:95:2d:b4:5b:d4:6f:ba:d7:b1:
                    f3:14:21:96:76:e0:a5:da:6a:4e:00:f8:19:90:a0:
                    27:cd:82:c6:73:07:ea:04:ce:88:ae:5b:ff:0c:ed:
                    11:6c:20:e4:c7:f3:21:4a:72:ab:71:b6:3e:93:8b:
                    2d:3f:56:0d:ad:03:1c:80:10:88:87:cb:86:3b:30:
                    cc:ae:65:55:5b:58:6c:da:b6:be:23:d9:8e:08:89:
                    0e:8f:24:7a:de:24:a4:49:2a:e1:7d:83:0e:1c:b3:
                    dc:18:d6:68:67:8b:7a:ea:31:4c:a5:42:0a:84:82:
                    96:bc:35:98:7a:8b:e3:a6:4d:83:83:50:20:8b:09:
                    b5:7e:fd:2d:35:b7:32:49:22:72:d4:4b:7b:a0:66:
                    7e:b3:bd:53:81:6b:22:28:cd:93:7a:c4:84:cb:04:
                    fc:28:84:aa:01:fd:40:14:37:94:dc:2d:92:da:6b:
                    8e:3d:ed:ad:11:8c:7c:33:a3:02:36:40:ed:99:fa:
                    44:f6:c4:48:ef:03:6c:d2:40:e3:3d:78:14:9f:f2:
                    3a:b8:0f:6f:a7:c5:36:42:a3:24:1a:d6:57:20:ed:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:4D:73:18:40:3E:F9:48:FA:74:FD:CF:59:4D:0F:13:23:22:F8
            X509v3 Authority Key Identifier:
                keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:74:a2:c2:45:95:c6:fd:01:c9:f2:3e:23:db:08:c3:f8:5a:
         95:a1:d3:03:31:3f:70:b1:4e:ac:1b:e7:f7:8a:a1:9f:8b:0d:
         d0:e4:f4:ea:ec:b5:73:49:1b:a2:66:10:5f:2a:21:0d:b7:97:
         56:22:e2:13:19:cd:11:28:2b:27:6d:98:08:af:a9:16:c6:c6:
         c4:d3:7c:10:83:b7:b3:59:35:0f:d6:f3:97:84:74:9d:20:97:
         57:78:b8:7c:e0:05:d9:11:f5:73:d3:76:61:96:06:5c:b5:ee:
         47:67:78:dc:72:7f:24:8c:10:1c:97:c3:fc:dd:6b:88:c1:e1:
         1a:ae:00:ef:a2:39:da:f9:51:73:c8:4e:ae:ce:50:f0:9a:f7:
         f2:30:b7:19:97:c0:13:95:19:32:bc:60:f7:17:1c:62:aa:a9:
         a5:b8:0b:61:3a:24:14:ee:57:8e:50:94:74:53:6e:76:f6:e1:
         b4:17:de:c9:29:4e:a3:1d:4a:2e:b9:e2:0e:21:b9:01:db:2f:
         b5:c0:9a:8e:fd:f8:e6:da:76:42:f8:c2:db:1e:50:60:73:6d:
         f3:bc:89:9b:70:30:1b:70:81:5b:38:23:3b:d2:cc:a6:85:fb:
         d8:6e:ff:48:fb:65:ec:60:fe:61:a2:91:cc:89:e7:e0:89:31:
         71:12:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:27:21 2026 by rpki-client