Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File:                     c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier:          pnAFVn2Tzb/R/gUQEhYvYEZeBwn63ySMSObYlsR2S8Q=
Subject key identifier:   91:91:7A:FC:EE:0F:C0:3F:9C:51:C5:FA:E0:A2:6C:D6:AB:7D:DE:A6
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer:       /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial:       01A0D049184621C4E77ED312E6EEBCC3C174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number:          13D2
Signing time:             Wed 23 Sep 2026 22:00:46 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:46 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:46 +0000
Files and hashes:         1: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: 45B+P/GvUCDRevxOWZtbke8IhpgZepgWVRWdmZto4Vs=)
                          2: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (hash: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:49:18:46:21:c4:e7:7e:d3:12:e6:ee:bc:c3:c1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
        Validity
            Not Before: Sep 23 22:00:46 2026 GMT
            Not After : Sep 24 22:00:46 2026 GMT
        Subject: CN=91917afcee0fc03f9c51c5fae0a26cd6ab7ddea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:09:01:5d:95:d6:d2:95:1b:18:8c:54:fd:
                    09:6c:64:5a:96:6a:36:fc:05:b2:69:47:05:a1:99:
                    d9:6b:a6:ea:51:75:46:81:15:33:55:56:b5:92:92:
                    0e:c6:fb:3f:2c:bf:d5:9a:14:4c:54:20:ef:de:9f:
                    37:43:d0:e3:a2:5c:c0:02:a0:e5:d1:ad:a5:48:df:
                    4b:22:0a:64:6d:56:e8:1f:67:23:52:71:d3:cf:3d:
                    ea:b0:38:ee:39:2f:11:0e:f5:32:68:41:c6:96:d7:
                    6d:74:a5:39:67:a3:94:82:54:06:dc:d2:7b:44:e0:
                    48:8c:6a:c6:8c:bf:91:9d:26:89:b5:ec:b7:6d:07:
                    96:b8:b3:a0:86:bb:54:2c:29:4d:14:d9:80:69:11:
                    66:2f:45:83:f4:f6:fe:a1:3e:ab:39:7b:54:dd:6e:
                    63:c6:ff:0c:26:be:68:2f:2c:9a:29:04:57:ac:53:
                    bc:e7:b0:85:cf:8e:e3:bd:35:10:e6:1d:86:51:23:
                    4f:85:24:20:6e:31:50:0f:a9:72:e6:71:cc:c0:5e:
                    46:d2:4e:a8:df:39:1b:c6:0b:90:26:07:22:69:14:
                    6f:82:29:74:e4:22:fa:19:45:15:0b:b1:08:35:a6:
                    67:28:92:bf:d1:5b:b1:b0:a2:1a:72:b3:b0:76:98:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:91:7A:FC:EE:0F:C0:3F:9C:51:C5:FA:E0:A2:6C:D6:AB:7D:DE:A6
            X509v3 Authority Key Identifier:
                keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:54:40:b6:3e:4d:74:c5:10:80:ca:af:ed:e7:1d:75:d4:7b:
         57:d7:20:dc:2b:13:9d:0e:87:49:ae:e0:11:bc:d5:33:6e:44:
         92:b3:7f:c5:88:bb:52:63:ce:4d:e3:7b:c2:e1:9e:2a:48:ed:
         15:43:d6:25:c6:4c:bf:d5:f3:fb:1e:e7:8a:64:cf:a4:ed:65:
         06:36:37:5b:d5:d7:4c:00:2c:b0:74:6c:73:6f:0d:14:2c:d2:
         7b:9d:ba:14:66:9d:99:96:6c:d9:d8:6d:12:7f:16:48:0c:05:
         5a:73:3a:4b:34:30:10:8a:70:f5:f5:c7:cb:3f:0e:07:fc:81:
         6f:98:e2:28:7d:54:ea:d7:28:6e:e1:d8:22:d8:8e:d2:92:7e:
         7f:5b:dc:8c:ec:23:7e:c1:18:4f:17:bf:62:4c:21:66:86:4a:
         35:3b:ab:18:68:d9:32:94:b4:87:1b:6a:b7:1f:72:c9:27:56:
         07:88:57:1a:e9:89:1b:73:1d:88:20:6c:6f:c0:3b:3b:7e:8e:
         98:79:a2:b3:fe:c5:ed:32:34:e0:a4:37:ac:ad:08:ee:23:9b:
         9b:7d:3e:8f:a4:58:a5:cf:4e:b5:b5:f8:3c:a2:fb:83:5f:8d:
         93:e4:a6:ec:5d:5c:0a:74:5e:0d:5f:1c:33:f7:95:ab:64:2a:
         8f:c9:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:35:10 2026 by rpki-client