Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
File:                     9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json)
Hash identifier:          5FK9cGQ5XErAdZrbKzjsGTuMvjGOAb+WWnUQH1aAu3M=
Subject key identifier:   A6:A2:DC:77:17:E4:4B:72:2E:8A:51:11:BF:B8:A1:78:FB:0F:19:51
Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Certificate issuer:       /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Certificate serial:       01A0E098D9BC19F1EB79D1C97182F170C3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
Manifest number:          0467
Signing time:             Sun 27 Sep 2026 02:01:48 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:48 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:48 +0000
Files and hashes:         1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: wg+RDWP2yw8vy9bWl4i9HIr/wPg/FN34ziCJbasE2RY=)
                          2: wpr47QW5yPt3pCsYurF1J3o7Rg4.roa (hash: 0bSRAwMu0O91Emdt4EmzLACfG7UlbU7GDgVzgrcUSBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:d9:bc:19:f1:eb:79:d1:c9:71:82:f1:70:c3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
        Validity
            Not Before: Sep 27 02:01:48 2026 GMT
            Not After : Sep 28 02:01:48 2026 GMT
        Subject: CN=a6a2dc7717e44b722e8a5111bfb8a178fb0f1951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:79:22:f1:8d:92:50:79:10:5f:8b:52:4b:
                    65:29:ca:89:1f:e1:e1:04:f2:47:2a:17:16:b4:0a:
                    cc:a0:b3:ca:0b:35:2a:3f:7e:1e:b4:d9:45:45:2d:
                    8f:e5:7a:d9:a7:f0:25:bc:21:9e:3c:ea:5f:b5:08:
                    e1:b3:f1:ae:51:79:45:c5:1a:5f:e4:c7:09:aa:d6:
                    3b:39:ef:bb:2b:bb:4f:61:90:de:c3:96:3c:06:23:
                    b1:ac:ab:c9:59:1e:09:7c:fd:43:d7:c4:9f:43:61:
                    4c:b4:aa:13:f6:c8:49:94:24:3d:30:f8:6b:cc:25:
                    41:c6:2e:28:a6:58:a3:a9:79:57:6f:57:81:d1:4c:
                    dd:df:9d:d2:1e:64:36:3f:4f:67:e5:fe:14:68:7e:
                    57:6f:57:8c:98:f1:dc:40:93:31:55:6c:9e:b2:e9:
                    5c:b7:cd:fe:20:ef:9a:3e:23:5f:82:4a:04:87:0c:
                    51:32:7f:26:0b:c0:75:f7:84:71:6d:f8:de:5a:b1:
                    70:86:a8:c4:3a:66:d6:db:f6:9a:59:f5:3f:ac:e5:
                    f3:06:c6:48:dc:ef:d4:c7:2f:84:e6:15:a8:e5:cf:
                    ab:7f:ff:73:57:d4:85:ef:41:39:c2:9f:3f:b1:6e:
                    34:7d:8d:0f:ff:67:0a:5f:a1:41:51:c2:7b:fd:8a:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A2:DC:77:17:E4:4B:72:2E:8A:51:11:BF:B8:A1:78:FB:0F:19:51
            X509v3 Authority Key Identifier:
                keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b9:e4:a9:9d:d9:86:7f:42:27:43:2b:91:b8:4a:89:94:39:
         76:e9:3b:b8:20:73:d2:3f:2e:6f:d1:8e:d4:a4:ad:1a:6f:51:
         8a:3b:0e:7f:0f:a8:2d:92:3b:eb:dc:e8:42:6b:f5:c7:10:fc:
         c4:e8:c4:65:88:c5:01:58:6c:7f:5b:7c:40:20:a9:23:91:f2:
         81:03:84:16:75:39:c3:1c:73:88:6a:b0:7a:46:ff:61:3f:0a:
         80:12:f9:d8:27:e7:24:9e:bf:88:b5:97:1d:b8:78:4d:42:37:
         0c:48:e6:e8:3a:50:6f:78:96:f5:fa:20:b9:c2:cb:90:4f:60:
         c5:c0:82:8f:85:fd:41:6d:5d:67:12:d4:7c:f6:71:b4:84:b1:
         bc:8d:75:33:f0:37:e4:c3:56:81:b7:f9:48:10:0c:40:b1:68:
         60:63:64:23:e2:e1:f0:59:3c:d9:dc:0d:bc:68:4e:2c:55:c8:
         b8:b8:bb:5d:6b:67:e3:01:3c:75:e4:10:54:c4:60:db:ac:cb:
         c3:0a:74:2c:06:ce:45:9e:e7:5f:76:03:17:dc:2c:9a:c6:7b:
         6f:78:5f:a6:45:99:48:a2:9a:74:60:05:3f:0b:92:3a:89:bf:
         70:f7:f9:df:9f:da:d2:f6:d3:13:33:a7:5e:fe:85:4a:2c:4a:
         6e:c6:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:50:48 2026 by rpki-client