Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          nha4VvdjbY1oaU0Fvh7j9E2kQo98+tStukzNgtwOwVk=
Subject key identifier:   31:3A:29:59:BA:28:FA:BE:59:A7:0D:C2:3E:79:75:4C:B7:27:CF:87
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       01A0CAEB71DB560F6F793642EAE2BF40EA4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          1A8E
Signing time:             Tue 22 Sep 2026 21:00:22 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:22 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:22 +0000
Files and hashes:         1: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (hash: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: jaOJulf1o/YSx5Xj8YWAx6JqRZ0KCpyQSEthlrl4LeI=)
                          3: MNQFqrdvbEoxedHfrXynKifNGnY.roa (hash: O31r8g9C5kBDn8OSezJHwFB/Y59lZjW3Z0fIfncmogI=)
                          4: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
                          5: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
                          6: uKVnkxpc55UHCp4G3gmfBYK9lgA.roa (hash: Yl+4aX3AL4iwnArD6mGCgp0IBTVDchipN4aGOMzOCE4=)
                          7: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:71:db:56:0f:6f:79:36:42:ea:e2:bf:40:ea:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Sep 22 21:00:22 2026 GMT
            Not After : Sep 23 21:00:22 2026 GMT
        Subject: CN=313a2959ba28fabe59a70dc23e79754cb727cf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:15:9d:61:c7:17:90:0a:bf:59:0e:2c:79:
                    93:ec:f4:11:06:94:23:7a:a9:89:a1:d3:f5:7c:2e:
                    6b:ce:ab:da:87:15:70:5f:10:af:6e:42:dd:00:2d:
                    0d:3b:11:33:7c:d2:20:50:21:28:34:d4:dd:1d:7b:
                    bc:3c:f5:ea:20:68:8d:db:bc:39:ad:08:2f:e5:e3:
                    ce:70:94:a4:c6:a5:50:12:c2:27:70:1c:79:93:d9:
                    e2:f1:ef:81:64:17:d0:2b:77:66:10:af:54:0c:56:
                    c6:8f:9c:1e:e5:f1:50:1a:e7:04:5f:de:25:b2:13:
                    65:ad:4c:e8:b1:94:18:d7:0f:be:eb:b9:3c:4b:5c:
                    55:1b:aa:fc:38:b6:b3:24:3e:31:0c:a5:99:4e:04:
                    e4:62:bd:bb:34:6f:e9:64:a5:e9:b7:eb:82:b5:87:
                    6c:8b:bb:25:51:2d:6e:47:1e:df:a9:d5:fc:34:e9:
                    d1:59:d0:08:1f:fc:5b:d9:9f:69:3a:12:d7:8a:8b:
                    3a:10:55:25:2c:0e:63:e9:9c:0b:df:4d:fa:66:a3:
                    d6:95:be:7e:0a:16:78:65:53:e7:5e:35:3d:62:02:
                    38:a5:26:e8:62:66:be:c4:c6:9e:c3:01:d8:e0:d0:
                    6e:eb:90:3a:46:e5:d1:54:80:3e:95:0a:e3:5e:04:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3A:29:59:BA:28:FA:BE:59:A7:0D:C2:3E:79:75:4C:B7:27:CF:87
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:51:14:55:5e:47:c4:78:aa:99:32:70:da:db:a6:ed:b9:cb:
         04:f2:28:42:b8:45:30:35:8d:cc:0d:00:5d:c1:83:3b:cb:9d:
         1d:9c:c7:0e:3c:cb:a6:11:12:02:25:ef:c3:84:6c:f3:95:da:
         b9:bf:a8:ad:a5:ac:2e:26:cf:50:e1:5e:2e:8b:84:3b:3e:bf:
         0f:af:88:1e:13:f7:57:c8:bf:bb:ee:31:fe:de:4c:36:c0:11:
         24:8c:e7:d0:2b:2b:81:0e:14:41:9f:0c:c4:49:54:7a:1c:be:
         cc:68:ed:8e:95:e0:cf:af:49:b9:e6:9e:51:b6:3e:cf:98:01:
         5d:4d:5e:ce:fd:76:a9:8b:33:d1:50:bb:00:ad:75:21:88:0e:
         81:a3:8e:70:7d:1e:bc:9c:fe:45:aa:5f:fb:9e:dc:0a:3a:94:
         bc:e7:41:34:20:e1:f2:85:4d:05:b0:cd:55:07:4e:fa:fd:50:
         72:ff:a7:1a:7d:9f:28:94:fa:62:42:75:06:bd:0f:e2:6c:9b:
         a9:a4:eb:d5:cb:bd:89:cb:c9:54:c0:34:f0:59:ab:48:6f:d2:
         6d:7a:d8:59:e0:8d:78:82:37:fe:e5:74:44:d5:e2:e5:f3:47:
         76:80:61:cb:d1:09:ef:58:67:60:5b:73:e8:22:a5:1c:90:af:
         b9:17:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:27 2026 by rpki-client