Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File:                     h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier:          0p8UPBfAMtHRSOCawHXOYEaSyhZuKoJTk81f9khK0VQ=
Subject key identifier:   B4:95:A5:6D:67:70:A1:AC:BE:9A:5D:73:8D:53:7C:20:6F:14:AC:63
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer:       /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial:       01A14D626F23BC2C69A53761B3BC38F5AB12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number:          0F60
Signing time:             Sun 18 Oct 2026 05:00:58 +0000
Manifest this update:     Sun 18 Oct 2026 05:00:58 +0000
Manifest next update:     Mon 19 Oct 2026 05:00:58 +0000
Files and hashes:         1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: qW/blXe6YLmeuCmt3BLWZ3n8Z+pblS0njR/Lvh/wAOc=)
                          2: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (hash: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:62:6f:23:bc:2c:69:a5:37:61:b3:bc:38:f5:ab:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
        Validity
            Not Before: Oct 18 05:00:58 2026 GMT
            Not After : Oct 19 05:00:58 2026 GMT
        Subject: CN=b495a56d6770a1acbe9a5d738d537c206f14ac63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:7f:8c:2d:be:63:dc:46:f3:b5:0b:26:c7:
                    00:05:04:2e:31:ff:16:08:75:95:c5:1b:c6:9c:9e:
                    8b:0e:ef:0b:07:73:46:e1:f5:3a:ad:c0:6a:8c:9c:
                    77:61:92:01:c7:b5:2b:1d:14:93:b4:9f:1e:f3:c9:
                    ac:f3:fb:6e:23:2c:fe:af:ca:dd:fa:48:85:07:83:
                    4c:a2:5f:4f:2b:00:39:19:bd:0c:00:f8:94:99:1b:
                    84:7e:65:0c:cb:90:ff:76:fd:d1:d0:ad:b4:8b:e0:
                    be:a3:3f:04:80:e0:df:59:1f:f7:3f:3a:66:e7:6e:
                    35:01:ff:da:21:5e:9e:7c:20:c0:71:62:66:86:c1:
                    a2:9e:f2:d8:ee:8b:78:99:c1:37:26:28:14:09:3b:
                    89:56:fa:15:78:3e:bd:84:73:5a:15:2f:70:22:eb:
                    c0:fd:4e:6a:4e:50:e4:9a:e3:d5:c9:66:99:f6:f8:
                    ec:c1:65:b2:ea:7f:1b:9c:90:ff:b5:b3:07:8a:e1:
                    ec:2d:b7:b6:e5:46:1b:b8:55:ae:38:c9:53:92:08:
                    12:ab:5f:bb:db:35:27:12:87:8b:3a:09:45:3b:c8:
                    20:97:c2:05:0f:57:51:3a:47:e4:83:b3:0b:94:7d:
                    43:a1:5f:cd:7e:c8:00:9f:37:1a:9e:32:9d:96:84:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:95:A5:6D:67:70:A1:AC:BE:9A:5D:73:8D:53:7C:20:6F:14:AC:63
            X509v3 Authority Key Identifier:
                keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:c6:48:44:e9:16:6b:45:d8:e5:5c:1d:e3:d3:e0:8f:c0:
         62:fb:61:62:31:f2:db:77:36:0a:d2:d2:20:d6:3e:84:35:ef:
         4c:76:18:c1:63:d7:c9:c7:e0:73:49:ae:7f:76:5a:e3:cd:c2:
         ff:dd:2c:44:dc:91:99:1a:d3:73:bd:88:ed:63:5d:54:c4:94:
         56:0b:cc:8b:b4:60:c9:17:27:fc:e8:6c:21:05:f6:7c:64:53:
         66:dd:1d:c5:a4:56:61:be:15:0d:d9:23:b9:89:df:0c:41:82:
         46:ea:b9:cf:91:8d:76:bb:7c:7c:5e:69:9f:fd:93:1d:a7:4b:
         d0:99:d5:74:e3:b0:28:e9:3b:ec:74:6d:3c:0d:81:97:4e:1c:
         c6:5c:2c:ad:2b:89:9a:6d:bb:4a:4e:30:4e:7c:14:35:86:2f:
         e7:ca:d1:70:01:1d:1a:47:5f:7d:20:5a:f8:f5:5a:04:70:1c:
         0c:0a:46:cd:f5:27:d8:9f:28:68:24:0e:f3:56:95:4a:70:5b:
         72:bb:87:a5:c1:04:72:f2:5c:d2:73:6a:6f:71:da:f1:66:fb:
         db:b3:9a:22:09:7b:3b:5c:a6:73:a1:ac:fd:81:eb:9f:09:2a:
         65:b5:79:77:f4:6f:c2:b1:00:ca:f4:c6:d7:c6:bc:e7:c9:8a:
         e4:31:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:36:14 2026 by rpki-client