Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          Z7yQK7MrhumZb+sPEhWGRJ8UXWFKSuxIKAUoyENUoiM=
Subject key identifier:   3D:C7:6C:34:40:B3:EC:04:FE:40:41:34:48:9E:80:C0:B2:19:27:8D
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       01A0CF6D02620D6D674BD5FA8CDE9C068DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          1A73
Signing time:             Wed 23 Sep 2026 18:00:22 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:22 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:22 +0000
Files and hashes:         1: 8ki6p7N4UmEmV-0NazqEv7cAQKc.roa (hash: Q0BUMMV+0mfUnsBWl6XxVsO5hGuTsx5iHlZ2d9i6cbo=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: ar5rhjiXHREV1p7QJvMm4GIQPig1W2AE64Xx3kgBRRg=)
                          3: Njus34_tWTQbMZlE1tRpeQUdH2I.roa (hash: 87ImyGsbG7v1MN92b3+FnhDyYHAWQQrZK7ULWDILgcQ=)
                          4: _DgxgPBMn4GEtr1HFV4lxED-jk0.roa (hash: 7MO54lxduq+XFWhLRW9Dq64qSqZFXeJN+DNM88s/Oz4=)
                          5: jI_ogoD6SCROAfC2uF5kFRHPxqA.roa (hash: sveu3znN5dPwYIjmbfsqGbK76GO+Tvbu31qn7+7Nv0Y=)
                          6: jvsxNshZlNTMsfGWs2Sh1xRbS4o.roa (hash: qSVicAoSlx92lOm4hijWey1zcFGYeV01I7K4wDaTK40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:02:62:0d:6d:67:4b:d5:fa:8c:de:9c:06:8d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Sep 23 18:00:22 2026 GMT
            Not After : Sep 24 18:00:22 2026 GMT
        Subject: CN=3dc76c3440b3ec04fe404134489e80c0b219278d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:c8:b1:6d:53:a4:ca:45:57:64:a2:2c:bc:
                    1f:b6:f2:ae:a7:4d:ec:78:57:72:fc:78:f4:36:7b:
                    e3:fd:b7:5b:a4:bd:f5:aa:86:68:ea:42:dc:b1:28:
                    a5:d7:1d:1e:2d:d9:97:f1:2d:c3:a3:79:1e:86:58:
                    d8:4b:d2:02:8d:32:a5:76:f2:f2:45:d4:cf:7d:dc:
                    da:fb:72:dd:83:7e:9e:9d:a3:fc:04:f7:fb:7f:86:
                    e1:f2:42:e2:5c:5c:3b:72:49:ea:55:3f:8b:8b:6b:
                    4d:88:1a:ee:d6:d1:04:af:9b:f9:6e:39:81:88:4f:
                    5c:be:db:fc:5e:33:29:47:9f:7b:96:53:e2:82:2d:
                    38:67:9f:9a:ba:46:99:82:d0:b0:f9:4c:e2:70:fb:
                    39:db:0a:84:b1:8c:b1:24:54:73:2f:ab:7c:8c:bd:
                    3f:41:51:bb:b2:f9:fa:1d:a1:52:86:90:03:4c:2b:
                    ed:98:fe:f8:ef:47:f9:1d:0a:8a:01:bd:53:7c:70:
                    38:ce:8d:dd:bf:07:63:fb:2b:42:17:3f:cc:ad:87:
                    58:43:b8:90:57:19:d7:65:64:4e:95:80:ec:a7:52:
                    89:f4:94:b9:4a:5e:92:f9:0f:67:4e:de:82:bd:d2:
                    cb:39:4f:91:8d:c0:5b:b9:38:41:2d:77:bc:0f:b4:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C7:6C:34:40:B3:EC:04:FE:40:41:34:48:9E:80:C0:B2:19:27:8D
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:d2:d7:a6:aa:a0:75:7a:0d:72:fb:66:a0:fe:ba:9b:eb:
         80:58:7e:18:61:11:53:a6:e3:52:b0:57:ed:b4:d8:31:67:b2:
         6e:c3:5a:60:b2:a7:7c:9f:89:3f:de:64:e4:dd:0b:15:b3:dd:
         3d:b0:63:86:68:ee:0f:f3:52:0f:55:57:b4:9f:51:d9:7d:fe:
         22:b8:30:57:60:57:a8:6b:b7:51:22:b4:ae:07:64:02:1b:a6:
         dc:49:3f:c8:6d:0e:62:bd:09:96:c9:35:1b:16:89:5d:8f:9a:
         6e:4e:26:38:69:52:50:e6:ce:33:b5:34:59:56:47:62:32:3b:
         d8:5a:de:1c:7f:57:83:be:5e:c7:80:79:0a:7c:25:40:70:06:
         be:2d:9c:5c:d6:1b:ce:86:b2:e3:b9:ae:1b:62:44:10:d3:d3:
         2f:01:ea:10:07:06:f9:ba:a2:92:36:27:cd:0c:77:0b:7a:dd:
         d1:87:bc:c9:cc:81:35:a8:59:38:19:f2:12:7c:84:dd:4e:f3:
         31:85:b5:84:52:5f:a6:00:a7:f0:6b:00:0c:85:f3:5f:46:ae:
         40:9b:49:fc:10:48:59:28:b7:c2:00:03:99:de:ad:84:c4:13:
         77:68:86:90:99:95:2c:9b:fc:0a:26:99:51:1f:35:5d:c5:a8:
         48:6b:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:44:52 2026 by rpki-client