Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          MjtGdtNRT0lpKH027uRj0S9FJ0/N4PgplcUjmBTFYl0=
Subject key identifier:   67:6D:58:56:37:06:C4:AB:5B:7D:22:EE:69:45:91:32:E5:0A:90:FD
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       01A0D26E1A778A897932FF4A7A1BB81C6BAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          1A70
Signing time:             Thu 24 Sep 2026 08:00:26 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:26 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:26 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: 7gIs2r185vlHIFX599jBAwtIBBGcFroLLlqmFjT/09I=)
                          2: VuZOG8s543NfcGdXf57yIIrySJ8.roa (hash: Z7XKmPS1GYE3f8Q+rg/H8yChwaPlHaJspMgwTyoFFv0=)
                          3: sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa (hash: zq0CNZddr6RR3XPpn+vNQeYgJJau/bg5D4OmfDaVY/s=)
                          4: tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa (hash: enVyFjAXmV6jKlcwgcqYoRWX2/X4d1HEfq19dhiH9Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:1a:77:8a:89:79:32:ff:4a:7a:1b:b8:1c:6b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: Sep 24 08:00:26 2026 GMT
            Not After : Sep 25 08:00:26 2026 GMT
        Subject: CN=676d58563706c4ab5b7d22ee69459132e50a90fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:cb:8b:4d:a7:45:08:a4:04:e9:d9:70:d7:
                    32:12:25:af:28:b7:7f:00:6c:0c:ac:fa:f4:dc:50:
                    b6:78:e9:77:69:a8:d1:14:4d:ba:fc:d2:b3:65:8d:
                    67:d4:22:58:54:7a:5f:89:d1:a8:3a:78:98:c0:a7:
                    20:fe:d3:72:12:24:13:c6:32:7a:7f:99:af:f9:48:
                    4f:3d:4b:7c:80:b8:fc:08:00:3d:da:89:fb:a6:b1:
                    ab:ae:1e:8d:ed:38:c8:21:53:06:c3:5d:a4:21:d9:
                    2f:7a:2e:e7:c9:b1:91:7a:52:9e:58:f6:35:aa:e7:
                    4a:3d:f6:c7:be:06:46:8b:35:27:d6:65:36:6d:96:
                    d0:52:c3:24:e9:b7:a6:27:68:28:00:17:0b:de:05:
                    ca:7c:84:38:ff:e0:29:81:77:7f:5d:0e:f5:cd:cf:
                    b2:ea:e3:7d:4b:d3:b4:9f:23:c5:19:bd:37:ad:6f:
                    46:a0:fd:ba:53:3e:99:2a:68:d7:b9:51:06:ba:2f:
                    72:24:dc:c0:6a:d1:e8:bf:71:7c:6d:e9:26:b9:7a:
                    77:4d:4c:a1:68:6f:cd:f5:64:eb:4e:6d:f5:9e:54:
                    63:4a:ba:55:22:25:a5:13:b7:41:73:30:73:cd:26:
                    5d:7b:bc:b4:2e:db:30:51:88:88:06:77:55:e6:01:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:58:56:37:06:C4:AB:5B:7D:22:EE:69:45:91:32:E5:0A:90:FD
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:a7:a4:47:71:89:fb:b9:92:8c:c7:d3:38:ed:08:b3:15:
         ab:dc:52:f9:34:ed:2f:90:b5:cc:22:3c:6a:ec:8a:66:ba:23:
         bd:ac:65:bf:e1:68:a2:7f:d0:ce:f5:b3:90:73:d9:f7:80:e3:
         f5:b9:17:55:68:d1:1a:77:98:fd:ef:42:0e:e6:43:12:a9:65:
         a1:4d:80:96:94:36:6c:04:a2:c9:63:ce:ed:3a:1a:ce:fa:b2:
         1a:7f:f3:3f:13:22:0b:08:9c:52:3c:ed:02:de:d7:c6:30:0b:
         39:45:14:33:a3:4a:16:f6:f8:c7:9f:16:89:e5:e9:21:a8:70:
         f9:ac:55:39:d8:b7:06:f1:2b:ec:7f:9e:c9:20:d1:3c:cc:8e:
         d4:90:74:b0:d9:da:53:1f:4f:56:07:66:b9:18:a9:0f:fd:d0:
         cc:2d:df:cb:6a:45:bd:25:3e:3b:d7:2a:d5:f6:c5:9b:4c:5e:
         bc:58:a2:53:c9:69:cf:12:b4:e8:fd:4c:b8:43:16:4c:cf:01:
         a3:41:14:54:99:00:73:0a:23:11:f6:3d:93:09:48:7b:b9:40:
         10:d9:d2:dc:65:93:03:98:43:c3:5e:6b:77:1e:19:37:33:04:
         f3:d7:3c:da:15:7c:c3:a0:cf:78:a2:d2:f7:2b:f1:3f:69:ef:
         67:f5:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:51:47 2026 by rpki-client