Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File:                     C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier:          SjB62Rrg38oiZVEO6za/02p4vUC8deQyvxacekiTlrk=
Subject key identifier:   28:AE:8B:80:F3:55:BB:1B:15:31:D4:47:E3:9D:74:0B:49:72:7F:F9
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer:       /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial:       01A0D1928F0AA406D5D7F92C09261893D575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number:          19F9
Signing time:             Thu 24 Sep 2026 04:00:37 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:37 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:37 +0000
Files and hashes:         1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: i7dzhDzys5Da4bmG+wsWBi46/tSR6Yg/eYEvfsArL4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:8f:0a:a4:06:d5:d7:f9:2c:09:26:18:93:d5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
        Validity
            Not Before: Sep 24 04:00:37 2026 GMT
            Not After : Sep 25 04:00:37 2026 GMT
        Subject: CN=28ae8b80f355bb1b1531d447e39d740b49727ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:33:df:ab:28:a1:17:0b:03:a3:a7:7f:18:
                    e5:72:ff:9b:61:be:e2:1b:57:d6:de:17:46:0c:6e:
                    2a:f9:15:93:8e:cd:2a:c0:54:b2:01:b6:42:4a:c7:
                    8e:65:66:12:f1:35:42:08:9d:4a:07:27:30:11:09:
                    b0:0e:d2:dc:24:20:0e:ca:27:87:fb:c9:b2:4f:ef:
                    06:a9:63:45:a6:28:88:a8:0e:ed:51:21:c6:0d:2c:
                    b2:9a:5d:55:84:9c:a9:97:d2:67:2c:07:e6:24:f7:
                    51:f5:06:a7:54:15:dd:11:47:90:c4:04:db:a9:82:
                    84:0e:19:bb:35:cc:85:00:af:df:7c:8a:25:fa:48:
                    5c:b7:a1:05:a0:91:b4:33:b0:ae:35:68:52:10:3b:
                    d4:93:aa:9e:20:a5:ec:cc:ec:5e:43:96:fe:be:0b:
                    59:c2:68:c4:e5:70:aa:a7:f8:91:1d:ab:6a:11:ba:
                    e0:2a:11:55:60:32:0a:ec:00:98:db:a8:d7:a0:01:
                    40:4d:be:a7:6b:8c:29:ed:92:fe:9b:a2:ba:28:6e:
                    b9:62:1c:38:9d:6b:fb:45:76:c7:6c:c3:94:e4:ff:
                    85:5b:b4:4f:23:12:0b:c7:61:37:1b:a1:49:6d:4e:
                    2d:ed:c5:bd:b7:79:82:78:3e:1a:70:8e:f2:99:32:
                    c4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AE:8B:80:F3:55:BB:1B:15:31:D4:47:E3:9D:74:0B:49:72:7F:F9
            X509v3 Authority Key Identifier:
                keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:61:2e:28:90:69:55:1d:77:3e:37:04:48:04:38:41:6c:b2:
         de:e4:70:f9:a8:f8:e4:2b:1a:0a:52:34:ef:7e:97:08:b8:d1:
         f7:fb:d1:64:88:bc:e6:9e:2c:0f:f2:73:d4:ef:61:21:0a:44:
         60:76:d5:10:cf:96:df:d6:c6:12:1f:bf:d0:d9:17:ec:10:e9:
         7d:fe:70:55:d6:82:53:ac:ed:dc:68:79:47:13:65:f9:22:8b:
         4f:95:f4:dd:9a:f8:cd:fb:ae:d1:7a:1f:26:2c:b0:a9:3c:54:
         1e:b2:f6:5b:3a:b2:d6:81:6e:55:1e:e0:fc:62:52:20:0c:b2:
         54:60:05:43:e1:6f:41:7e:07:4b:c5:89:02:f2:c6:79:d1:21:
         fe:b8:a5:6f:7e:d0:f5:92:e6:25:bd:15:60:bc:f8:93:58:e4:
         33:54:cd:a5:5a:32:74:62:43:77:7f:5b:74:0f:5e:3a:3b:bf:
         4f:24:c5:2b:83:70:6f:f7:33:38:74:13:80:f5:73:97:56:1b:
         3e:4a:fd:19:60:ce:3b:30:4f:6a:4b:5d:7b:73:62:9b:30:e4:
         21:21:8b:e4:e6:62:36:d7:b4:26:47:37:16:1c:9c:56:51:cd:
         35:82:b7:84:3d:bd:d6:e6:fc:b9:3d:5c:c0:dc:2c:e7:de:dd:
         20:97:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:43 2026 by rpki-client