Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
File:                     9j_pwTQEHOvaVoufkI4q7zirf3U.mft (raw, json)
Hash identifier:          6bFfS1w7DUKPAyemc2r9lFum+5ecvpfcGGfRgIm9/uo=
Subject key identifier:   F9:34:46:26:13:98:D9:59:48:F5:86:BF:70:17:DD:12:FF:0C:17:32
Authority key identifier: F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
Certificate issuer:       /CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Certificate serial:       01A0F11E720EF02BC57225DFC9D8DA3241B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
Manifest number:          10D3
Signing time:             Wed 30 Sep 2026 07:01:39 +0000
Manifest this update:     Wed 30 Sep 2026 07:01:39 +0000
Manifest next update:     Thu 01 Oct 2026 07:01:39 +0000
Files and hashes:         1: 9j_pwTQEHOvaVoufkI4q7zirf3U.crl (hash: zbqIoYeejTJ95Hx8sCgdN1nsLJiP3sipQdGofz0ozws=)
                          2: ol_JEp9GJvGNVjYx1Pw8RWe4xLQ.roa (hash: tRtrIVFRMFtnff6mODXc8+s312Nmn2BxI0riNWUQx48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:1e:72:0e:f0:2b:c5:72:25:df:c9:d8:da:32:41:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
        Validity
            Not Before: Sep 30 07:01:39 2026 GMT
            Not After : Oct  1 07:01:39 2026 GMT
        Subject: CN=f93446261398d95948f586bf7017dd12ff0c1732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:de:2a:86:7f:84:14:1f:64:5f:fd:37:73:
                    68:26:a0:0b:26:0b:06:3f:01:49:ae:cc:32:d1:42:
                    fa:45:e6:ab:ee:90:2f:2e:9a:e3:6b:5b:e8:4a:12:
                    3e:f0:44:b2:9b:57:b8:99:01:09:6a:8a:71:f9:1b:
                    94:35:6f:f5:9f:fb:54:4f:8d:98:7c:6b:18:fd:ac:
                    de:4d:91:68:33:51:9e:93:47:d3:cb:ab:46:67:d4:
                    96:9b:9b:c4:33:ab:da:7f:07:c7:53:f3:f4:02:01:
                    a7:59:74:85:52:54:f6:d5:ee:ba:5a:b8:7e:4d:79:
                    ce:1d:44:e6:66:ac:bc:42:08:69:67:39:bd:20:b3:
                    92:6c:6c:72:49:85:87:87:1e:4c:77:47:ed:15:dc:
                    40:c7:16:12:57:67:3e:9b:f0:65:fb:01:63:f5:4e:
                    a4:03:54:bb:b6:84:b0:04:62:c8:6a:8f:47:16:68:
                    24:34:02:6a:59:a1:ba:d6:df:7b:69:05:8f:8f:9e:
                    08:7e:a7:c8:7c:96:44:4e:b3:fc:42:6c:67:6e:c1:
                    06:42:3c:ec:98:12:8b:a8:89:0e:8c:d9:ba:63:0e:
                    ad:c1:64:b2:b3:50:36:ac:70:d4:0d:0e:af:32:f9:
                    4b:9f:41:a3:db:4e:86:9b:50:c3:8c:6d:4b:d8:ed:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:34:46:26:13:98:D9:59:48:F5:86:BF:70:17:DD:12:FF:0C:17:32
            X509v3 Authority Key Identifier:
                keyid:F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:60:0b:13:d1:b6:76:9d:81:3f:08:6f:6f:57:e9:95:ed:f4:
         6e:8d:ce:24:44:be:9c:dc:3a:7b:63:69:f6:44:d7:02:98:83:
         ff:2a:95:3f:e2:b5:ad:25:3a:40:c1:39:09:62:c5:45:e8:63:
         1e:ed:25:d8:e2:4f:5b:08:ce:fa:37:7c:3a:d5:fb:b0:a8:bf:
         97:a2:0f:ff:34:f3:cf:de:4d:46:8d:fc:66:3e:51:57:52:03:
         31:b9:f1:46:ca:5f:67:d2:b3:c8:a9:14:a2:70:00:a9:7f:1e:
         ec:8b:e9:7a:c6:63:fe:c1:d5:ee:dc:a4:16:cd:d7:b8:1f:fd:
         b9:34:2a:43:0f:b9:52:33:21:8e:52:ae:51:e5:f9:fa:1f:77:
         66:16:e8:82:cc:bc:35:9d:d2:1f:fc:fb:67:e1:e3:5d:78:dc:
         1f:44:88:22:1e:aa:84:fc:f9:42:0f:7f:41:69:85:9e:8f:5c:
         f0:51:49:44:aa:4b:7d:71:da:0b:ac:d3:22:a9:64:df:33:21:
         c1:d3:9c:6e:a9:42:66:c4:d2:24:81:c1:2d:43:3c:30:24:52:
         17:74:2a:a2:5f:f1:27:ec:25:11:3c:2e:a0:d4:81:78:15:49:
         38:5c:e7:0a:dd:4d:57:a3:2b:7a:59:89:e2:d8:3b:3a:06:9e:
         34:b0:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:11:25 2026 by rpki-client