Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File:                     1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier:          zdKApEIZYXoZeAeHG2NX8gpRm5o6GZjt0wTbIwkgMtY=
Subject key identifier:   46:8D:FA:9C:9A:D9:BB:1C:EF:07:EB:FD:F6:AC:F3:5A:BC:97:00:B6
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer:       /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial:       01A0CAB468E5A7E0045638D295217723257A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number:          179E
Signing time:             Tue 22 Sep 2026 20:00:15 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:15 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:15 +0000
Files and hashes:         1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: mXbwHYieozALL38+kIthfPPjjgyH4fN7GTsPkd3M++A=)
                          2: 1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa (hash: jJ0Z9gvnHkxzvx7TbvN1q4EtCEWPz3vfe0uvFzwej1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b4:68:e5:a7:e0:04:56:38:d2:95:21:77:23:25:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
        Validity
            Not Before: Sep 22 20:00:15 2026 GMT
            Not After : Sep 23 20:00:15 2026 GMT
        Subject: CN=468dfa9c9ad9bb1cef07ebfdf6acf35abc9700b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:e1:f1:3a:41:78:c9:1c:85:9e:7e:0d:d6:
                    de:08:26:17:d8:69:53:b0:ed:d8:3e:91:09:6e:73:
                    bb:37:33:1c:9a:a5:14:58:43:7d:28:21:41:ef:4f:
                    53:8e:f4:38:c5:cc:d5:98:80:12:77:f5:7b:c3:b7:
                    86:1d:fd:e5:cb:53:80:d5:77:e0:14:39:14:92:31:
                    e2:ec:0c:f8:73:5c:11:78:36:fd:f3:82:a9:2d:21:
                    79:02:84:c5:2e:9b:89:09:ae:9c:9b:6c:9c:96:e7:
                    e4:e0:42:c6:c0:d8:72:3f:6e:98:1b:40:a6:af:a1:
                    ca:93:c3:ef:b1:31:8c:8c:5b:97:03:73:99:56:5f:
                    5b:00:be:15:f6:6c:99:5d:86:db:5a:76:f7:e5:50:
                    fa:e0:94:76:68:a5:ab:36:22:ac:79:2a:9c:45:de:
                    72:61:f4:f2:43:4c:f6:1d:34:6f:39:a5:06:84:98:
                    89:1c:b0:1b:8d:b9:7b:03:30:5d:c5:84:2f:33:31:
                    09:30:93:08:0d:17:24:fa:b8:43:1f:5a:80:72:55:
                    bc:ef:b1:cb:48:3c:2d:68:cd:c6:84:27:5d:f6:ce:
                    48:46:86:d7:a4:0c:c1:95:51:c1:cb:3e:e1:25:5a:
                    5e:28:8b:7d:2f:35:4e:04:49:e7:5b:1a:73:2d:07:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8D:FA:9C:9A:D9:BB:1C:EF:07:EB:FD:F6:AC:F3:5A:BC:97:00:B6
            X509v3 Authority Key Identifier:
                keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a8:35:d3:51:e6:c4:e4:82:ca:99:f4:23:57:ef:61:c1:88:
         16:00:45:38:88:50:2a:f0:3e:55:2a:d9:5b:29:9d:8a:3e:b0:
         85:a4:eb:11:71:c6:39:1f:7e:26:51:44:f7:05:b0:32:e2:5e:
         a5:1f:da:75:9a:b0:02:58:5a:b5:a1:3f:b8:90:90:8e:b7:18:
         77:99:1b:dd:9a:59:e2:e6:62:82:f0:14:0b:13:e5:9a:01:95:
         03:a8:d3:ac:a2:ad:c7:8a:f2:10:b0:44:f6:77:83:1f:3e:7e:
         9c:01:98:bf:4d:93:8d:bc:f6:19:7d:5d:ee:c2:3d:cf:61:37:
         f2:b7:c9:67:94:e9:ca:ae:30:ae:2e:2d:5d:c0:46:27:44:2f:
         e7:9a:b1:d0:dd:bd:f6:89:e6:2d:b9:c4:84:25:71:60:19:cf:
         63:34:26:31:b9:4a:ba:b3:d3:ee:8b:58:0d:3b:fa:4a:d3:f0:
         c6:80:1b:cb:1d:39:c4:2c:0b:3f:df:f5:87:d9:4d:79:40:d7:
         2b:56:47:c5:fb:19:fb:e8:fe:6c:8c:5e:b3:13:4d:f2:fc:b7:
         5b:d1:a3:af:e6:67:1a:fe:cc:15:35:ef:67:9c:c0:40:f7:1b:
         04:85:8c:86:4d:ef:e1:d2:70:93:90:1f:1d:36:5c:8e:81:ed:
         7a:76:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:37:45 2026 by rpki-client