Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File:                     9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier:          Y1jplCyCm6W6mDR9RXhona0trfAEZDLgIyEM78GikBg=
Subject key identifier:   1A:EB:29:02:4A:2B:3C:1F:5E:CB:EA:8A:8D:4A:96:4E:DB:CD:7D:8C
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer:       /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial:       01A0CC6C8760FBCBF0D93A00DA056BB63868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number:          0775
Signing time:             Wed 23 Sep 2026 04:00:59 +0000
Manifest this update:     Wed 23 Sep 2026 04:00:59 +0000
Manifest next update:     Thu 24 Sep 2026 04:00:59 +0000
Files and hashes:         1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: Y4Q+SUboiBWdN+h3Il6mXKZ4cct+Q5JHGnmCdr80H5c=)
                          2: q_PyfNokBeIwV9ZVtxUDykAzbyo.roa (hash: nCsivWX18Ek0Fvcd2OhF9dAgd1gXwooWGtpWmt/HjOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:6c:87:60:fb:cb:f0:d9:3a:00:da:05:6b:b6:38:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
        Validity
            Not Before: Sep 23 04:00:59 2026 GMT
            Not After : Sep 24 04:00:59 2026 GMT
        Subject: CN=1aeb29024a2b3c1f5ecbea8a8d4a964edbcd7d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:a1:dc:7e:22:24:d7:9f:26:49:88:49:d2:
                    5e:36:19:50:f9:4d:5b:74:e4:71:11:e0:15:8b:16:
                    1c:53:9a:df:da:bc:84:97:8f:5b:27:86:5c:c0:e7:
                    4b:74:aa:7c:73:44:0f:ff:84:a8:60:29:8d:55:44:
                    a1:77:e0:b3:f3:92:15:d6:f3:2f:2d:61:b4:b8:60:
                    09:0c:57:cf:be:00:39:e5:c1:01:79:88:d1:e0:0a:
                    14:87:91:fc:ab:56:83:4e:4c:80:ff:83:8e:ef:4a:
                    71:4b:b4:d3:cf:ee:e7:40:db:e7:e0:6c:7e:55:9b:
                    18:e0:a3:f6:1c:2f:7c:af:c2:9f:1e:0f:8e:0e:ea:
                    21:78:ad:c9:22:40:10:b3:7c:61:fb:14:f8:e4:da:
                    4f:39:16:33:c0:ba:0f:b5:3b:48:ac:dd:a1:6d:3a:
                    a3:de:8a:75:59:e4:0d:4d:a7:fe:01:24:f8:b8:14:
                    0d:c6:52:cc:29:fb:db:81:bd:6f:9e:0e:bd:0f:23:
                    e5:39:98:70:e7:b2:54:4c:7c:bb:ad:95:6c:ec:e0:
                    49:06:3e:80:77:f8:1c:0e:97:6a:33:df:f5:bf:01:
                    b9:0a:f1:7a:6c:70:c4:60:5e:42:e4:40:90:19:47:
                    ab:de:85:1e:3b:5a:41:d5:8e:4b:46:0c:a3:59:a3:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EB:29:02:4A:2B:3C:1F:5E:CB:EA:8A:8D:4A:96:4E:DB:CD:7D:8C
            X509v3 Authority Key Identifier:
                keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:be:73:95:76:09:03:ee:61:ff:25:d4:9c:0b:5b:6e:13:1a:
         4c:19:e6:89:c5:5f:51:b9:04:7d:7d:f6:33:ce:8a:7c:d0:97:
         ce:45:7f:8a:91:52:cc:9b:1e:c3:ac:58:6c:c4:19:40:c5:fc:
         ec:5c:7a:9f:9b:49:6a:1a:a2:ed:0c:ac:72:5c:6f:01:ab:2e:
         4d:0e:47:3c:63:1f:a9:ad:4a:fc:20:7b:01:f3:27:6c:e8:61:
         5e:48:97:7d:a3:19:c1:05:ef:13:7f:82:9e:3c:cb:c7:c3:65:
         39:8d:cc:a9:ac:38:42:30:39:24:6a:f3:51:86:df:04:c8:35:
         6a:4b:16:a6:5b:23:32:73:57:94:01:47:3a:82:db:8e:d4:f3:
         79:ce:7c:f4:64:1a:0f:03:7f:80:be:eb:43:98:66:64:37:0f:
         75:f1:5a:0f:2b:64:12:c7:b7:8a:65:4b:38:31:8e:9c:86:b4:
         24:3f:c0:75:25:e0:72:e9:85:ce:87:73:31:10:64:b1:ab:88:
         6d:c4:b6:cb:1f:dc:05:bd:09:59:a1:b4:c5:45:cf:86:f8:c5:
         88:15:e4:2d:e1:4a:a5:1b:64:04:d4:cd:34:55:95:b1:3c:3f:
         ca:27:f3:fc:a5:33:ef:16:36:5d:25:f9:b3:c3:c3:63:db:e8:
         2a:63:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:50:36 2026 by rpki-client