Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
File:                     9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json)
Hash identifier:          vKJwQQLYqwLJlE+Im83SnyM6zK5MSsGRADsWs+M+ZCM=
Subject key identifier:   20:44:72:7D:F3:C6:B7:8D:33:72:89:E2:52:48:87:08:AD:3F:4B:D1
Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
Certificate issuer:       /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Certificate serial:       01A0CA4714012B3EBB55D2344345C47AEE2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
Manifest number:          03D0
Signing time:             Tue 22 Sep 2026 18:00:50 +0000
Manifest this update:     Tue 22 Sep 2026 18:00:50 +0000
Manifest next update:     Wed 23 Sep 2026 18:00:50 +0000
Files and hashes:         1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: 5dEVNLrPpPoDjfJHLyOm6DW3rOwZLBNAofHzxzu0bVE=)
                          2: BzRL5dLKwivSlyjmJMancnc4uqU.roa (hash: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I=)
                          3: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (hash: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw=)
                          4: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (hash: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:47:14:01:2b:3e:bb:55:d2:34:43:45:c4:7a:ee:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
        Validity
            Not Before: Sep 22 18:00:50 2026 GMT
            Not After : Sep 23 18:00:50 2026 GMT
        Subject: CN=2044727df3c6b78d337289e252488708ad3f4bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:3a:64:35:6f:6b:3f:90:20:59:1a:f6:dd:
                    64:38:ac:02:fe:be:71:78:91:f3:8c:c5:14:64:ad:
                    7a:b1:cc:cc:ca:86:fc:3f:21:b4:77:a1:33:9a:d4:
                    98:58:a5:a8:2e:cd:72:b7:64:18:95:a2:56:59:7a:
                    f3:7e:f1:a7:a0:03:90:4d:89:38:f0:60:de:20:ce:
                    ff:0d:c8:a3:54:2b:05:68:ac:02:4d:e3:a9:8d:60:
                    4c:ef:4e:e2:aa:f4:a7:44:ab:71:16:7a:ef:51:d9:
                    83:9f:5e:d7:fc:17:26:e5:c9:47:8c:b6:4e:80:07:
                    05:a2:e2:22:50:3a:16:a4:0e:51:a9:eb:c1:80:40:
                    eb:49:f7:23:7c:46:71:e7:24:a2:51:e3:10:ee:2b:
                    6c:06:11:82:31:2f:fa:38:6a:fc:d3:83:7c:c1:fe:
                    47:88:4f:3e:7e:9d:21:35:42:7d:be:9b:98:3d:a7:
                    e8:67:4d:7b:49:fa:23:29:09:e6:6a:55:c2:17:27:
                    54:fc:20:9e:1d:0c:80:2f:d1:6b:2a:a0:18:38:12:
                    57:f2:6c:05:2e:db:c3:20:7c:5a:46:02:d5:0d:29:
                    19:19:5a:26:11:1f:fe:a1:9d:fe:93:58:9a:1b:6c:
                    cb:6c:7a:4a:11:89:39:37:8b:dc:a4:30:0b:7d:bc:
                    5b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:44:72:7D:F3:C6:B7:8D:33:72:89:E2:52:48:87:08:AD:3F:4B:D1
            X509v3 Authority Key Identifier:
                keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:82:d1:73:00:20:61:64:c7:a5:a3:af:91:fd:18:e9:92:49:
         ac:7c:13:70:21:e3:3b:7d:53:5b:ec:9a:68:f1:4a:9d:9d:fc:
         62:b4:9e:ed:7c:cc:57:ad:fa:88:92:26:ad:24:3a:d2:99:a3:
         fe:4b:97:f5:f2:9f:08:6e:98:92:15:b6:21:ce:fa:ac:42:7a:
         02:2a:e9:56:b5:42:83:d9:6e:31:36:43:a3:92:8f:91:3f:ec:
         d0:30:bc:a1:0a:df:7d:6d:35:de:b9:f1:14:4b:4e:d7:1f:ac:
         b7:6c:57:75:7f:59:bb:b6:24:81:7f:9b:1f:46:29:c7:e7:43:
         86:a3:cd:13:6c:f7:f3:a5:ee:28:5a:36:d5:34:2d:82:3b:62:
         84:4d:e3:c8:03:66:06:d7:e0:1a:78:5b:08:97:46:3d:b6:a3:
         d9:d2:6a:60:fb:2b:5e:d7:4e:ca:38:d5:4a:b2:c9:ed:ec:c7:
         d3:9c:0c:dc:56:30:44:b4:cc:cc:c9:14:42:9a:96:d4:87:8f:
         46:53:e9:f8:e4:e6:87:33:c6:8f:30:57:d4:ad:8e:81:f7:5b:
         8b:9e:ea:36:a9:b7:57:60:93:99:ea:78:54:68:20:89:5a:06:
         4e:12:ac:6a:1b:fc:47:cc:c4:03:dc:92:63:21:f1:b4:68:62:
         77:ad:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:16 2026 by rpki-client