Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
File:                     n0GAXmDdl0CETR3HpMFKq6uEhR4.mft (raw, json)
Hash identifier:          tabf5I87WcEbHswZova7bTlrRyi1JIaVOcU0sgOtW2E=
Subject key identifier:   0E:60:EF:67:EA:7C:59:8B:64:EC:F7:2D:3C:0B:80:A9:4E:41:BC:30
Authority key identifier: 9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E
Certificate issuer:       /CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
Certificate serial:       01A0F2D5A3402F21B375C4B602A0225EAE04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
Manifest number:          F7
Signing time:             Wed 30 Sep 2026 15:01:21 +0000
Manifest this update:     Wed 30 Sep 2026 15:01:21 +0000
Manifest next update:     Thu 01 Oct 2026 15:01:21 +0000
Files and hashes:         1: TOC7yt8pwcnAu99gFYCGhlQGgZg.roa (hash: PsN09pvtWWcsEJydhp81MFNJ3GP97ijkJSu2F+CCjjs=)
                          2: n0GAXmDdl0CETR3HpMFKq6uEhR4.crl (hash: aL8yLgjGVtXZZm92mxdzw8+BOF0QH8ALWU0jghAC6MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:d5:a3:40:2f:21:b3:75:c4:b6:02:a0:22:5e:ae:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
        Validity
            Not Before: Sep 30 15:01:21 2026 GMT
            Not After : Oct  1 15:01:21 2026 GMT
        Subject: CN=0e60ef67ea7c598b64ecf72d3c0b80a94e41bc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:70:08:31:33:07:50:37:55:88:7f:c1:8c:
                    93:76:e1:ac:62:81:a4:a3:e5:35:91:c4:71:41:97:
                    8b:dd:46:84:c9:32:e0:d3:47:16:50:7e:40:05:d3:
                    dd:ae:25:ff:f3:2e:69:fc:58:8c:94:ef:c4:0d:78:
                    f5:03:d3:95:d5:31:2d:e9:d7:ad:77:89:2a:e4:a7:
                    bc:2c:3d:c8:f8:00:dc:80:37:98:80:0d:84:fe:cc:
                    e0:cb:62:0f:b2:4b:7d:dd:25:19:44:ab:ab:ab:5a:
                    70:85:4d:4b:d9:24:76:23:dd:16:ea:fe:cd:7b:9b:
                    f1:7b:f6:d4:82:ae:c5:46:c3:f2:be:1b:58:f8:88:
                    31:93:08:4e:aa:0d:7d:39:14:d4:16:54:a8:bb:2d:
                    89:d6:92:ea:54:03:09:75:73:db:81:b3:b7:d7:4e:
                    29:36:74:9d:5c:95:5b:dc:30:f3:c7:5d:bb:b6:9a:
                    e1:85:90:f0:94:90:b3:68:9b:42:1c:8b:8d:94:bc:
                    a6:db:ed:5f:22:01:7c:39:7e:14:89:7f:67:a5:38:
                    64:e8:86:4e:77:8f:98:99:b7:0e:79:32:2d:e2:d2:
                    3a:63:e7:35:3a:05:eb:c8:a4:31:7d:50:31:d4:86:
                    1f:d6:c1:52:5d:67:0c:93:22:cd:29:61:56:d0:cf:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:60:EF:67:EA:7C:59:8B:64:EC:F7:2D:3C:0B:80:A9:4E:41:BC:30
            X509v3 Authority Key Identifier:
                keyid:9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:e4:a8:7b:c6:97:8c:51:51:e8:03:24:d2:e3:99:4b:86:
         ab:c3:40:38:2a:81:d0:33:58:be:72:3b:23:ef:1b:85:f1:33:
         c5:a9:31:4f:09:cf:0f:d9:80:15:bb:fb:90:60:46:e7:ee:50:
         1a:be:b6:c3:b5:cd:40:38:ea:48:7c:fd:ce:00:8f:e3:3a:b6:
         01:3d:80:58:80:f5:3c:37:f8:4b:6a:af:07:92:8d:81:ae:9f:
         95:fd:6f:86:48:f3:c8:a9:e7:d9:3e:f1:48:bd:70:59:67:59:
         03:16:2d:bb:80:3e:e1:48:6e:ee:c6:4a:dd:02:e3:0c:5c:f9:
         8c:00:ba:b1:3d:61:94:73:e6:71:3a:0e:e3:0d:07:40:a9:a3:
         08:bf:90:d3:29:ac:dc:f6:df:74:77:1e:93:e0:2d:52:9a:7a:
         e5:2d:25:9f:47:4d:b1:31:53:ff:a0:a1:ac:53:b3:b8:7a:43:
         77:71:33:f0:40:7b:e2:4e:18:ad:63:d6:02:c2:1a:0d:d9:47:
         68:f0:2c:1b:be:b2:6b:63:49:26:cc:84:36:53:68:64:7c:27:
         cc:6a:5e:54:79:95:b5:c1:86:68:67:18:ab:f4:fb:2f:dd:c8:
         c3:7f:8e:35:56:4c:2a:7f:52:71:a0:72:63:cb:0c:59:c5:4b:
         7d:cb:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:44:13 2026 by rpki-client