Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File:                     9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier:          wxkcU0XchwVq2h0MJkzF5f5/xgeKB7D/NLxSwKuKxvE=
Subject key identifier:   54:FB:45:FE:6B:A6:5F:19:51:5E:C6:C9:7A:4E:A5:26:F4:A7:2E:51
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer:       /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial:       01A0D0B663175B8E8BB2083600F48ABB656C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number:          1A69
Signing time:             Thu 24 Sep 2026 00:00:08 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:08 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:08 +0000
Files and hashes:         1: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: RvHs4dodGHsmtt0fHc5RiIiXcK6MOvvmg7/D/Hky5kQ=)
                          2: PTV1hUcFPrtTj8H3jV-0PBWi2aA.roa (hash: LVcltXxTmaC1wumCr9KKXzHWOb4BW8vwqUzLL/KaVfw=)
                          3: TCIlW-BlRgj9qm8sFvnqA1D_U0w.roa (hash: 3xQeUcgzW7NvDJ0rSLhKBh5bLuiyyVyOLX9rka6WNDc=)
                          4: pt0vpyYLtzmKEkPORjUEbfLrK04.roa (hash: aNfm1fqgMjkcUsOwar3uLSqc/xreSHXCvlrwdm4pI3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:63:17:5b:8e:8b:b2:08:36:00:f4:8a:bb:65:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
        Validity
            Not Before: Sep 24 00:00:08 2026 GMT
            Not After : Sep 25 00:00:08 2026 GMT
        Subject: CN=54fb45fe6ba65f19515ec6c97a4ea526f4a72e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c2:88:16:a4:63:f7:40:61:9f:c1:f8:1b:a7:
                    cf:33:5d:bb:76:fe:d3:71:d4:34:85:be:6f:c7:b6:
                    34:a4:b7:5a:d5:48:e9:00:f1:7f:4a:10:bb:07:ae:
                    74:53:ed:9e:bd:b2:57:4e:56:ef:7c:4d:3a:17:02:
                    26:af:a1:27:fc:bb:39:ae:e3:18:ef:c6:ab:50:88:
                    74:08:6f:55:89:3b:a2:75:c3:3f:7a:48:7a:f6:dd:
                    e5:d8:73:5c:52:d5:9a:a7:0a:31:72:91:9d:e7:b7:
                    ad:5d:85:cf:a6:bb:ca:ab:73:4a:37:81:90:c7:79:
                    7c:a7:ff:85:50:30:fb:0e:31:30:d0:c2:cb:5d:6e:
                    e2:f8:59:f7:70:fa:27:2a:d6:53:9b:c0:0c:8b:39:
                    3a:ac:07:29:38:75:14:ab:2e:41:aa:0e:88:93:71:
                    84:f1:bc:75:f3:57:56:76:6f:ff:52:1f:e7:12:29:
                    6c:93:70:59:a7:f2:8d:0f:97:6f:40:48:8d:74:b6:
                    88:81:d8:0d:05:60:43:fe:3a:eb:a0:7d:e6:bf:c2:
                    20:85:70:58:f0:37:e0:8f:f3:bc:d8:7d:34:6d:c0:
                    c2:e6:5a:0a:12:62:fa:5d:d4:d9:34:20:14:6b:8a:
                    73:4b:1a:1d:a9:bf:87:7e:23:1e:68:2f:18:c3:20:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:45:FE:6B:A6:5F:19:51:5E:C6:C9:7A:4E:A5:26:F4:A7:2E:51
            X509v3 Authority Key Identifier:
                keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:81:0e:32:81:a0:23:a2:ef:eb:6d:74:44:df:33:92:c0:b7:
         46:f7:76:35:56:c5:3a:16:85:02:f9:5c:4b:8b:32:3e:fe:9a:
         16:16:13:98:8a:b3:ac:a5:0d:2d:e0:a2:0b:95:42:81:2c:fb:
         ee:92:30:7b:14:80:98:c2:48:30:0d:7c:35:81:66:e5:24:4d:
         0e:0b:70:e4:64:dd:ad:7a:e0:1c:f3:88:a2:2d:8a:f3:8b:17:
         8b:55:2b:d8:90:da:1a:bc:90:58:4f:8c:76:7e:99:9d:8b:64:
         40:2f:40:0c:d8:77:c2:4c:01:64:f4:9e:5d:df:c4:fc:c0:b2:
         20:3f:4e:2a:f2:a8:e9:c0:22:02:67:71:ac:a1:b8:c6:ca:38:
         52:60:7e:e9:f3:45:3e:2e:df:ff:ed:55:5a:99:69:14:17:9f:
         98:fe:70:3f:2c:21:c5:c3:9c:a7:96:47:95:fb:60:43:77:db:
         b0:89:e2:8f:3b:c2:2d:05:7b:4e:21:55:ff:d7:8a:f1:4a:e6:
         45:7c:83:8d:e4:0b:13:fe:fd:a2:85:bb:18:5b:27:e8:74:40:
         f2:c4:d3:0c:fd:2d:8e:bb:77:fa:41:1a:46:de:31:29:91:cd:
         af:5b:b6:a0:9e:b9:ab:a1:f6:57:73:f3:23:c2:9c:03:2e:c4:
         ab:d5:9f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:59:44 2026 by rpki-client