Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File:                     9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier:          k+JoEWJO3adabwZtzpq0/Ja0SU7urC84MI9d0CXhjuA=
Subject key identifier:   E5:BC:6C:6C:4D:BE:B4:E2:87:D0:37:94:CE:1B:95:CD:A0:D8:BF:65
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer:       /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial:       01A0CD7E8A4D1B0F716C50CB75623D65439D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number:          191A
Signing time:             Wed 23 Sep 2026 09:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:17 +0000
Files and hashes:         1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: nOO+NIgVXvLue1A6bLq9gYe3G2NK8zeZgXEQ/ftZbis=)
                          2: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (hash: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA=)
                          3: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (hash: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4=)
                          4: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (hash: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:8a:4d:1b:0f:71:6c:50:cb:75:62:3d:65:43:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
        Validity
            Not Before: Sep 23 09:00:17 2026 GMT
            Not After : Sep 24 09:00:17 2026 GMT
        Subject: CN=e5bc6c6c4dbeb4e287d03794ce1b95cda0d8bf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:37:fc:47:a8:9f:64:20:4c:1c:d6:27:0e:
                    17:75:81:fb:d1:2d:de:f7:2f:f2:13:d7:b2:65:5c:
                    d2:0d:9f:1f:b0:f9:d1:9b:22:1e:8b:7d:2c:99:03:
                    bf:96:9f:3c:35:47:c0:e1:49:82:2d:3f:dc:3d:72:
                    33:46:ab:d4:d0:0d:2b:fe:7a:20:fd:b5:b4:b2:f3:
                    bb:b5:2e:e0:ed:8e:b3:6b:1d:3b:56:08:a7:01:4e:
                    80:d0:3b:93:26:80:39:29:16:8d:f8:ae:ef:2b:fb:
                    7d:9b:5b:8d:1f:7a:80:f6:8f:26:4b:f6:83:32:f7:
                    13:fc:37:79:d9:2a:15:9c:d5:57:21:1a:a3:1e:69:
                    ce:bd:15:60:99:6f:ca:a6:70:b0:75:dc:39:58:94:
                    68:e8:39:23:a2:3d:c4:2c:0e:85:df:38:32:d8:6e:
                    dc:c4:90:8d:b6:71:23:fd:89:e0:1f:5e:d4:f2:57:
                    8f:1c:88:87:1c:a3:2d:b0:c9:fd:c6:27:4f:5c:02:
                    66:2a:e9:f9:aa:7b:c4:95:be:a1:ff:0e:67:00:56:
                    30:70:c7:1f:9f:6f:d1:6f:37:77:d5:1d:d1:d4:30:
                    e1:f8:af:3a:c1:c5:59:d1:a8:52:a6:76:09:78:b7:
                    66:da:c9:44:79:59:e6:b5:b6:70:a7:d9:a3:70:91:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BC:6C:6C:4D:BE:B4:E2:87:D0:37:94:CE:1B:95:CD:A0:D8:BF:65
            X509v3 Authority Key Identifier:
                keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:82:c6:a8:01:2e:41:a4:68:ae:64:63:2e:23:8e:08:af:
         81:0d:5e:c3:d7:da:9b:24:0d:1a:47:99:bd:f6:83:75:23:eb:
         8b:d1:67:6a:25:09:df:b0:ab:67:dd:3c:30:77:cb:53:4e:cf:
         e9:46:a2:55:49:b8:8b:ac:a7:e6:ad:73:4d:1e:a1:d6:44:50:
         c8:61:00:d2:6e:af:f0:60:a7:f8:56:98:67:66:5f:4c:b1:e3:
         cd:5e:15:c4:8a:c8:a2:f1:3b:5b:e2:cd:eb:05:b2:95:7d:de:
         99:92:3e:a6:1e:26:87:01:b4:a5:07:83:05:c8:b6:de:d3:5f:
         5b:9f:e3:3c:14:e7:c2:5e:23:25:5a:5d:bf:83:d1:6d:ee:fd:
         6b:c9:c1:e9:c9:10:8e:83:65:14:78:68:e7:77:47:ab:03:1f:
         e8:b2:72:ec:d1:27:c0:63:b5:b6:36:f2:dc:87:d7:b4:e1:e0:
         6e:d0:98:69:5e:4a:0d:70:06:b6:51:1b:9c:1b:60:1b:b5:fd:
         e0:81:a9:d5:0a:b5:40:b3:11:b0:0e:9a:86:e2:d4:72:15:43:
         22:77:ca:58:9c:8c:fc:78:ae:76:90:32:dd:72:1e:ec:1f:cc:
         3c:59:41:ea:88:f5:79:a1:99:9c:a6:92:60:d1:1c:09:4a:1c:
         88:38:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:38:22 2026 by rpki-client