Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File:                     9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier:          ERY2pVU8mEpLZ32fVbezxPDdV0fIZMhUCO62DBCL8Rw=
Subject key identifier:   98:6E:26:08:AC:6B:D6:DB:D5:B8:0B:73:1B:DC:1F:6D:04:94:BA:40
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer:       /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial:       01A0CF362756E10C8544095D7A1D49343641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 17:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:27 +0000
Files and hashes:         1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: IpSCAAWOSK8h73g7Wz1fQ1Nu/1k1MhlzETvEKjkuBQI=)
                          2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:27:56:e1:0c:85:44:09:5d:7a:1d:49:34:36:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
        Validity
            Not Before: Sep 23 17:00:27 2026 GMT
            Not After : Sep 24 17:00:27 2026 GMT
        Subject: CN=986e2608ac6bd6dbd5b80b731bdc1f6d0494ba40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:43:17:70:7f:c6:10:76:d0:ff:fa:8d:0f:
                    1e:95:ae:f8:c1:88:62:fe:a4:6d:0b:4d:c7:23:3d:
                    6f:0c:a8:f5:e1:b4:03:b0:a0:75:a9:14:fe:25:0f:
                    be:55:09:a1:3f:e2:3f:98:e6:73:c0:2b:17:4b:4f:
                    0e:43:ee:55:52:3e:d4:95:38:66:03:e8:64:28:8f:
                    ca:de:3c:a9:f7:ff:a1:00:e3:06:30:85:2a:c5:ac:
                    7a:98:af:5d:3d:74:70:0b:e1:79:2e:d3:52:20:92:
                    18:b2:c0:5a:ce:ec:6b:ec:6a:c5:50:7d:b0:00:09:
                    f1:75:17:9a:bf:f8:c0:93:83:64:6a:06:72:06:9d:
                    b2:98:01:3a:79:ea:3c:ab:96:5d:b7:e3:ac:b5:0f:
                    37:e9:61:26:4a:e0:e5:81:ce:a2:1f:4a:60:1b:e3:
                    8b:0f:4e:54:7d:2d:f2:61:37:ca:67:62:74:ec:3a:
                    51:05:80:bd:23:62:6f:a2:6a:12:47:df:80:67:3f:
                    f7:ea:d5:ca:81:01:ff:e2:40:68:6a:85:b9:0a:c3:
                    76:4d:72:b2:26:32:6b:14:94:3d:10:ef:5d:99:e3:
                    08:a6:8c:51:6e:c7:03:ba:2a:b6:00:43:8a:4e:6f:
                    19:fb:05:04:8a:46:a9:8a:90:e2:4f:36:ba:21:f4:
                    ae:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6E:26:08:AC:6B:D6:DB:D5:B8:0B:73:1B:DC:1F:6D:04:94:BA:40
            X509v3 Authority Key Identifier:
                keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:c1:a3:d6:72:80:22:19:81:dc:db:4b:c7:54:5d:11:ca:
         57:71:55:06:8b:97:74:0c:21:87:90:c2:68:a4:c6:37:f7:a5:
         5d:7c:60:4d:fd:2a:e1:07:cd:a8:81:3a:ca:37:83:9f:7a:88:
         2f:75:75:17:49:7b:00:f3:bf:d7:0d:00:b0:7c:a8:08:8e:c6:
         6a:6c:71:2e:c6:07:e4:f5:8b:4c:87:b1:77:a3:c9:4e:96:42:
         f8:23:47:2a:f5:70:79:3d:ac:86:a2:04:d3:26:03:14:68:e6:
         09:62:1f:d9:5b:9e:89:5e:7c:48:63:6f:64:21:f2:c8:3e:84:
         4b:0a:4e:33:dd:50:57:3a:8f:8a:61:43:1c:66:89:c8:28:e3:
         c4:79:2e:77:00:ad:8c:89:2b:73:f6:e7:e7:0b:54:80:ba:f2:
         19:5a:58:f7:ae:43:2e:2a:f6:8e:e5:4a:12:4c:79:a6:32:eb:
         ed:d8:3a:1c:1a:85:ec:82:44:4d:99:5a:38:f5:bb:60:e7:62:
         ce:fa:b9:e5:1b:c9:38:e3:95:9d:1d:14:f0:36:a3:b9:e5:1d:
         c1:80:88:7a:fd:91:23:11:6e:29:cf:85:f9:be:6b:f6:0b:98:
         3c:1f:a8:f3:07:2d:b4:53:89:10:06:80:81:79:bf:43:10:75:
         55:76:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:47:06 2026 by rpki-client