Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File:                     9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier:          bTkBr7WlrWhVBoPt6ZLyIBAfsI8F/ialUaunfsDRfzY=
Subject key identifier:   73:82:51:6A:66:88:24:6E:F1:0C:15:F2:3B:36:27:49:82:28:AC:01
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer:       /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial:       01A0CE5AA6A8B76D3A9A5688436E63621A8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number:          0E94
Signing time:             Wed 23 Sep 2026 13:00:42 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:42 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:42 +0000
Files and hashes:         1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: jixCtKf0KIPtEWZrNMkR9wSgkQ423L5rUjRROR3dK8E=)
                          2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:a6:a8:b7:6d:3a:9a:56:88:43:6e:63:62:1a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
        Validity
            Not Before: Sep 23 13:00:42 2026 GMT
            Not After : Sep 24 13:00:42 2026 GMT
        Subject: CN=7382516a6688246ef10c15f23b3627498228ac01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:fe:a0:c5:93:db:d6:04:13:d1:8d:c3:97:
                    da:68:8e:2d:96:88:52:c6:2e:78:39:54:63:db:91:
                    f9:9a:26:33:9a:19:d6:87:b4:16:ba:ae:15:3b:e3:
                    63:e7:63:6c:19:a2:5f:b8:42:ce:a3:33:05:b3:93:
                    2b:64:15:09:45:2c:1c:a5:d2:13:4c:03:9e:e0:62:
                    2c:9b:64:f6:26:75:c0:6d:a1:d9:55:50:3b:96:36:
                    ae:90:87:5f:38:a9:a5:ec:2d:1c:88:2b:5e:ea:ff:
                    c0:16:53:9e:1d:80:64:79:e8:51:f9:95:28:a5:26:
                    fc:ca:51:8c:cc:d6:09:58:aa:44:23:d6:08:14:2b:
                    db:80:51:d1:f4:72:d9:18:9a:d9:e5:1e:e8:b4:9e:
                    f8:e2:02:8a:f7:e4:38:45:79:43:d3:2a:93:79:85:
                    15:f2:25:1d:70:71:20:cc:d1:40:b7:27:e6:b6:51:
                    25:32:60:54:fa:d6:d4:1b:62:af:1e:be:c9:27:ee:
                    ab:09:c5:4d:74:9d:17:6d:b9:eb:83:b1:9a:72:ad:
                    d7:d5:55:20:b4:dd:46:c9:ed:75:45:96:5c:cf:3b:
                    a9:db:12:c4:cf:66:bb:db:69:be:25:40:5f:72:38:
                    aa:f0:42:96:98:fa:fb:53:ac:b1:b5:c5:07:af:4c:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:82:51:6A:66:88:24:6E:F1:0C:15:F2:3B:36:27:49:82:28:AC:01
            X509v3 Authority Key Identifier:
                keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:34:8d:95:3d:e8:1d:b4:36:8a:e2:d0:69:85:68:67:32:2e:
         25:e6:e5:d1:6b:89:a1:ae:d6:ae:ae:a5:47:15:94:29:e6:39:
         49:da:aa:ab:ff:ab:0f:04:ea:b7:c9:c9:df:d3:ab:bb:12:dc:
         c9:14:81:ad:eb:56:30:c9:f1:ca:67:24:8f:ea:c6:0f:a3:bc:
         2b:7e:e9:79:16:21:32:6b:1a:c3:5b:f8:68:02:58:b0:56:80:
         1d:8b:ed:fe:56:5f:de:87:4b:8d:1b:31:85:39:c9:53:47:0f:
         fe:40:04:37:f8:9d:fd:12:79:d2:5a:1e:e7:6f:d4:d2:c6:ba:
         df:c8:62:c7:06:01:9e:14:8b:c2:d1:a7:fc:13:cb:c6:d2:5c:
         f8:bd:18:32:35:4b:25:8e:49:c9:8b:e2:40:ac:80:5e:d2:b0:
         60:64:85:bb:46:3e:cc:ab:50:36:e2:c1:01:9b:c4:01:e2:a9:
         5c:84:7b:b2:1d:7f:04:97:63:e8:9b:92:53:18:ec:cc:3d:10:
         94:44:c4:e4:56:ec:22:33:b0:cc:4b:36:1d:e6:fa:69:4d:ce:
         57:1f:49:65:16:47:6b:13:a9:02:89:ad:0e:4b:2f:a4:cf:e2:
         5b:fe:b8:32:bc:67:97:d4:0d:64:1f:8f:f1:02:b0:39:fe:b3:
         ae:18:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:23:10 2026 by rpki-client