Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File:                     0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier:          UneBbDBNkzJP7mFfHQRdoiz3CQXICA92C06LA1cbI0w=
Subject key identifier:   30:99:EF:C7:84:5E:E6:A4:92:9B:BE:6A:0F:A8:27:60:F7:B7:CE:8F
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer:       /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial:       01A0CC3511B901632476318A3BA68ABFC8ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number:          0A21
Signing time:             Wed 23 Sep 2026 03:00:24 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:24 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:24 +0000
Files and hashes:         1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: VXKzLwcrVWyVqua+n9Y3nRqDKFH3VpW/K+3fs6kTdOg=)
                          2: y0R9OFgldF2xPpgLWZUCfSkApQg.roa (hash: K3dYxSYTTkLjGKIU3PEtGoJyW8WxL0sMjVKEq6R8Rf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:11:b9:01:63:24:76:31:8a:3b:a6:8a:bf:c8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
        Validity
            Not Before: Sep 23 03:00:24 2026 GMT
            Not After : Sep 24 03:00:24 2026 GMT
        Subject: CN=3099efc7845ee6a4929bbe6a0fa82760f7b7ce8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:ec:47:6a:9b:09:2e:75:18:91:df:e8:39:
                    f8:a6:5c:4d:6c:ab:2d:d3:fb:05:86:44:01:ac:c8:
                    e6:f5:2b:70:9b:79:f2:98:a1:35:04:cc:9d:a8:26:
                    b1:93:0b:18:3f:a9:9a:b4:99:73:5a:58:39:9a:18:
                    49:a8:df:d6:66:1c:53:f9:ec:e4:20:e3:7f:f3:8f:
                    9b:1a:a2:e3:d0:22:49:7a:bb:be:07:54:52:2f:23:
                    aa:09:01:75:ae:c7:34:53:7c:b5:b1:0b:63:87:fd:
                    42:e9:8e:8f:e6:ed:a9:fd:6a:7a:53:99:c8:4d:88:
                    89:5d:87:09:fe:63:2f:92:0b:e7:c5:10:a0:58:a1:
                    16:71:e5:a9:9d:7e:27:e5:dc:11:fa:fd:2b:c4:67:
                    91:67:c5:34:39:de:38:06:54:a4:a8:a2:bf:c2:aa:
                    2a:d7:74:54:d8:53:42:36:6d:75:33:a7:b3:0d:22:
                    72:a8:ee:66:c9:6f:5c:12:45:ab:4d:e6:5a:51:a5:
                    5c:c7:34:8d:91:bd:a7:fd:60:c2:d5:b5:a2:e4:7f:
                    56:63:66:6b:30:b0:51:5b:c2:35:a8:13:6e:fa:bc:
                    7a:41:5a:16:35:56:e3:e4:c4:7b:05:43:45:98:08:
                    90:41:8d:c4:2e:04:02:0e:a7:55:27:e0:57:fe:99:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:EF:C7:84:5E:E6:A4:92:9B:BE:6A:0F:A8:27:60:F7:B7:CE:8F
            X509v3 Authority Key Identifier:
                keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:58:af:9c:0c:42:79:f7:a0:36:37:28:30:6c:dc:15:03:5b:
         3b:44:c9:7d:4a:be:24:2c:68:e8:3d:cd:19:a8:dd:ed:99:51:
         b1:25:0b:ee:01:b9:09:d9:db:43:25:c8:85:41:58:fe:65:63:
         fa:3f:d9:99:df:2d:15:3e:c2:bb:51:ae:0c:c9:ca:ec:13:f4:
         b8:7a:63:6e:ac:5b:d1:c7:fe:37:15:83:05:a7:f8:18:d4:d8:
         b6:fe:a5:ff:09:e5:8c:d2:e2:9d:ac:aa:4d:68:58:6f:ce:0d:
         b8:29:f9:35:ac:85:d3:c4:74:b7:6f:0e:52:00:f8:a2:f7:00:
         d3:7f:8a:ec:a2:66:01:1d:f8:e3:d1:9a:82:34:5f:e8:48:36:
         66:d6:1c:fa:ad:6d:60:76:46:45:a9:9c:7f:b3:3b:60:1a:25:
         c9:a7:0c:a4:24:5f:a0:8c:8f:f3:ee:87:13:69:cb:05:a3:6d:
         7c:86:08:2b:c5:16:79:da:9b:de:68:86:87:48:19:7f:42:a1:
         ba:ff:02:8c:14:af:9d:ab:77:95:38:f1:aa:f1:76:bd:fd:da:
         f8:f4:62:bd:57:f9:fa:20:88:3f:7a:0c:4c:c3:11:74:a5:da:
         48:e1:f8:f9:64:9b:aa:c0:1a:8a:fe:36:b4:4b:4e:dd:4f:cc:
         bb:59:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:51:02 2026 by rpki-client