Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File:                     9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier:          7ApixIOPSCqoDgRoco0GspiksQ0Jk+1fZcO38YJxvvA=
Subject key identifier:   45:1B:03:DB:BF:6C:AA:14:76:B2:F8:7F:04:75:03:C1:D1:2C:3E:9A
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       01A0C77D0FA3C44647BFE53035208AB0C8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number:          09F0
Signing time:             Tue 22 Sep 2026 05:00:57 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:57 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:57 +0000
Files and hashes:         1: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: oAyGlk6SULJKac0rw5VrmJWhT5YuBHgCbz+MRhJvOLo=)
                          2: DTajfEiYAfwU9wznkihFnvtM700.roa (hash: 0NM6zYcwmQ05W0Dcf5q5e1n9JwwtYJ2TI/Zem3bjahI=)
                          3: ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa (hash: 5I9TJRb3cc5VhsKq+pB92ABihn+aPu3v2b27S765Sxc=)
                          4: YHFA4JQJT_w-qOyv1tdQo99hP7U.roa (hash: bzABHukn/tUJxV914JpkLB2MX+U4A40WKsjCRa7w6mI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7d:0f:a3:c4:46:47:bf:e5:30:35:20:8a:b0:c8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Sep 22 05:00:57 2026 GMT
            Not After : Sep 23 05:00:57 2026 GMT
        Subject: CN=451b03dbbf6caa1476b2f87f047503c1d12c3e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:40:8d:89:bc:61:4b:7c:34:c0:1c:d9:9d:
                    07:48:d8:3f:c7:41:3b:5f:da:ad:4b:ca:ef:a6:fc:
                    e1:0b:eb:f0:cf:e9:e3:8b:50:fc:01:02:31:50:81:
                    a1:9d:2a:21:78:0a:64:27:9b:bf:ee:09:7c:e2:11:
                    5d:36:d5:85:d6:80:c3:9c:be:15:82:03:c6:94:00:
                    66:0e:69:0d:e1:24:31:ed:51:a7:be:09:81:99:66:
                    82:7b:4e:1b:4b:5f:fe:9f:ae:73:26:56:da:f0:5e:
                    62:2e:15:28:4e:23:31:0e:e2:df:40:80:26:66:f6:
                    7f:6d:45:5a:d9:ea:7a:41:d6:67:bc:bf:4a:3d:94:
                    f7:95:8f:06:e7:1d:ee:27:6b:fc:4e:af:c7:0b:32:
                    3d:07:ee:71:f7:99:86:6b:c0:f0:bb:ad:86:df:c1:
                    3e:18:5a:81:45:46:cb:7e:7a:df:36:6b:35:52:f3:
                    44:93:40:03:c3:5e:7a:5b:cd:84:de:62:41:d9:f5:
                    3b:da:66:27:87:6e:82:80:b7:5c:c9:57:a2:6a:f2:
                    01:32:5f:fd:ef:1d:d9:64:df:38:ec:c1:d9:75:ab:
                    0e:97:99:63:cb:2f:8e:13:c4:5c:2a:98:dc:51:87:
                    07:95:81:20:c2:4a:dd:63:eb:8b:e4:9a:8c:d1:dc:
                    2e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:03:DB:BF:6C:AA:14:76:B2:F8:7F:04:75:03:C1:D1:2C:3E:9A
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:16:f1:44:92:4b:32:58:68:81:58:63:65:bd:c8:c1:7b:
         8e:e7:d5:29:29:e2:a5:d4:1b:9a:fe:b1:11:4d:5b:48:1c:09:
         60:7e:38:c2:a4:52:85:a4:3c:dc:a7:b0:7c:b6:34:2b:68:90:
         19:58:07:c4:65:c8:b8:84:5c:55:92:f8:11:7f:f8:23:aa:7d:
         eb:4b:f7:8a:3e:08:79:b1:6f:a3:b9:19:e3:5e:3d:1e:37:a5:
         0e:a4:de:a7:7f:ad:34:ad:f1:fb:1f:83:8a:eb:1f:cd:88:5c:
         bf:5d:aa:0b:fe:88:3e:96:d6:f9:0f:94:60:f6:79:c7:a2:5c:
         26:1c:0f:a1:d2:40:81:3c:b8:12:3d:dd:fe:f5:9d:2a:d5:18:
         0b:e8:5e:ef:c3:82:d7:59:38:8a:c7:6a:2f:7f:77:e8:fd:f5:
         c6:f7:83:a5:f1:e0:a9:ee:06:a1:64:5f:dd:df:91:3a:7f:e4:
         49:fa:34:71:c5:26:f4:d9:1f:30:9c:59:0c:8d:11:da:03:50:
         65:bd:dc:1f:79:24:c9:5a:6d:8f:0b:09:1d:4f:90:5c:db:23:
         2b:84:bd:40:ed:b2:b1:4c:03:f5:a6:8f:18:d4:c8:f6:c8:dd:
         00:c4:72:77:2d:e5:23:03:83:b5:b6:68:8d:0b:7f:fd:c0:df:
         a7:d0:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:33:08 2026 by rpki-client