Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File:                     1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier:          EkOgeUToHWTx8A8NbVZJXcpvxIoZYWAhBr97S0oBlL4=
Subject key identifier:   EA:E6:01:0B:B4:7F:28:41:2C:27:45:D9:9A:9B:1B:43:A9:6B:6C:C6
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer:       /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial:       01A0C47B623DCA4CA1AD0FD1B03C69F4A91F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number:          1A94
Signing time:             Mon 21 Sep 2026 15:00:15 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:15 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:15 +0000
Files and hashes:         1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: Tt3QaFHGXSvsHvPa9a6SUIryRvOS1Ai9FPGYU73ZkIg=)
                          2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
                          3: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
                          4: I72kmK2oJ75mIwxt8hjG7GUupzk.roa (hash: K8Phul8KmeYidC/APf8t5kfkNOalCulE4TpB9idF+tc=)
                          5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
                          6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
                          7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7b:62:3d:ca:4c:a1:ad:0f:d1:b0:3c:69:f4:a9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
        Validity
            Not Before: Sep 21 15:00:15 2026 GMT
            Not After : Sep 22 15:00:15 2026 GMT
        Subject: CN=eae6010bb47f28412c2745d99a9b1b43a96b6cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:af:fa:e9:f3:e4:5a:c0:6d:ec:a1:77:8f:
                    48:37:92:05:ce:e2:73:2a:5b:da:d5:0c:a4:1b:60:
                    d9:51:81:16:e9:ba:16:c4:eb:6c:ac:bd:ec:91:fe:
                    e5:43:07:a5:9a:9a:b1:43:06:b3:d1:45:79:94:71:
                    d9:89:22:c0:16:ab:05:c7:eb:71:89:88:b7:7c:68:
                    9e:28:2d:4a:70:92:be:07:08:04:a3:a7:48:18:7d:
                    86:6b:d4:e3:7c:8e:02:ed:51:9e:0f:26:e0:22:38:
                    7b:21:1f:9e:7a:bf:97:32:18:ba:71:39:e4:2a:51:
                    c7:78:b2:cb:76:91:2f:73:38:35:52:ac:0b:5a:87:
                    7a:96:a5:89:c4:4a:04:e1:7f:e2:a8:c3:b4:e1:74:
                    16:23:d5:71:eb:87:f3:47:19:dd:72:27:a6:e1:3b:
                    a5:05:ee:8c:2c:05:23:3c:9c:fe:7c:86:e0:b9:c4:
                    7a:d5:30:98:09:06:64:97:e7:ed:a1:aa:52:b1:0d:
                    3e:7a:92:4b:da:bf:88:a1:cc:b6:96:db:85:ed:9c:
                    ed:db:90:44:b0:97:6f:c2:76:17:7d:63:53:a2:d0:
                    96:d1:40:b5:5a:40:0e:c0:13:0f:10:7b:9e:17:a9:
                    ba:89:1e:96:74:07:1d:d2:69:c5:1f:7e:42:54:26:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:01:0B:B4:7F:28:41:2C:27:45:D9:9A:9B:1B:43:A9:6B:6C:C6
            X509v3 Authority Key Identifier:
                keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:21:24:45:d1:a8:30:1a:c3:4e:0a:ac:35:f6:04:8a:7e:
         54:34:95:2d:88:a4:67:b2:c1:b6:b0:26:ed:3c:2e:9e:83:3e:
         f3:fc:9e:5c:75:fb:0d:f5:d1:82:65:44:4a:9f:5e:68:45:df:
         5f:a9:e9:e5:3b:6f:3d:c4:9f:24:a3:87:ad:db:97:4e:c2:70:
         6d:80:c0:22:40:70:99:1b:36:6f:3b:3a:a4:33:cf:1c:fa:39:
         8a:8a:cf:bc:80:e7:63:af:ff:3e:15:7a:42:3b:2f:2a:5f:e8:
         ff:47:78:de:4b:2c:ac:49:94:54:6e:c6:91:bf:c4:ca:05:89:
         6a:30:44:14:19:c6:13:1b:32:08:6b:01:6f:2a:08:14:71:bd:
         66:ac:57:0a:88:50:69:18:4e:5c:a3:5f:a4:11:89:68:bb:79:
         77:8a:ba:3a:ba:c3:15:d3:15:21:8c:45:6c:23:29:32:4a:6d:
         e0:ca:79:30:47:b4:8a:38:c0:9f:10:bc:e2:27:bb:d2:d0:a2:
         86:dc:37:b5:d2:9c:2e:42:22:66:2d:c0:3f:f7:cf:f5:09:9a:
         a8:ba:a4:06:9a:7d:ba:88:66:9f:df:c8:e4:9f:8b:fe:35:e2:
         a5:4a:4c:c7:b9:d0:5d:22:32:36:02:b5:a5:74:35:72:8e:31:
         b4:77:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:35 2026 by rpki-client