Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File:                     mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier:          diLNyYPEyDjChTTW/Hieyg5ZnN56vEXYsCct/M4S+JU=
Subject key identifier:   9C:AA:63:F3:91:6E:E7:43:17:6C:24:0B:18:73:07:DD:9D:EE:DA:29
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer:       /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial:       01A1DFF191360A234AA0B043B9EA5FDD1ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number:          0AC8
Signing time:             Sun 15 Nov 2026 16:01:52 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:52 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:52 +0000
Files and hashes:         1: Xgkh2jqWshIrm_XP38KT2hJAFLI.roa (hash: HtXZbHm1lMY4MWtIUl2UqL3oGRY9eBOP4/14fbeHHSQ=)
                          2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: 75pKMB73c+sDgYVkW65ahDrBIuE0EZPVgtKNBrEH+CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f1:91:36:0a:23:4a:a0:b0:43:b9:ea:5f:dd:1e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
        Validity
            Not Before: Nov 15 16:01:52 2026 GMT
            Not After : Nov 16 16:01:52 2026 GMT
        Subject: CN=9caa63f3916ee743176c240b187307dd9deeda29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:7b:fb:c7:ec:5b:ad:af:6a:9b:d6:0c:05:
                    e5:ce:b8:9e:8b:05:ce:39:6c:a2:e5:6f:0a:92:a0:
                    e4:a8:3f:2e:7d:79:0c:91:1e:a6:0c:ff:82:42:4d:
                    fa:a8:1a:13:73:cc:d5:91:be:ff:6f:f6:53:08:06:
                    1e:bd:da:72:14:61:41:1f:ed:0d:ea:52:b5:f7:88:
                    f2:9e:28:35:f2:6a:9d:e2:92:28:f2:9f:8a:47:57:
                    9b:75:0e:f1:ab:55:65:22:04:cc:f4:c0:9e:eb:3a:
                    96:0c:7e:d1:7d:ff:ef:5d:53:e7:42:c4:65:6b:9d:
                    10:71:fd:fd:92:59:3d:d8:31:d5:86:39:78:02:7b:
                    ed:30:e9:0f:4b:fa:42:1a:4d:3c:80:3a:fd:d6:84:
                    72:fc:0c:ce:4d:19:0c:5c:fb:0c:4a:b0:2b:12:e4:
                    08:61:6e:ba:e3:5e:d5:70:3f:36:03:b8:fa:da:3b:
                    43:d4:82:85:cd:32:f8:38:f4:14:1b:63:48:af:e6:
                    f4:de:b0:99:5a:b2:a1:50:4b:88:f5:b2:81:6a:24:
                    91:03:48:2e:40:b2:4c:d0:fb:06:e9:89:22:27:32:
                    40:42:8f:b9:fa:67:aa:e8:c5:ef:af:47:75:e8:a1:
                    0b:bd:3b:24:cf:5b:75:e4:80:75:78:42:f2:b5:60:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AA:63:F3:91:6E:E7:43:17:6C:24:0B:18:73:07:DD:9D:EE:DA:29
            X509v3 Authority Key Identifier:
                keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:02:cb:76:30:7c:1c:db:ff:67:30:17:2d:07:a4:d4:6e:36:
         78:fd:7b:e1:ff:43:26:a3:db:45:67:86:c6:a0:5b:85:ea:12:
         ac:34:2b:71:b6:ff:58:4e:f1:7a:2e:ea:4f:b0:b0:36:0a:41:
         7a:21:1d:40:3c:37:cf:f9:e6:ff:af:21:29:f9:25:37:30:5c:
         e5:35:8c:c0:97:35:31:29:0e:bb:d3:52:07:b3:18:04:65:68:
         52:4e:56:c1:00:c5:4d:be:4c:4c:80:5e:d2:5c:88:1d:54:8f:
         05:86:04:2b:e0:1f:5d:c1:9e:42:0b:4a:71:ae:ac:f5:9e:36:
         2e:72:5a:12:9e:bf:8a:ac:6f:22:ba:f2:74:b8:32:63:35:b8:
         5f:2a:3d:83:99:51:f3:e8:8f:87:df:7b:28:af:94:91:b0:f3:
         5f:f7:a1:4d:b2:80:a3:ea:af:ce:5d:6b:82:39:9c:85:e8:0c:
         86:fc:e9:08:51:24:2c:78:0f:d9:00:ce:f3:47:75:36:f0:5d:
         84:a2:99:b9:35:a9:5e:51:69:ac:d2:32:5c:ec:23:00:70:01:
         a0:db:e6:eb:39:9c:c3:0c:31:21:60:5c:05:a1:af:18:9a:d1:
         76:40:d3:c2:58:98:56:08:3b:1e:83:e8:55:8e:b7:4e:7d:73:
         e8:32:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:18:36 2026 by rpki-client