Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
File:                     9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json)
Hash identifier:          FGPTmroPu6Y37hGP4IAEO1lIz6Lt/145TYuN0hS3ZUg=
Subject key identifier:   B9:C9:A4:C9:52:1F:B9:18:5F:C0:06:FF:C7:D3:E0:96:69:FC:76:A5
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Certificate issuer:       /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial:       01A0C331FC9304B3603029093B09E4716669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
Manifest number:          0D5F
Signing time:             Mon 21 Sep 2026 09:00:27 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:27 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:27 +0000
Files and hashes:         1: 99vNYm11Abb46yGkbIvnhElSUKk.roa (hash: kaM8j0/7vV6OtesnBvSal75AKpJWv23ajsp4aKhWL4M=)
                          2: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: kVe0GeKjiYHhXdwsMidYUX6i4KpBjdbISAP+KRXN7rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:31:fc:93:04:b3:60:30:29:09:3b:09:e4:71:66:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
        Validity
            Not Before: Sep 21 09:00:27 2026 GMT
            Not After : Sep 22 09:00:27 2026 GMT
        Subject: CN=b9c9a4c9521fb9185fc006ffc7d3e09669fc76a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:73:1d:7b:aa:88:9b:38:65:38:1f:54:69:
                    b0:6f:90:76:c1:1b:c6:9e:59:29:22:e1:a5:25:35:
                    d6:92:f7:f4:fd:c5:44:a2:73:6f:c5:a5:e4:6c:df:
                    4b:88:3a:77:52:e8:48:f0:98:4d:17:4f:8b:c2:16:
                    ec:c3:a6:7f:8f:62:67:34:9a:ed:62:9d:82:f5:ce:
                    37:b3:e7:46:c4:86:38:0a:79:a7:c3:07:8a:a0:75:
                    35:d1:6f:18:d5:72:f6:25:72:3f:fa:0f:e8:38:ff:
                    a6:66:04:ad:a3:cb:a7:ea:18:2f:1e:d7:07:15:5c:
                    a6:a6:ca:d1:95:15:db:30:ba:1f:9d:2d:33:51:c6:
                    af:f2:db:27:52:ae:31:ea:6c:76:40:97:32:85:97:
                    a3:4d:26:94:31:1a:aa:2d:f3:15:66:9e:ab:ad:4d:
                    ea:d1:74:4f:33:c9:27:de:e5:a4:78:af:87:9c:8f:
                    f0:c6:97:39:0a:ce:d7:ef:3c:a0:ac:e8:9c:8a:b9:
                    f7:09:1a:31:27:44:d1:22:57:95:d2:a0:70:d4:1d:
                    f2:84:0f:99:f6:6e:14:ce:c3:bc:98:ef:fb:21:6d:
                    e2:e7:4f:35:ee:eb:db:74:85:6b:1f:90:53:8b:ef:
                    e6:31:b1:9a:8e:5e:4c:87:f6:9f:44:23:e8:31:fd:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C9:A4:C9:52:1F:B9:18:5F:C0:06:FF:C7:D3:E0:96:69:FC:76:A5
            X509v3 Authority Key Identifier:
                keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9a:04:4a:38:3c:34:2f:f1:84:36:45:b8:e8:8e:92:93:bc:
         4e:ea:72:3a:cd:15:e2:c6:e4:f3:39:0d:9b:7f:78:fa:b6:72:
         bf:e8:c4:e8:d9:fc:20:1d:93:80:41:7a:45:63:d8:13:02:4c:
         26:50:1d:bd:1d:ae:f4:94:a8:38:46:0b:f4:ec:5e:31:1e:f4:
         91:73:02:05:fe:56:21:ed:91:44:89:4c:04:3b:6d:7f:a1:94:
         bf:dc:55:75:18:68:4e:e4:d6:02:16:a2:b1:49:d5:42:ab:96:
         a9:c9:2b:79:26:0d:2e:d4:b4:63:cb:08:63:88:68:b8:e8:ca:
         1a:a3:8d:0c:6c:99:b6:e7:99:a3:31:02:e1:18:94:04:48:b6:
         fd:e3:e3:b8:fd:a0:40:f6:02:f1:ef:6d:c0:6d:45:d7:23:c8:
         f5:36:e0:62:15:bb:b8:5f:a6:4e:7d:18:19:ab:c2:fb:67:61:
         e2:31:34:12:13:75:e9:a2:a1:1a:76:cb:9c:62:6f:14:3c:95:
         79:14:ba:e1:f0:ba:a5:05:23:57:5e:77:84:b7:1f:c5:ff:b2:
         c8:2c:9f:5d:b6:c9:0e:e1:b3:ef:db:78:ea:72:9a:dd:0e:f1:
         c6:f1:15:92:76:a7:39:cf:15:a2:77:88:aa:8c:50:fe:9e:3a:
         08:71:b8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:13:08 2026 by rpki-client