Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File:                     9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier:          M/MVMVKgp2GGMu0Mib+PjEZRowpMGXi9oMzP7iaNt7s=
Subject key identifier:   F0:8B:30:BF:5A:99:DE:3F:FE:81:03:68:1D:74:30:B2:AF:E2:69:2D
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer:       /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial:       01A0C77C68883A85589B6B9C4B2234AC5D11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number:          083D
Signing time:             Tue 22 Sep 2026 05:00:14 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:14 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:14 +0000
Files and hashes:         1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: ccj4XQoGWJNJb75mRexx0/TdrVi8MS/McMnWUBt9nfk=)
                          2: e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa (hash: m4yGQd55Wkn8/VNQHSMkT2U4sSayeuVDo4mzhAL262I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:68:88:3a:85:58:9b:6b:9c:4b:22:34:ac:5d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
        Validity
            Not Before: Sep 22 05:00:14 2026 GMT
            Not After : Sep 23 05:00:14 2026 GMT
        Subject: CN=f08b30bf5a99de3ffe8103681d7430b2afe2692d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:a3:1a:3f:ae:99:8f:30:be:ec:36:d8:ea:
                    c4:d2:cc:5f:de:a1:b8:a3:19:76:bb:c4:a5:fe:cb:
                    37:35:56:ca:7a:5e:e2:6e:19:2b:7d:34:30:cf:7f:
                    5e:56:cf:0b:ea:80:cd:ba:83:21:4d:73:b4:10:00:
                    3a:3b:a5:29:0f:ff:6b:e3:29:04:71:b5:2a:a9:34:
                    6f:bb:90:4b:a4:e6:47:d4:3c:3c:67:3a:d1:7d:87:
                    80:d2:32:28:9d:20:ac:70:a1:70:75:36:0a:b3:88:
                    19:6c:7d:e4:a2:26:9d:43:42:8d:c4:33:aa:92:ab:
                    91:55:73:d3:80:7e:76:32:24:47:6c:63:fc:86:16:
                    4c:84:21:c4:33:dc:98:dd:a9:5b:a8:18:25:d5:8e:
                    9c:a0:8b:32:93:86:18:b4:27:e1:12:88:f6:16:7f:
                    2b:72:78:f7:ec:88:3e:35:8e:06:0c:da:4d:8d:58:
                    fb:c9:3a:bc:15:62:69:4e:86:24:c3:9f:60:66:1a:
                    6f:ff:3f:9a:57:4a:2b:84:f6:bf:01:6a:1a:e9:57:
                    c0:9c:2e:3b:07:b3:90:83:ea:44:b1:0d:e3:0b:4a:
                    08:b4:58:28:20:92:22:c3:69:f1:aa:ea:ff:29:1d:
                    33:da:94:bd:13:76:de:93:8c:d1:ec:93:55:32:04:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8B:30:BF:5A:99:DE:3F:FE:81:03:68:1D:74:30:B2:AF:E2:69:2D
            X509v3 Authority Key Identifier:
                keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b4:02:01:4d:7b:8c:a5:d4:07:5c:5c:5e:75:40:34:67:b0:
         d2:77:1e:53:3f:82:f6:39:70:aa:62:62:6b:c2:1d:a9:44:cf:
         fd:25:34:88:58:a6:9a:73:e3:79:cd:1a:9a:8b:45:be:0d:fb:
         39:4e:ac:3c:21:b5:13:25:3c:c6:5c:84:e7:db:92:09:3a:89:
         3d:db:2b:8d:71:31:be:ed:bf:80:1c:ee:c9:d4:cb:67:44:0a:
         64:80:9a:04:2b:86:56:f5:60:f1:14:00:17:c6:d1:bd:c5:09:
         6e:9e:aa:5f:9c:1d:3d:3c:d8:21:93:dc:ff:6a:08:e8:7d:c7:
         cc:24:02:13:3e:19:f0:f9:6c:4d:ad:ad:97:8f:90:f6:b6:b4:
         21:58:55:ad:0c:f7:67:db:6c:e2:b8:2e:cc:bc:58:4d:a4:23:
         cf:0e:ca:09:cb:97:bc:30:2f:46:fd:aa:54:26:16:1a:c5:98:
         c3:83:86:3b:e1:b1:ef:44:54:0c:f0:23:f5:c6:1a:24:bc:19:
         ce:ab:27:ec:50:85:21:5b:f0:87:c1:21:49:e4:fd:69:bf:17:
         49:8b:d7:e7:a6:e5:c3:c6:a6:15:8e:f6:4c:28:29:c4:82:14:
         d1:10:a8:0a:b8:95:52:f9:19:52:3d:1b:ea:f1:62:7a:86:c2:
         27:61:33:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:14:56 2026 by rpki-client