Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          a2fKbMqdAG19ojAEBlohhgr8oUnpjnPgRD/FqyZWYJY=
Subject key identifier:   BF:E2:F0:64:6C:22:A7:FC:7C:1A:07:98:05:D2:9D:4A:3A:43:25:1A
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       01A0C28E13D6B4F117D1443323E70986910B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          13D9
Signing time:             Mon 21 Sep 2026 06:01:26 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:26 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:26 +0000
Files and hashes:         1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
                          2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: wyb3gerANqXCmAzmgdztefpkSrccaTpRKIuwLbW3LS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8e:13:d6:b4:f1:17:d1:44:33:23:e7:09:86:91:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Sep 21 06:01:26 2026 GMT
            Not After : Sep 22 06:01:26 2026 GMT
        Subject: CN=bfe2f0646c22a7fc7c1a079805d29d4a3a43251a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:3d:02:17:03:7e:bd:52:ac:6e:87:3d:b6:
                    bf:83:19:90:6c:35:9e:bd:7f:2a:9d:18:be:8b:6d:
                    7a:fe:1e:3b:7a:b4:a8:64:2a:4b:66:e1:69:ed:96:
                    fd:2f:19:98:58:c6:4c:86:e3:5e:b4:ff:87:9b:72:
                    5c:7d:e1:ce:dd:ab:23:40:e1:13:c1:09:9e:03:7f:
                    c8:97:38:2b:b7:6f:c8:c3:49:5b:b2:f9:38:53:6e:
                    95:e1:6e:18:3b:52:77:59:c6:61:f3:7f:f4:88:48:
                    1e:3c:e9:e3:20:4b:2c:4a:3a:44:67:0d:6d:40:df:
                    40:07:dd:37:c7:97:2b:15:43:fe:c4:a5:db:47:c9:
                    bc:2f:34:97:7f:e5:81:dd:9e:88:6e:0b:a9:87:3d:
                    0b:84:65:67:17:59:8b:c2:5e:bf:94:ad:4e:27:c6:
                    92:77:84:19:7e:26:a8:26:04:df:29:c7:6e:b9:15:
                    be:86:62:40:f8:d0:c5:3b:cd:9c:94:2c:c8:fd:a9:
                    c5:f4:8b:be:0f:e6:05:9b:2a:7f:36:41:a7:44:8d:
                    4f:98:3a:08:f9:15:f4:32:db:3c:c7:49:b2:f6:75:
                    35:17:19:dd:b6:45:77:a6:71:84:0e:c4:b7:aa:69:
                    05:06:67:ab:e6:76:02:83:e1:5d:06:b1:b9:28:8e:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E2:F0:64:6C:22:A7:FC:7C:1A:07:98:05:D2:9D:4A:3A:43:25:1A
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:99:40:a7:a8:0d:40:7e:9c:2d:74:32:12:25:db:ba:c4:ff:
         d7:35:76:a0:ba:7c:de:8e:3b:01:ff:e2:f9:c2:d3:91:03:2d:
         f8:4e:09:79:66:50:ce:c2:ab:56:1a:34:56:c2:22:88:ca:ca:
         eb:62:80:bd:dd:a8:17:0a:7e:4c:ee:af:bf:76:29:68:04:16:
         f2:ee:4a:9c:5a:48:cf:05:1b:c9:68:5a:c4:7d:58:50:2c:c4:
         22:6f:41:b9:0f:f4:fd:cb:fd:63:8a:cf:a2:ef:6a:97:54:47:
         00:c0:5f:bd:2b:93:25:b0:88:a4:04:8f:d3:9c:99:83:f7:98:
         f9:78:61:ea:65:1c:28:77:e2:7d:7e:0a:4e:cc:15:93:e6:67:
         6a:50:49:74:c6:6a:40:7f:12:31:7a:1e:ad:b2:c8:66:c0:14:
         c5:5b:93:8d:b1:23:81:ec:13:2c:b4:aa:72:82:8b:55:49:88:
         d5:4c:7d:7b:da:8a:ed:db:bc:c1:75:0f:97:8a:df:2a:f6:d7:
         66:4f:08:74:06:6c:35:30:d8:21:21:1c:70:06:d1:91:9e:c0:
         22:60:ba:74:08:90:45:80:6d:a0:b3:fa:aa:62:26:71:03:72:
         bf:ea:7d:4a:8b:81:1d:a4:20:69:cf:21:dc:c8:c3:59:5f:1c:
         dd:68:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:18:33 2026 by rpki-client