Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
File:                     9oBoAaqBnIocqImNFZiUkJzoKCk.mft (raw, json)
Hash identifier:          f0LAszAuSPzC1mNW3Ga2XLfoVq7CnmB9ciZg2kNiyng=
Subject key identifier:   7D:BA:56:A3:53:9A:7A:FB:89:DF:34:EE:7A:2D:C7:CE:23:B1:24:7A
Authority key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Certificate issuer:       /CN=f6806801aa819c8a1ca8898d159894909ce82829
Certificate serial:       01A0BC53E39A9FC742CAB0FB60264B8A878D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
Manifest number:          0173
Signing time:             Sun 20 Sep 2026 01:00:09 +0000
Manifest this update:     Sun 20 Sep 2026 01:00:09 +0000
Manifest next update:     Mon 21 Sep 2026 01:00:09 +0000
Files and hashes:         1: 9oBoAaqBnIocqImNFZiUkJzoKCk.crl (hash: N54EORhVMiwmivguy/bRhIvsc4QeEECOGqCMMdiQbso=)
                          2: ystfWuwLG_sjkRPz74-K9kJmCS0.asa (hash: A/Zpc7HU31s0tuJut1dPdLlpZdSrvy9Su9vtCFoJBpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bc:53:e3:9a:9f:c7:42:ca:b0:fb:60:26:4b:8a:87:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6806801aa819c8a1ca8898d159894909ce82829
        Validity
            Not Before: Sep 20 01:00:09 2026 GMT
            Not After : Sep 21 01:00:09 2026 GMT
        Subject: CN=7dba56a3539a7afb89df34ee7a2dc7ce23b1247a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:40:03:66:49:da:74:59:98:ed:20:93:de:
                    56:81:0f:55:57:30:cb:db:83:e5:b5:c1:06:6f:aa:
                    c4:7b:8d:0f:35:c6:b6:f4:13:01:b1:63:d6:18:47:
                    ff:76:66:3a:ff:93:6e:d4:23:70:ba:3e:ee:c6:24:
                    1b:0b:88:e6:68:ab:b4:41:37:23:7d:1c:26:63:dc:
                    8e:99:00:08:c9:c8:65:98:cf:93:58:a4:44:82:4a:
                    b5:b5:93:41:00:5d:75:07:25:2b:25:b1:bd:f3:83:
                    97:e7:45:d8:b9:9f:66:e1:4d:ab:55:84:2a:7b:f3:
                    14:b0:90:78:a1:e4:64:ca:78:3c:c2:00:f3:c1:1b:
                    e8:83:9b:f5:d3:9b:cc:91:5a:33:29:8f:90:7b:b5:
                    21:75:fa:db:8c:5f:d3:b9:72:ad:41:df:89:c3:93:
                    ca:f9:4b:9e:4a:8d:2a:25:e3:d5:9f:67:10:c4:8c:
                    ad:62:10:43:3f:b1:25:bd:05:96:f5:54:48:35:87:
                    45:1f:c5:d3:19:90:79:5c:d9:2b:0f:46:d1:40:4c:
                    0b:ee:14:35:12:b9:62:aa:ef:4a:97:6f:6b:8a:d6:
                    90:0c:67:b3:76:2a:a5:e6:29:3a:b2:e3:de:47:91:
                    09:5a:41:9d:a7:bd:39:39:e6:ae:68:4b:ff:ad:f8:
                    48:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BA:56:A3:53:9A:7A:FB:89:DF:34:EE:7A:2D:C7:CE:23:B1:24:7A
            X509v3 Authority Key Identifier:
                keyid:F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:d5:c8:c3:12:b7:0c:ff:a4:3d:ec:ee:57:63:73:07:e6:
         61:2c:7f:12:89:fb:65:0b:97:cc:03:7e:19:19:db:8e:da:e9:
         f6:aa:6c:3a:12:9c:7b:7d:fe:de:35:c7:f5:88:0f:6f:bd:28:
         be:8a:dc:c7:b1:14:db:7e:19:66:76:81:ae:2c:11:67:2b:c5:
         c4:ea:28:58:82:9f:19:6d:00:d4:c0:e4:b5:4a:bb:76:5a:48:
         09:61:61:9d:c4:d8:7d:eb:84:5f:59:ee:9a:eb:c7:26:a5:a6:
         f9:f1:c9:64:72:25:23:74:b2:89:df:2c:e5:ea:94:62:6a:17:
         24:f8:05:c1:7e:72:47:5b:2a:57:03:2c:23:3e:0d:8d:05:2f:
         08:b7:9a:1a:53:94:2f:6f:f0:b3:56:6f:42:48:4a:70:eb:23:
         8a:b3:e2:1b:de:b5:7a:d1:8f:c9:c5:04:bb:9f:df:a3:a3:5f:
         1d:68:df:6c:ef:7b:c9:6a:43:79:07:65:95:d8:a6:c2:c2:b1:
         40:50:4d:e3:da:e7:cc:8c:ef:de:7c:62:40:f9:d4:cf:10:55:
         76:76:08:f2:67:42:9c:dc:d1:81:ee:bb:f0:68:e2:9c:0d:d3:
         ea:74:82:72:96:b2:ae:97:56:cf:ff:f9:9e:2c:31:94:dc:19:
         da:7c:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:00:09 2026 by rpki-client