Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          9buyu/685aCIRlo5FbwebzcO4IwVbPaVn1MYlFrGrsE=
Subject key identifier:   D1:E8:60:8A:2D:4E:4C:FE:E5:D6:6F:71:98:9B:73:15:85:09:CD:68
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       01A0C4E9CB26B2B7E82FC7FFEC647E15210D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          09E9
Signing time:             Mon 21 Sep 2026 17:00:51 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:51 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:51 +0000
Files and hashes:         1: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (hash: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk=)
                          2: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: mzrU3oFwxtEp90q7FrPteBQjb+2X6ikMANf9ayTDK+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:cb:26:b2:b7:e8:2f:c7:ff:ec:64:7e:15:21:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Sep 21 17:00:51 2026 GMT
            Not After : Sep 22 17:00:51 2026 GMT
        Subject: CN=d1e8608a2d4e4cfee5d66f71989b73158509cd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:ef:72:d4:37:c4:34:b8:31:4d:20:b9:7c:
                    66:74:28:57:bf:14:46:78:ff:23:f1:c9:9d:b1:23:
                    63:40:c5:19:77:69:0f:27:b9:9b:53:88:77:c5:24:
                    ad:60:e5:cb:7e:0d:fe:ba:74:1f:07:f3:6d:eb:44:
                    02:85:ab:77:2b:e9:3c:74:41:5e:b5:ca:21:2a:fc:
                    66:3f:53:b2:f7:40:40:f9:f3:f2:c4:d1:65:9a:7a:
                    a1:47:b3:05:be:69:dc:47:20:78:8a:cd:07:e1:27:
                    cb:eb:4b:9a:03:d5:7b:6c:a5:2a:3a:25:c0:41:f0:
                    6c:90:b0:a2:d4:38:6c:29:36:26:18:d8:20:b2:9d:
                    5e:f6:91:e7:4d:ab:d3:ad:40:fc:56:f8:cb:0b:8d:
                    ae:9a:5a:16:e9:8c:8f:79:37:21:81:13:83:3c:90:
                    fb:1e:73:b4:5a:51:ce:6f:7f:dd:5a:3b:db:5a:83:
                    21:f8:c1:8b:e2:5f:20:ab:d0:73:bd:81:9c:3e:8b:
                    ef:61:5a:03:d2:98:ac:ec:0f:84:e2:1c:81:fc:a9:
                    e5:2a:bb:e1:26:7c:47:ee:c5:5c:35:98:21:2a:71:
                    6f:04:03:de:75:1d:53:a1:35:01:5e:ff:82:b6:27:
                    7e:c4:2a:b4:1e:af:5a:fd:bc:1d:10:0a:02:70:dc:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E8:60:8A:2D:4E:4C:FE:E5:D6:6F:71:98:9B:73:15:85:09:CD:68
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:dc:39:04:44:5f:0e:ef:3a:de:1c:55:13:6c:9e:7f:cc:
         2d:90:28:63:27:c3:7e:c0:11:47:62:b4:52:2d:ab:25:93:01:
         61:1e:28:3f:47:3c:f2:db:41:a3:3d:b2:ad:0b:4f:06:6c:00:
         4c:f2:34:bb:bf:05:e3:59:22:1e:8c:5a:af:2c:25:8f:50:ae:
         76:6c:18:91:2b:3c:51:9f:8e:b5:db:fe:07:bd:85:61:57:ca:
         d0:3a:01:dc:89:60:92:d5:ac:fb:74:b1:d7:00:6d:a3:0d:de:
         3b:bd:89:96:2c:9f:9d:eb:50:2a:d6:c3:4d:fe:21:4f:a2:dc:
         80:d3:e9:9f:44:6c:4c:ff:2a:ef:2c:c1:e7:bc:52:6a:35:85:
         e1:7b:f3:a3:d8:ac:6b:4f:ba:3e:59:dd:b7:e6:f0:d0:e6:a4:
         95:f9:0f:ba:b9:dc:a3:7d:97:b5:7b:1d:5b:7d:a2:62:eb:13:
         2c:e0:ad:28:00:ee:c1:91:78:11:df:8c:66:cf:96:bf:c3:2c:
         3c:1e:16:67:df:ca:11:b8:40:a0:9e:70:90:b7:55:40:07:52:
         34:7f:8e:f0:9b:b1:a0:cd:a9:93:5d:8f:9e:cf:c2:84:13:72:
         6d:d5:39:f5:aa:96:ab:01:e3:cf:bc:3f:47:21:27:44:5a:30:
         e5:cb:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:04:57 2026 by rpki-client