Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          stEbTcENKyCiliS2BhbBvVDpHLmpBS6DVy8tAEcjLls=
Subject key identifier:   74:61:D5:2E:D7:22:0A:C5:A4:69:CB:9C:2A:B9:09:FD:84:0B:F6:B9
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       01A0D45DE13CB531E0BD61241E136A7DC674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          1A72
Signing time:             Thu 24 Sep 2026 17:01:57 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:57 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:57 +0000
Files and hashes:         1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
                          2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
                          3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
                          4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
                          5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: 4c0M3N6Bl1BnMHS6qFOAauOFDH9zYlwiV8Eb/NsQEWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:e1:3c:b5:31:e0:bd:61:24:1e:13:6a:7d:c6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Sep 24 17:01:57 2026 GMT
            Not After : Sep 25 17:01:57 2026 GMT
        Subject: CN=7461d52ed7220ac5a469cb9c2ab909fd840bf6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:c0:48:95:d6:40:44:67:bf:d2:66:77:e1:
                    e6:f2:ac:3f:bd:32:46:7a:e9:b9:3f:33:95:ce:f4:
                    d5:14:c6:25:8c:ea:91:50:30:43:9f:e0:45:8a:eb:
                    c7:96:29:25:72:55:ce:c3:98:f9:6c:de:56:7f:b5:
                    15:32:2a:34:de:f0:17:5c:af:bf:3a:f9:c6:e3:ed:
                    11:32:3e:3f:2e:3f:02:b0:b3:51:5c:e7:e5:58:ea:
                    ca:45:96:86:7d:2f:bb:f3:1b:df:d6:43:88:4c:00:
                    85:70:76:9b:5b:eb:5a:ce:73:18:06:4a:6a:7c:80:
                    0b:86:f2:06:06:8d:58:11:ce:e4:94:85:a3:04:28:
                    9a:17:a8:9f:9c:42:b8:c2:d0:5a:5d:ac:c8:84:c8:
                    42:f5:92:8f:df:1c:44:d8:e5:96:84:07:f2:fd:45:
                    f1:05:16:94:51:88:72:8c:59:4e:fb:4e:b9:f2:1b:
                    84:f1:2d:96:6c:e9:63:c2:37:71:50:4b:8f:9c:24:
                    b7:fc:e9:cc:b3:c6:9a:05:9b:c5:cf:18:1e:d2:67:
                    e0:09:57:c5:b2:6c:89:d1:42:15:28:37:cd:30:63:
                    79:e6:94:c7:8b:91:06:7b:d4:99:db:65:ce:84:df:
                    10:4b:93:3d:9d:70:6c:37:6e:d1:93:59:be:92:93:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:61:D5:2E:D7:22:0A:C5:A4:69:CB:9C:2A:B9:09:FD:84:0B:F6:B9
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:db:d2:5b:00:d4:99:35:eb:42:9a:3e:6d:74:a5:e6:e2:af:
         c7:64:0a:a1:65:f2:b9:93:fb:a4:31:eb:87:75:53:c6:1f:b1:
         93:30:c0:ca:58:7f:92:16:c7:8c:44:74:7a:4e:bb:39:ea:53:
         e7:48:09:62:85:b9:fa:a1:9d:dc:cd:d3:a7:7e:c8:43:ff:c0:
         0f:5a:f7:3c:2f:d5:4e:53:9e:9e:fd:a9:7e:46:46:57:54:d7:
         33:53:2c:6c:89:69:ff:39:a1:8f:8e:6b:6b:5d:2b:fc:fc:d9:
         04:ee:b0:3b:67:30:43:b0:26:05:35:e6:60:15:6a:77:96:d1:
         fc:4d:f9:ff:17:96:f6:a3:c6:c1:65:b7:ce:e9:96:6f:14:1d:
         f3:25:dc:63:ce:e0:73:a9:62:35:ab:ef:00:02:68:c5:74:de:
         a7:a7:37:d4:a8:9b:9d:09:80:ff:ff:1f:09:21:f2:40:4d:86:
         09:86:b7:19:da:19:45:e0:9b:19:ca:a5:0b:fc:72:65:9b:d4:
         f3:e7:59:4c:f0:ec:29:c1:a4:39:f0:5b:ce:37:c6:9b:ee:4c:
         aa:72:7a:37:f0:de:dd:b6:ba:d2:64:c9:66:32:0c:2b:1a:b6:
         c8:2a:9d:98:39:2f:48:61:31:16:91:2d:41:39:13:19:9b:2a:
         e7:ad:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:33:18 2026 by rpki-client