Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File:                     m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier:          yQOHSkDeSyt60nZWX71tpIJnyKGyE7lnKNmX2IVNlU4=
Subject key identifier:   D2:39:F6:25:17:F0:66:05:78:1B:AC:0E:42:87:09:79:40:16:12:6B
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer:       /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial:       01A0F15545E61A2EB49B23B3EE6B3D3D784C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number:          0212
Signing time:             Wed 30 Sep 2026 08:01:32 +0000
Manifest this update:     Wed 30 Sep 2026 08:01:32 +0000
Manifest next update:     Thu 01 Oct 2026 08:01:32 +0000
Files and hashes:         1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: eZ+7Rbs28ye4GXB23EEFJTQlwz91pn5xM9leyf4hAoM=)
                          2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 08:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:55:45:e6:1a:2e:b4:9b:23:b3:ee:6b:3d:3d:78:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
        Validity
            Not Before: Sep 30 08:01:32 2026 GMT
            Not After : Oct  1 08:01:32 2026 GMT
        Subject: CN=d239f62517f06605781bac0e428709794016126b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:19:d7:6c:00:a4:d3:f0:72:60:c8:0e:fd:
                    69:70:70:f1:f4:ab:b0:34:8e:9e:f9:0d:56:5e:9b:
                    34:3e:33:7d:a0:e4:d5:e4:6d:f9:73:34:73:79:0c:
                    5f:73:b6:76:1c:5f:92:f4:84:cd:80:4e:d4:9f:e1:
                    d3:0c:97:9a:78:15:8d:b3:d0:05:3b:64:d9:85:d9:
                    9b:a5:3c:42:a0:8b:59:36:21:a0:42:40:54:c6:cc:
                    d2:2a:af:9e:a8:17:2d:fd:68:3b:cd:12:f0:66:5d:
                    3f:05:31:85:5c:11:5e:7a:69:3f:29:dd:99:fc:c1:
                    4a:66:c2:f7:98:9d:e8:d8:d5:83:01:e6:63:5f:f1:
                    51:7f:f9:55:4f:24:48:a1:d3:d7:8d:f5:ef:4b:cd:
                    7f:ce:c3:bf:3c:48:ab:9e:a8:55:ef:7f:59:cb:85:
                    fb:0e:36:b1:f9:55:47:bf:e1:e8:04:00:c5:04:43:
                    0b:49:93:dc:20:32:b5:8e:50:46:ee:ed:f3:c6:c2:
                    35:5a:75:04:92:11:5e:29:b8:79:e6:bc:62:05:cd:
                    6e:25:a9:26:e8:20:e7:7c:15:b9:d8:7b:09:25:e4:
                    84:7b:1f:57:fc:d9:c9:6e:f3:90:ba:b1:27:4c:f5:
                    21:d0:35:87:fe:e6:64:20:03:cd:c8:57:2f:51:4f:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:F6:25:17:F0:66:05:78:1B:AC:0E:42:87:09:79:40:16:12:6B
            X509v3 Authority Key Identifier:
                keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ed:92:f0:9b:e6:24:6e:e2:e5:d7:ba:79:0b:fd:b4:25:7a:
         ff:53:32:ad:29:da:5e:22:af:d3:9b:50:74:e4:01:22:3c:1c:
         34:3f:35:40:5e:4b:44:c4:c0:e3:83:d3:d4:e0:82:5b:b1:03:
         3a:21:78:04:95:a1:f4:61:8e:66:a2:95:47:43:4a:bb:49:e7:
         b8:a8:c3:e0:07:4d:ed:70:6f:02:f9:48:4a:69:10:7d:5d:f9:
         13:78:09:48:4a:cf:7d:e3:f3:61:81:48:b0:1b:c2:3f:8f:5a:
         c4:ba:8e:bb:65:b1:93:9b:a2:02:b9:4c:83:d1:d1:33:67:45:
         16:7c:5a:5f:d0:71:ae:d2:fd:54:3b:62:34:1c:f8:31:cb:94:
         70:27:7c:8b:f9:0a:0b:81:bf:32:6d:5b:3d:87:15:44:10:ab:
         9f:91:a6:f5:f4:cd:df:85:2d:8f:00:1c:b4:1c:e9:fd:89:ab:
         db:4d:99:44:68:b7:9f:0d:7f:a7:3f:9d:27:3d:c8:b0:d0:27:
         f0:70:54:63:3c:bd:32:7d:0a:b4:a9:81:db:ce:7a:02:2b:8c:
         93:4a:c4:db:1a:37:27:39:2e:16:bc:74:16:54:20:c1:c3:21:
         a7:4a:5a:d2:f4:60:28:e8:56:aa:ec:38:c9:27:47:62:b3:20:
         4e:00:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:11:29 2026 by rpki-client