Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File:                     9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier:          K/5sqHVC5LmpeDTT8KSXLzpdg7PM+EAlH866SEn58Qc=
Subject key identifier:   90:DC:DE:E8:B9:E6:7E:0E:E4:87:D3:BA:B5:C4:7F:9D:C3:FD:5F:23
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer:       /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial:       01A0C143B54BD26FA22E9902D701EF80EF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number:          0A38
Signing time:             Mon 21 Sep 2026 00:00:35 +0000
Manifest this update:     Mon 21 Sep 2026 00:00:35 +0000
Manifest next update:     Tue 22 Sep 2026 00:00:35 +0000
Files and hashes:         1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: +s9/BxhvHRcG7wdIeU87WOJrO1m+u2pLIrBxRbjh5s4=)
                          2: U0VlaKKNtdOTOqK2MVcrObf1kHo.roa (hash: aj9GxjWDAWuJEL63II9rLgS5knljvCRB2AV58y//rLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:43:b5:4b:d2:6f:a2:2e:99:02:d7:01:ef:80:ef:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
        Validity
            Not Before: Sep 21 00:00:35 2026 GMT
            Not After : Sep 22 00:00:35 2026 GMT
        Subject: CN=90dcdee8b9e67e0ee487d3bab5c47f9dc3fd5f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:51:85:25:95:00:11:4d:25:42:00:67:fe:
                    85:92:ee:49:1a:6f:e8:2e:af:d4:73:13:37:aa:d8:
                    35:c9:0c:42:71:30:46:74:a6:fc:e4:c0:47:5d:e6:
                    8b:91:b8:94:73:49:21:14:8e:c1:87:d6:37:c4:6e:
                    2d:3a:4d:7d:94:28:bd:55:f2:33:47:e9:72:8a:9a:
                    f9:ed:d3:b7:df:91:bb:1c:2a:8a:e3:82:bc:fb:b6:
                    0a:03:69:17:9d:be:97:47:14:52:1e:0e:69:5b:23:
                    3b:e2:bf:1c:d1:41:c7:e6:cf:08:6c:f3:92:ad:8b:
                    7f:b3:30:6c:dc:8b:53:73:3a:6a:6d:ab:2a:e8:c8:
                    8a:5a:b3:40:d4:fc:67:e0:5a:db:ac:6a:02:18:6c:
                    ea:8b:c2:d0:28:a0:46:4b:f0:3e:55:d8:38:7a:40:
                    e3:e9:c9:ce:6b:fb:fa:7f:77:ec:79:66:e8:53:d3:
                    41:31:9b:0d:0f:26:f4:0b:1a:7d:82:78:6c:2d:de:
                    1d:0b:2b:56:1d:83:dc:e3:40:f8:64:27:cf:f1:a9:
                    4c:94:d8:50:6c:3d:e4:e7:bc:9f:d9:92:f9:34:d4:
                    1b:09:b1:77:df:ba:3b:a5:34:7f:2e:db:36:e2:8c:
                    10:d2:75:eb:f2:8a:ac:bd:6f:31:3b:c0:27:a4:46:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:DE:E8:B9:E6:7E:0E:E4:87:D3:BA:B5:C4:7F:9D:C3:FD:5F:23
            X509v3 Authority Key Identifier:
                keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3e:88:9d:9a:da:39:10:23:04:d5:fe:5a:67:bb:7c:6b:5a:
         f7:c0:67:79:66:b9:12:cf:51:4e:b1:97:ec:1d:1b:20:c6:fe:
         0d:76:95:db:57:94:28:e2:0b:c0:d9:99:7a:cf:19:a7:84:23:
         85:ea:b2:2d:81:36:f8:10:bc:ab:aa:3c:3a:8a:03:28:7c:0e:
         90:3d:a1:e5:31:fe:fd:0f:4d:76:71:f0:b0:8d:7a:9b:c9:ea:
         e8:4e:60:8f:73:1f:60:5c:db:85:47:a1:7a:a0:4d:0b:b5:3e:
         03:23:58:27:ad:77:5f:7b:19:29:7f:3e:b7:03:02:99:a2:1f:
         bd:20:09:a7:f4:c0:5b:4a:3a:b7:8d:d2:48:d1:a3:6f:91:32:
         27:bb:25:92:5e:9b:8c:2f:ed:f1:eb:c0:21:88:c8:7f:08:00:
         f4:ee:ba:de:cb:50:3d:37:b2:24:54:9a:ad:6e:9b:ba:e8:72:
         70:1a:5d:ed:1a:fe:c9:a1:66:6a:1d:bc:8f:6e:3a:2a:52:06:
         30:35:aa:ac:8c:ab:c9:ee:3e:79:92:16:0a:88:3e:17:36:16:
         5d:67:20:c8:cb:6d:fc:31:4c:c3:40:ff:db:62:d7:9f:a6:f6:
         d6:46:81:27:7d:e1:9a:d1:29:15:14:7d:5e:22:e8:9e:b8:b6:
         8c:6f:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:33:13 2026 by rpki-client