Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          AnOeMQNCADIc520kkiD7dHlhH4ukTSJN7ddQ+sZWUEg=
Subject key identifier:   B6:DB:92:D1:54:C7:38:F8:C1:A1:D0:35:FE:3F:BE:8C:3E:E1:28:1D
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       01A0DFBC963DD109DC8E42D14FD8F5E3DF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          09CF
Signing time:             Sat 26 Sep 2026 22:01:13 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:13 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:13 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: Y5i6P9GeJE7dhrkOr4aXNFgPcmPJuLFCVoOyCqDb1Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:96:3d:d1:09:dc:8e:42:d1:4f:d8:f5:e3:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: Sep 26 22:01:13 2026 GMT
            Not After : Sep 27 22:01:13 2026 GMT
        Subject: CN=b6db92d154c738f8c1a1d035fe3fbe8c3ee1281d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:b7:5b:27:e4:9a:91:be:d0:36:0e:60:d7:
                    61:c1:b5:91:89:16:25:0b:04:5f:f4:1f:c2:f4:d4:
                    be:89:20:7b:19:0f:9e:11:4c:12:6a:a6:45:5f:20:
                    fd:4e:89:3e:53:0a:52:a9:0d:1a:c8:f4:03:7b:ec:
                    8f:02:3e:17:78:e0:71:e3:4f:0b:07:19:1a:0f:a1:
                    a9:bb:09:36:3f:c7:39:b8:94:94:65:db:42:bc:ba:
                    3e:72:82:60:02:32:ec:76:25:55:43:85:3f:f8:30:
                    48:86:fb:ac:7c:10:af:26:46:16:89:19:c3:ad:a9:
                    f7:a4:ae:52:d0:8b:30:df:2e:77:3d:66:b2:c2:f8:
                    4f:30:e8:68:1a:d2:de:f1:f0:2e:7c:12:56:61:96:
                    d2:19:7b:59:f7:dd:a2:50:82:a4:07:41:8a:e8:5f:
                    fe:17:88:6e:ab:21:d8:13:42:94:98:1f:d1:12:f5:
                    12:41:13:0c:6d:7e:b6:4c:02:d6:a9:ad:f2:0f:cf:
                    c4:0c:75:4b:ff:04:5a:99:11:14:98:3f:20:fa:b3:
                    3f:60:89:d4:52:ea:10:55:4e:28:49:eb:5e:e7:ba:
                    50:9f:8b:01:ee:0f:b8:3d:38:92:0f:40:07:5b:0a:
                    bd:c2:17:a4:72:07:ad:9e:6a:26:cf:8c:c6:7c:13:
                    af:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DB:92:D1:54:C7:38:F8:C1:A1:D0:35:FE:3F:BE:8C:3E:E1:28:1D
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:33:72:d3:ca:f0:42:a9:f9:0b:b9:b1:cc:2a:45:c5:69:ff:
         5d:6c:64:e5:27:23:6c:0a:89:17:32:7e:5f:6c:5f:3b:59:98:
         58:ef:3b:5d:40:1f:45:0d:0a:2c:24:64:51:47:18:13:91:20:
         c7:9a:b1:3b:5a:1c:a4:78:8a:ff:88:dd:5c:8c:c0:43:f0:17:
         92:fc:e8:d6:33:6f:16:1a:8c:c1:86:34:86:ed:e6:01:6a:74:
         d6:2f:40:04:36:ce:c1:46:9e:48:95:b2:06:23:69:49:2e:72:
         8b:c6:92:86:06:bb:95:77:b2:ae:31:d2:c5:6e:6b:28:a8:e8:
         2a:e2:97:05:3c:2b:da:ac:bc:8e:8b:f0:5c:c2:ef:a7:9c:33:
         b5:52:2d:90:7a:be:4d:28:aa:3d:72:cc:e7:db:9b:4b:29:82:
         e1:be:52:94:8a:cf:c4:89:c2:82:6c:5f:51:0d:a7:e0:b1:38:
         ff:88:f2:60:c8:61:37:3f:6f:06:f3:3d:8a:10:fb:c8:f2:6e:
         e1:5c:b4:81:5f:39:fd:c7:85:af:2b:1b:d6:64:0d:49:b9:7c:
         ea:79:78:96:20:15:98:6a:36:b8:d1:85:97:47:0a:90:33:c2:
         d9:81:5d:2c:78:60:c6:e4:04:94:50:0f:ba:14:c8:5c:7f:f6:
         18:b8:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:15:20 2026 by rpki-client