Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File:                     y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier:          56HibpappX3sIq7EKPrgmAtBXUOS7+hhJBnqTHA8v3g=
Subject key identifier:   52:D7:B4:2F:E3:B7:74:76:C2:E0:ED:30:70:BD:F3:60:FD:B5:99:4C
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer:       /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial:       01A0C17AE811BE354DD1442ABB4A46F37FDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number:          0B92
Signing time:             Mon 21 Sep 2026 01:00:52 +0000
Manifest this update:     Mon 21 Sep 2026 01:00:52 +0000
Manifest next update:     Tue 22 Sep 2026 01:00:52 +0000
Files and hashes:         1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
                          2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: Qw1zv+TrhmsV/oni84WpRV11quAVWPUynsyIIBmtH/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:7a:e8:11:be:35:4d:d1:44:2a:bb:4a:46:f3:7f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
        Validity
            Not Before: Sep 21 01:00:52 2026 GMT
            Not After : Sep 22 01:00:52 2026 GMT
        Subject: CN=52d7b42fe3b77476c2e0ed3070bdf360fdb5994c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:d8:e0:0d:91:5f:90:a9:12:af:71:16:ca:
                    28:a4:ad:ea:f5:f2:f8:92:40:61:c0:fa:b4:3d:87:
                    12:53:be:0d:63:5f:4d:3a:f6:bf:c1:f4:1c:b2:df:
                    c2:96:10:b5:64:c8:29:e5:9c:f9:5a:45:ca:0f:a8:
                    b9:83:4c:fc:89:c6:02:73:83:ef:d5:46:5d:b4:58:
                    04:0f:11:b2:bc:e1:85:47:37:9f:e4:8e:f0:e6:80:
                    1c:0a:e7:c5:b6:4c:4c:d2:4c:32:ee:4d:17:09:61:
                    c1:24:46:a3:2d:2d:1d:9e:84:c7:e7:8c:93:af:22:
                    bc:00:59:af:23:80:4d:ce:16:e5:56:5f:53:80:06:
                    0a:03:0a:2c:4c:e2:92:50:b4:85:e0:db:31:fa:b7:
                    3e:64:3a:07:5e:d8:12:47:c0:c4:96:fd:fa:58:c7:
                    a0:17:32:20:2c:1d:e7:bc:c3:ad:71:46:7d:b2:40:
                    96:48:2e:28:53:46:8c:3e:de:0e:18:0b:1b:7b:7d:
                    5c:ca:94:92:4d:c2:0d:ad:7e:db:e5:ba:c3:1e:b2:
                    31:2d:20:0a:cb:af:07:dc:60:17:ce:66:40:13:dc:
                    da:58:06:02:e7:01:94:da:1e:85:a5:6c:a7:cc:fe:
                    08:3e:0e:54:a5:b3:c9:0a:1f:c3:5b:80:af:dc:6f:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D7:B4:2F:E3:B7:74:76:C2:E0:ED:30:70:BD:F3:60:FD:B5:99:4C
            X509v3 Authority Key Identifier:
                keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:b1:3b:1d:6d:49:dc:53:d7:37:49:93:69:9a:13:e8:d4:
         1b:b3:02:88:4d:e9:98:0f:d5:f5:84:63:5f:2a:1c:1f:ad:81:
         e0:5c:38:60:be:14:d5:25:6d:39:e4:02:1c:cc:92:26:5e:dd:
         be:a0:cb:ff:42:77:4b:bc:fa:05:1a:b0:ea:6d:d2:42:dc:13:
         65:16:3a:5a:a1:13:a2:8d:30:a4:b5:ef:55:48:45:fa:47:34:
         c7:f4:14:77:72:e6:4f:82:4b:3a:e6:c9:ab:24:76:1e:62:9f:
         57:6a:a0:fd:ab:a5:5e:4c:0f:71:c1:c9:1c:06:2b:6e:2e:4a:
         06:20:ef:a2:fb:93:4a:36:7d:c6:02:48:d6:39:8d:8b:64:6a:
         18:46:c3:6a:ee:fa:be:95:32:f0:90:55:81:e0:13:6e:6f:97:
         08:3c:7e:7f:f1:ef:02:17:5d:2f:20:97:c1:14:ba:42:6f:57:
         22:d3:18:b2:7e:c8:ac:00:7a:ad:cc:9e:68:26:aa:a2:28:61:
         f6:88:3f:bc:ff:3f:f2:95:52:b3:33:d5:6f:26:e5:6f:c3:b9:
         fd:f6:a6:fc:10:fd:16:00:72:ad:c1:e5:34:67:7d:c0:db:82:
         a3:d8:2f:c8:85:be:ec:81:07:24:4d:d9:57:d1:4b:7a:c7:db:
         02:13:e2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:54:31 2026 by rpki-client