Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File:                     9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier:          vRIc8NdJlUIimWCrX9Mq2V2JdxABfFaeUz7pPIgs4cI=
Subject key identifier:   93:D3:12:4A:72:96:BE:88:51:00:DE:CF:01:95:DA:15:1D:40:12:A3
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       01A0C9A2275A388AE24E5ECFFF050945E197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number:          1A70
Signing time:             Tue 22 Sep 2026 15:00:42 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:42 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:42 +0000
Files and hashes:         1: 1JViNUEn6ga0QROJtxU4AEvMLww.roa (hash: jcckW1pekqq2a3ZEiyHcZr/yXCAySkb6WGxv2ggL9FI=)
                          2: 5c-tVeqgckJuAp6JbI43ZWb85Ik.roa (hash: cjN5erR2DEEsrEuY7GbmW+pLwmDRQL+9OgSiLHhDtIc=)
                          3: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: veWqQOQZs5N/QOmV1kjdiI8Ve7GCqXPw95E/EL0v4cU=)
                          4: SiBbiHVr7AC0u90Fwok04bc86Is.roa (hash: IBa2+mQ/TjNwKvca48jtPUnqiSXDlYjx7SDm3vYP5Ys=)
                          5: YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa (hash: m/hv4iobL1Tq4Hnl7IKJyfEevy78U6kNT70maANZhgM=)
                          6: i_WQhoivfiPNt_r8E0ASaD2knr0.roa (hash: ZsmBZD3QOznmcRlV4BtsmhxZ3ocoJk7WQB1P/qL5Ad0=)
                          7: zRYCcQ03Zo7Mtjwf5o0jfcWViDY.roa (hash: hObMfSwMh57HZlCx8OTlbluNMpET5Cy14GAtqwnhGDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:27:5a:38:8a:e2:4e:5e:cf:ff:05:09:45:e1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Sep 22 15:00:42 2026 GMT
            Not After : Sep 23 15:00:42 2026 GMT
        Subject: CN=93d3124a7296be885100decf0195da151d4012a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:44:c4:67:a6:ae:24:b2:6c:72:b0:ed:b7:
                    99:d7:e1:e2:63:7a:ea:09:5e:56:17:59:5c:a9:5b:
                    f6:b2:3a:44:81:04:32:f2:c3:a3:15:41:e1:5e:40:
                    bc:70:fd:4f:32:da:b8:87:b7:de:1d:23:a8:9d:1b:
                    63:fe:99:84:32:0a:0c:6d:41:92:0d:a6:96:fb:18:
                    05:f4:23:07:58:0e:e5:90:21:93:4a:6a:9b:01:d8:
                    f0:1c:e0:b2:be:11:02:a6:e4:55:1d:b2:e5:38:97:
                    1c:06:50:c5:39:2e:91:23:46:46:9e:9e:70:71:e3:
                    5a:b1:08:24:b7:02:e2:b8:32:19:5b:01:86:c1:9c:
                    d0:ef:64:02:44:06:6d:28:71:fb:37:1c:2e:d6:3c:
                    7c:9e:f2:8d:2f:34:07:7d:44:b1:b4:ab:ff:d7:1e:
                    6f:2f:77:19:35:ba:e2:02:dc:ce:7f:44:3a:c6:bf:
                    79:4e:19:9a:22:8b:d8:ad:44:e8:64:35:68:d4:76:
                    65:3f:27:97:91:56:8e:3c:a6:84:1a:b2:90:6f:09:
                    dd:de:50:80:41:b3:dc:e2:25:c2:1a:39:8c:9c:57:
                    10:49:51:c0:e1:74:6a:1b:d2:0a:b9:61:67:b0:3a:
                    f2:a1:9b:1d:4d:9a:09:82:62:a4:cc:e3:cd:ec:77:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D3:12:4A:72:96:BE:88:51:00:DE:CF:01:95:DA:15:1D:40:12:A3
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:74:15:bb:10:f1:7a:7f:6e:b8:ce:85:3c:ee:3b:e3:ed:62:
         8f:14:fe:6f:e1:cd:d2:d4:20:43:1a:26:c7:59:1d:21:e0:44:
         27:42:d7:66:f1:37:5a:ff:06:24:0e:9b:65:64:50:9b:c9:b7:
         85:d9:dc:9d:71:04:d6:f0:51:f1:fa:b7:b2:5e:13:f9:24:f9:
         44:ab:33:42:97:66:72:10:a0:6e:8e:fb:3a:10:57:a6:b8:74:
         80:fd:d4:c3:1a:8a:0e:cd:53:75:7f:e2:b0:30:1e:2e:e3:91:
         c4:4e:a4:bd:75:1e:85:f3:db:e1:f5:8d:d7:c2:9e:29:59:06:
         3b:2d:d2:9d:29:64:29:0a:0e:d2:c4:fd:6f:22:68:4b:6a:f3:
         0c:d7:f0:aa:50:6d:ca:a5:82:81:38:6f:f6:9a:9f:8b:47:d7:
         f3:02:19:aa:24:b6:5c:3a:38:08:77:44:a1:c3:42:15:60:05:
         fe:99:19:41:3d:c5:a0:ef:ea:61:88:24:af:18:29:6e:78:2a:
         ae:a2:ee:15:e6:19:60:ed:2c:8c:dd:0d:ce:d7:04:a3:ec:80:
         e2:ce:fc:90:3c:6e:1f:4f:98:a2:ab:1d:bf:22:e8:f8:08:5a:
         8c:b1:cc:07:48:cb:76:93:6b:28:fd:d1:65:b3:6d:9e:24:41:
         11:09:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:19:14 2026 by rpki-client