Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File:                     8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier:          4JaaAAPHWB84BNEg/JW0vpX1hENociwZKbIBMga63Gs=
Subject key identifier:   9D:AE:AF:26:7A:98:98:61:D3:C7:7A:86:DE:7E:17:A1:7B:B7:C5:EB
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       01A0D31598FDDD5E298AC016324B817E58A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number:          0EB9
Signing time:             Thu 24 Sep 2026 11:03:22 +0000
Manifest this update:     Thu 24 Sep 2026 11:03:22 +0000
Manifest next update:     Fri 25 Sep 2026 11:03:22 +0000
Files and hashes:         1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: dRphxR/LdfeGn1lOq1AM7SphfM5h9gh9vixRYhPez2Q=)
                          2: z6n92NIP1tvVgc0euBLMnBtSoZk.roa (hash: Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:15:98:fd:dd:5e:29:8a:c0:16:32:4b:81:7e:58:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: Sep 24 11:03:22 2026 GMT
            Not After : Sep 25 11:03:22 2026 GMT
        Subject: CN=9daeaf267a989861d3c77a86de7e17a17bb7c5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:2d:af:c7:3c:d6:ad:8d:19:e0:4d:a3:d1:
                    a3:0f:b3:37:ff:5a:9c:2a:3e:e5:9c:09:76:85:a3:
                    1a:43:1f:70:c9:b2:f4:59:ae:1a:c7:05:69:fb:be:
                    ca:35:2a:05:21:83:55:0a:e0:a5:05:67:be:54:c9:
                    e9:a5:d1:84:4b:8c:c1:e6:da:2e:ac:09:f4:2b:71:
                    32:2a:14:56:82:90:7b:11:56:96:20:f2:39:fd:e7:
                    9b:dd:21:02:cc:f3:65:b0:63:75:56:11:c8:ea:4e:
                    5e:e7:bc:fa:5c:c0:19:ef:f6:f3:fc:2d:85:2e:28:
                    f6:5c:2d:90:df:94:36:a0:29:0e:8d:b9:60:6e:d8:
                    a5:be:7c:d4:3f:fd:3e:15:a6:be:fd:55:83:57:fb:
                    5a:6d:36:a3:52:3a:85:c1:e3:63:f2:7e:2f:ee:52:
                    c1:1b:6f:c5:32:ac:71:73:89:b3:eb:77:18:60:60:
                    de:20:b9:a0:50:80:b4:2f:e0:c1:80:d5:0a:6f:a0:
                    96:74:8d:76:91:f1:8c:b2:77:a7:4d:06:52:d0:e9:
                    85:45:4f:6c:d5:a5:3e:1f:5c:fa:d9:b9:f6:50:10:
                    99:07:e4:5f:c8:59:ec:b0:81:8c:1c:cc:bf:58:4e:
                    bd:9b:45:6a:0a:34:95:de:59:f7:00:ec:fe:1c:4a:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:AF:26:7A:98:98:61:D3:C7:7A:86:DE:7E:17:A1:7B:B7:C5:EB
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:70:7e:9e:9a:58:80:e6:99:8f:6a:95:23:12:41:01:a8:7e:
         d0:34:6f:b3:0d:92:56:97:f8:a4:54:ee:43:58:aa:eb:82:1a:
         e4:20:aa:b4:2f:38:34:d3:a7:fa:b2:22:0b:b1:4f:51:30:1d:
         c3:6d:7d:e0:0e:45:df:d0:81:cc:78:b1:05:cc:22:fb:d4:4c:
         a6:83:9b:8e:24:6b:da:d4:31:6e:71:02:d3:c5:11:02:3e:7f:
         6c:a9:a9:5a:b0:eb:45:ec:76:75:3f:2d:97:b3:19:fa:96:ed:
         2a:54:90:05:f3:00:33:19:5b:49:1e:ad:ab:c5:f0:73:2e:a4:
         12:99:11:5a:68:f7:7a:6a:3e:a0:3a:09:d0:d3:ef:8d:f4:ce:
         1e:71:e2:0b:5d:78:25:25:0c:8a:15:e1:50:c9:6e:ef:4e:6d:
         c4:b4:0a:3a:ec:71:3c:86:e7:5c:26:92:fd:3f:bb:76:b4:4a:
         42:e7:eb:fe:a6:77:3a:f6:12:da:5d:7d:f9:cd:ec:d3:c0:5f:
         20:9e:0f:0d:2f:17:ed:5f:9b:db:4f:46:a5:7e:be:2c:af:1e:
         b8:de:e5:0f:2f:93:e6:7d:da:aa:41:44:79:d9:6c:2c:38:5e:
         15:c2:6e:02:0f:b3:35:10:4c:98:97:34:05:73:1a:ac:80:eb:
         30:ed:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:42:33 2026 by rpki-client