Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
File:                     9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json)
Hash identifier:          uhBAoixXlX0wO4dvg3bYFFci4AQRbfyA6SuixGRlG6Y=
Subject key identifier:   B7:53:56:57:5E:87:56:38:03:77:4A:E6:EF:7B:F2:6E:E2:81:EA:55
Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
Certificate issuer:       /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Certificate serial:       01A120C07C82724EC8BE30724C109A9EEE5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
Manifest number:          0981
Signing time:             Fri 09 Oct 2026 13:00:47 +0000
Manifest this update:     Fri 09 Oct 2026 13:00:47 +0000
Manifest next update:     Sat 10 Oct 2026 13:00:47 +0000
Files and hashes:         1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: nfdnWfCLobiE9zoJQz+64NJA9RFcm0hD4h4pk2s2ZZA=)
                          2: PYpH8aQrBxgmiCTPPp0V-EcnxfE.roa (hash: TZmRjK93W2lQuniNqsjJViZK/7sITb6I/CE3q5KADNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:c0:7c:82:72:4e:c8:be:30:72:4c:10:9a:9e:ee:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
        Validity
            Not Before: Oct  9 13:00:47 2026 GMT
            Not After : Oct 10 13:00:47 2026 GMT
        Subject: CN=b75356575e87563803774ae6ef7bf26ee281ea55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:25:03:15:80:9f:10:80:3b:67:9a:29:c2:
                    69:f4:ce:54:d8:e1:52:2c:26:ca:4a:47:a6:d6:72:
                    ce:87:b7:79:ea:70:50:01:71:56:81:4c:02:30:be:
                    67:4c:c1:3c:eb:4f:f1:a6:57:c0:35:06:24:e8:85:
                    87:7f:d1:93:a2:28:66:7b:4d:dd:2d:11:0a:ff:53:
                    6d:c4:8e:35:c5:1a:76:68:e8:51:ba:3c:87:36:0e:
                    46:e0:55:0e:92:52:bd:92:46:ac:89:7a:61:9e:a9:
                    d5:f0:af:fc:1b:00:c0:03:5f:d7:f4:2c:13:ca:1a:
                    14:a0:ec:8c:16:5e:54:ab:95:37:9c:c1:29:1b:68:
                    30:b8:c3:b1:05:35:15:5f:3c:da:8c:00:a5:a5:48:
                    a1:40:18:16:11:bd:0c:48:87:c6:22:24:20:cc:34:
                    9e:0f:ca:96:72:e1:63:15:0d:c6:2b:4c:09:28:92:
                    f5:ee:72:8c:30:06:56:6c:5b:19:45:85:2f:ce:13:
                    38:1a:8d:23:dd:94:cd:e4:7a:ec:82:2d:08:90:86:
                    81:73:8e:58:22:93:0d:a0:85:17:2d:87:f9:4f:b2:
                    41:0a:62:2f:0a:f1:31:73:db:c5:ba:ee:dc:18:4b:
                    e3:d1:ff:44:6b:25:5c:e1:5d:c5:55:4d:65:7b:81:
                    80:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:53:56:57:5E:87:56:38:03:77:4A:E6:EF:7B:F2:6E:E2:81:EA:55
            X509v3 Authority Key Identifier:
                keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:bf:16:07:4b:1c:fb:d1:ea:bb:a9:37:80:d2:90:47:74:
         4f:46:2d:53:d8:d5:68:23:a3:88:55:c2:a2:06:09:0e:55:69:
         65:21:5a:36:0f:75:53:02:d4:69:63:19:7d:1c:16:dc:f8:52:
         1a:f4:59:85:69:ec:fa:68:4c:ea:e5:9f:05:94:11:d1:64:bb:
         a7:c9:69:2e:23:82:f4:d5:3f:b0:14:0a:8b:90:a7:c5:20:5f:
         94:bc:b3:0f:9f:9e:e8:44:f6:b7:98:52:df:5b:53:5e:b9:6b:
         e8:9f:c2:28:59:ef:f3:15:31:b1:c9:db:02:44:4b:a0:b4:e7:
         78:fe:cd:21:83:d5:8e:4b:73:42:78:c1:1a:87:fa:66:f4:6b:
         0b:a4:09:b3:97:92:2f:c8:7f:50:96:b7:8c:f5:d2:be:d9:43:
         d1:ec:07:74:56:07:0d:03:7b:e2:d9:d9:72:22:4a:01:23:34:
         d1:ea:79:2d:2d:0a:d9:99:08:93:ea:c1:d1:73:ec:c7:50:71:
         4d:59:dd:62:36:1e:9f:58:6b:3a:90:16:72:d7:bc:bb:5b:f4:
         79:8a:14:c7:2a:a9:4f:a9:00:a3:96:64:c3:93:67:ad:a1:d5:
         04:47:1b:e1:fb:08:1a:96:fe:cd:e4:cb:1c:a3:2e:c5:18:e9:
         fb:c4:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:23:38 2026 by rpki-client