Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft
File:                     9p-l-dnGtwOCJB6WGgrglnJcD3c.mft (raw, json)
Hash identifier:          WjQHMLI1UlHXSLcxmkufRuRDUHlXxRx1clVDmDnQa84=
Subject key identifier:   5C:B0:E8:E7:84:08:48:B4:AE:68:66:A4:13:79:76:2A:AA:11:8E:21
Authority key identifier: F6:9F:A5:F9:D9:C6:B7:03:82:24:1E:96:1A:0A:E0:96:72:5C:0F:77
Certificate issuer:       /CN=f69fa5f9d9c6b70382241e961a0ae096725c0f77
Certificate serial:       01A130A1DE1B3D53550DDDB91DE1480F1061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p-l-dnGtwOCJB6WGgrglnJcD3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft
Manifest number:          01C7
Signing time:             Mon 12 Oct 2026 15:01:16 +0000
Manifest this update:     Mon 12 Oct 2026 15:01:16 +0000
Manifest next update:     Tue 13 Oct 2026 15:01:16 +0000
Files and hashes:         1: 9p-l-dnGtwOCJB6WGgrglnJcD3c.crl (hash: 7xv2N/qtNn29H+MsLfJyYXEM6m19nByAN00jeIY7KWc=)
                          2: HmlJTSh98j2b4r1IpFlj1CVeIc0.roa (hash: E16zHYKL/NoTKgyVCojIMSFHddr9iDrUl04ERlr6eDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p-l-dnGtwOCJB6WGgrglnJcD3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:a1:de:1b:3d:53:55:0d:dd:b9:1d:e1:48:0f:10:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69fa5f9d9c6b70382241e961a0ae096725c0f77
        Validity
            Not Before: Oct 12 15:01:16 2026 GMT
            Not After : Oct 13 15:01:16 2026 GMT
        Subject: CN=5cb0e8e7840848b4ae6866a41379762aaa118e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:d6:7f:2e:a2:ec:bb:b7:e6:1c:c9:57:ff:
                    79:6b:46:9a:4c:48:64:cf:2c:66:5f:55:59:19:37:
                    6e:05:f0:ac:02:be:34:72:bc:3f:2f:04:cf:2f:5f:
                    b8:e2:69:94:ca:96:c8:71:2e:21:5b:31:22:c5:b3:
                    ee:88:a4:c3:0e:3c:a8:07:a0:5a:32:33:c0:85:28:
                    c8:fa:88:ec:85:ec:4d:95:54:06:c4:a1:9f:2b:68:
                    ec:3c:b7:e8:f1:72:03:10:1c:98:d1:2c:d9:41:98:
                    69:3e:80:98:e1:26:4c:0f:ac:aa:f7:84:79:42:dd:
                    db:15:c0:d7:03:82:9e:63:32:b2:8c:05:50:73:f9:
                    9b:e0:2f:c3:86:58:df:d3:c9:56:f2:77:a9:ca:51:
                    3d:1a:58:14:6e:ce:95:d9:2e:9e:c1:2d:57:14:b6:
                    14:8f:da:93:5b:4e:64:28:c9:86:43:31:00:cc:59:
                    be:ae:cc:5f:cc:47:3b:18:05:ff:d3:7d:c3:2b:00:
                    46:22:38:e0:a4:a3:e5:01:c5:2b:98:52:cd:dc:1b:
                    76:08:ec:16:76:1b:7f:e3:3a:19:fa:4d:14:df:04:
                    10:81:69:ad:52:4e:5c:35:35:41:ad:8b:8c:25:90:
                    07:82:7f:f2:22:14:0c:9d:6f:24:d6:52:1d:33:ab:
                    74:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B0:E8:E7:84:08:48:B4:AE:68:66:A4:13:79:76:2A:AA:11:8E:21
            X509v3 Authority Key Identifier:
                keyid:F6:9F:A5:F9:D9:C6:B7:03:82:24:1E:96:1A:0A:E0:96:72:5C:0F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-l-dnGtwOCJB6WGgrglnJcD3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:42:b7:f6:f6:4b:f3:4f:be:34:6f:1e:de:03:04:3c:fb:dd:
         52:e2:6a:de:57:cd:df:6f:00:29:0e:73:64:8a:ae:1e:eb:00:
         dc:6c:ba:89:7c:b4:55:b3:d3:02:fc:18:62:10:39:58:81:c0:
         35:fd:a6:1b:e7:ff:0b:da:67:a6:2f:cc:23:07:3f:a2:17:74:
         60:f0:8f:41:68:4c:65:55:86:e8:40:aa:4e:36:64:a1:3c:bc:
         03:94:34:77:64:74:d4:f7:63:b0:b0:f2:0d:8b:e4:80:a4:fb:
         0b:98:e5:4e:7a:88:bc:6d:65:cb:b2:cb:fa:7a:95:f5:61:74:
         84:99:3e:a8:f1:3a:61:f3:ff:31:c3:31:67:5f:c4:44:ca:e9:
         e5:43:5b:28:6b:f3:7e:94:c6:bb:9c:12:9f:48:02:c2:bd:24:
         d6:ad:a0:89:91:25:1a:f0:a4:57:bd:82:e8:d7:e8:36:52:bc:
         d3:37:d2:f0:67:cd:37:b3:52:c1:b8:52:75:ff:18:a6:07:1d:
         f2:a5:0c:03:06:02:53:cb:63:36:74:71:cb:1b:01:b1:27:3c:
         de:42:93:ed:31:07:42:32:97:f0:d4:f0:cf:c1:57:d9:d0:0c:
         4e:a6:82:1e:fc:5d:28:59:4f:96:04:99:17:d7:e7:01:07:ca:
         48:e0:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:28:06 2026 by rpki-client