Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          TEWCZ04tkpg40VzVdQqvEdcSm4zu2DIf+TFHKGtWrKs=
Subject key identifier:   ED:DD:66:63:C1:25:38:2D:0D:0A:B2:9B:0E:9B:41:3E:B7:19:E8:A5
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       01A0DEAA3ED8C460A5FB373D10238CB3A2E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          1AAA
Signing time:             Sat 26 Sep 2026 17:01:34 +0000
Manifest this update:     Sat 26 Sep 2026 17:01:34 +0000
Manifest next update:     Sun 27 Sep 2026 17:01:34 +0000
Files and hashes:         1: 6nu1OXtk7kpMQlaYK9eE_KRKv_8.roa (hash: wI/dM+o6nDmiOXGvtoGjVjdd+0fyCUU9tuBohCftX8M=)
                          2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: NvZ70Yhn5j56ucRO4txbtDiXmO68QTE4GaauOYIMzAg=)
                          3: Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa (hash: PlWjmtPxw4OkvYH5bNtiXs3BOmA0kF3dQLpadBG2s+E=)
                          4: GaY0PBVBeo4KpiNFKZ9BeK4puOg.roa (hash: kSV2htK/TB9FGgHOzLvBWeHTLFTLf67Ynu1IuSCMkQQ=)
                          5: cjcmiOtDDlTjyYQyKCJamvURnkg.roa (hash: kI1yDYXFOnMe/2BdFboj81gzmTgi8ptrjeCtHHILCuc=)
                          6: l2FIOzPFvXObRwUNiGKUwkx8yng.roa (hash: U27wT6U0NEvNHvjZg6ZUfLZqVxl9USYItoeoVAzNuao=)
                          7: wdNyk0cj7ZXHBOyRtNKSRHIMVM4.roa (hash: oARchr96uMH1VEdClz/RFIsJnl10GfEYjwsXH9UCt0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:aa:3e:d8:c4:60:a5:fb:37:3d:10:23:8c:b3:a2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Sep 26 17:01:34 2026 GMT
            Not After : Sep 27 17:01:34 2026 GMT
        Subject: CN=eddd6663c125382d0d0ab29b0e9b413eb719e8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:ee:b2:56:df:83:3c:7c:05:43:56:02:84:
                    e5:94:2d:2d:98:2f:19:2e:19:56:e3:d8:d4:ab:31:
                    f6:09:56:72:96:3a:bd:b7:41:7b:d5:8c:16:f4:43:
                    56:a5:4d:8e:23:e6:fb:90:43:93:37:a4:8c:03:ef:
                    71:ad:26:45:0a:7f:94:a7:96:1b:fc:6b:8d:fb:27:
                    d1:b0:e6:e4:1e:51:7d:f6:cc:89:79:40:a5:44:28:
                    f6:57:79:54:a5:29:58:a4:2f:7e:b3:de:8d:45:b1:
                    56:0b:d8:38:ff:92:5d:ac:ab:55:50:4a:68:5b:a0:
                    82:df:81:13:06:8e:e0:b1:ff:ef:ce:3f:0c:78:3c:
                    97:a2:fa:14:25:ab:5d:94:7d:2d:c9:91:76:d9:49:
                    51:e8:2f:aa:2c:12:01:5a:2e:c8:b6:b4:31:75:c3:
                    9e:53:27:3b:46:ba:92:a4:57:34:85:9e:15:eb:ad:
                    02:1e:79:90:92:2f:38:e3:19:3f:9a:dd:03:f3:ed:
                    22:b7:74:41:3a:24:e5:25:16:0c:ab:fd:2b:1a:77:
                    85:61:f3:88:df:fc:f2:92:45:02:ca:2c:72:52:22:
                    68:16:02:5d:16:01:00:82:3b:da:64:9a:61:e1:c9:
                    7d:84:29:3f:50:1f:6f:cb:24:e3:f8:2e:38:91:74:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DD:66:63:C1:25:38:2D:0D:0A:B2:9B:0E:9B:41:3E:B7:19:E8:A5
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:10:73:03:ac:23:f2:b2:11:80:d2:ba:53:af:6e:d5:52:8c:
         a8:6f:9e:71:12:4b:2d:88:1e:4d:44:ea:13:49:2e:ab:27:ca:
         77:73:44:89:bd:d7:67:7f:56:8a:ef:e0:e3:60:1c:6e:ab:ad:
         12:b5:31:a0:c1:3b:a1:17:c6:1d:b2:ee:a7:28:93:c2:0d:a2:
         97:5d:35:66:e3:b9:4e:7f:ec:a2:90:f5:2d:ff:2e:60:1d:1a:
         e4:6d:58:31:c6:e0:e2:28:ba:d3:2b:0d:ee:e9:23:16:27:e5:
         3f:21:64:ad:e1:ca:82:16:73:6a:11:e3:34:67:ce:22:8e:1b:
         d0:bf:59:16:03:7e:38:05:24:5b:35:03:dd:e5:9a:9d:59:0b:
         cd:af:20:be:6a:74:5e:83:6a:48:2d:fb:a1:29:50:73:41:53:
         96:0e:3a:50:83:82:76:89:ab:e2:cf:aa:31:75:1e:92:8e:bf:
         4c:41:0c:63:ea:f2:78:bf:fc:06:97:4c:db:27:ce:b7:c0:7f:
         1a:a1:90:26:ea:3c:a1:40:ab:fb:73:26:6b:d2:21:94:1e:72:
         3a:53:1e:f2:f2:e8:0a:16:20:d2:29:a3:4a:f2:6f:af:66:17:
         85:47:19:44:54:ca:1d:96:12:7a:bb:9d:88:96:4a:33:70:b0:
         bd:2c:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:24:27 2026 by rpki-client