Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File:                     0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier:          OduE+vTZ5I4IF748VMXnNqmg9usgoz2OFCToxvtssrs=
Subject key identifier:   4D:50:F9:5D:C7:24:EE:34:F0:E0:D6:9C:21:EA:4B:30:21:77:87:F3
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer:       /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial:       01A139DB87A697C405C230F7B486C10E07AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number:          1A9E
Signing time:             Wed 14 Oct 2026 10:00:50 +0000
Manifest this update:     Wed 14 Oct 2026 10:00:50 +0000
Manifest next update:     Thu 15 Oct 2026 10:00:50 +0000
Files and hashes:         1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: Hw30vKkNtHUER6AAxA9xT4FaWpDnIZJW9PJOa9o7EaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:db:87:a6:97:c4:05:c2:30:f7:b4:86:c1:0e:07:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
        Validity
            Not Before: Oct 14 10:00:50 2026 GMT
            Not After : Oct 15 10:00:50 2026 GMT
        Subject: CN=4d50f95dc724ee34f0e0d69c21ea4b30217787f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:36:9d:07:3c:93:91:52:9d:16:ed:4e:44:
                    be:ea:8a:a8:66:4b:2f:92:a0:61:2d:74:7a:11:2b:
                    3c:14:25:61:99:67:de:42:25:f1:4e:df:ed:d7:9f:
                    2e:d9:fd:4e:d0:53:bc:3a:3d:05:39:fb:c9:07:d4:
                    6c:f6:21:18:bc:77:86:24:a8:79:ea:f9:7f:f6:df:
                    b7:2b:72:f0:dc:c6:2d:1e:3f:59:4f:d5:c3:fa:89:
                    38:7e:eb:7f:04:a0:47:86:ab:ea:94:00:d7:dc:35:
                    80:56:66:1f:35:92:91:79:f0:96:d4:fc:84:7c:3a:
                    17:8a:ac:6d:56:88:22:95:a5:eb:5a:77:04:d9:96:
                    74:b6:09:54:e8:a4:7c:9e:82:a3:f9:3f:84:37:59:
                    ac:43:a4:34:56:ae:49:f3:e6:22:6b:bf:a4:c0:71:
                    43:20:ce:41:7f:5d:14:d2:5d:69:3f:ce:5d:13:98:
                    12:fa:80:b2:f6:63:a9:ce:df:8c:e3:53:fc:8c:40:
                    47:72:98:92:a8:a9:e8:7f:f1:a3:04:3e:19:43:0c:
                    0b:1e:d8:68:9c:36:ba:27:29:39:b2:bb:3c:99:f7:
                    08:5e:ed:21:78:47:03:0e:8d:c4:a3:34:99:9a:64:
                    4b:1c:dd:a0:a1:a6:be:bd:ca:77:31:bb:93:23:5f:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:50:F9:5D:C7:24:EE:34:F0:E0:D6:9C:21:EA:4B:30:21:77:87:F3
            X509v3 Authority Key Identifier:
                keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:11:fa:bb:bd:d8:72:76:62:e9:d1:5c:08:f3:c6:2c:98:1f:
         3a:f9:89:5a:ce:8f:92:65:3b:06:68:06:02:c5:8c:76:c5:36:
         59:66:b2:8c:90:6a:83:a6:84:61:c9:0c:12:e5:3e:dd:e9:19:
         24:69:57:a0:4f:b3:8c:ec:5d:a6:e0:50:1b:5e:15:67:3a:fc:
         ab:58:2d:99:ee:fc:0e:12:8b:92:d2:1a:95:89:57:c8:4f:03:
         a3:63:a2:be:74:b8:41:b1:1e:8d:42:e8:ca:bf:b0:18:4f:6a:
         7d:e3:2e:01:12:6d:2b:66:ed:7a:2d:44:82:15:8e:aa:7a:be:
         72:d1:6c:16:7d:0e:53:e9:85:e8:e6:cd:de:2d:62:c0:61:64:
         ff:92:a2:43:25:0a:10:93:5e:71:5e:08:b6:78:97:4d:83:01:
         f9:f4:b9:ca:a1:b7:a6:0f:24:0a:2f:22:b8:b2:fa:65:ea:96:
         70:79:88:dd:8f:28:9c:02:3f:d8:1e:69:a6:a2:17:83:76:7b:
         60:b1:c2:ff:b2:1d:ef:51:86:bb:20:2c:4e:96:72:ed:42:a0:
         b0:71:9a:4c:83:ae:db:9e:f9:e5:b6:ad:28:8c:3f:27:d2:34:
         c7:38:6b:28:c5:98:50:dd:d1:a7:88:e7:5a:1b:c3:6b:92:6f:
         6a:85:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:32:22 2026 by rpki-client