Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File:                     9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier:          Hd4GOUxpVFVsYEjN52HCF6Dnj/csxpQMQuqlUuEJdOo=
Subject key identifier:   6D:23:27:25:0D:C3:71:CF:7F:DF:20:EB:0C:C0:82:F1:86:C4:40:D5
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer:       /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial:       01A0C33229664CD170C41A4E841559F704E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number:          055D
Signing time:             Mon 21 Sep 2026 09:00:39 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:39 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:39 +0000
Files and hashes:         1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: pv66+bG7XWyVpkcHuO7aymw7q9GjrZDvRRGsCJFqiss=)
                          2: lGujuiPQvSmFHQAKi24Db9fPtPs.roa (hash: yXgFWbLf2xOQ/uIv3drvR9A3/BacWeZUxwc8Zd5w1cI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:32:29:66:4c:d1:70:c4:1a:4e:84:15:59:f7:04:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
        Validity
            Not Before: Sep 21 09:00:39 2026 GMT
            Not After : Sep 22 09:00:39 2026 GMT
        Subject: CN=6d2327250dc371cf7fdf20eb0cc082f186c440d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:cc:af:7f:f6:91:c4:af:33:bc:91:86:e3:
                    da:cf:44:5b:5d:fd:8e:53:4b:fa:08:54:90:52:9f:
                    f6:44:b3:ee:91:22:3a:fe:b7:f2:8c:87:8a:fa:a7:
                    d7:08:75:52:39:8d:a1:5f:c3:fe:30:1d:14:27:19:
                    88:de:13:61:f1:ab:b7:09:2a:dd:8c:e5:27:fe:2c:
                    fe:bf:77:36:95:37:10:31:06:06:a9:fd:09:c5:d1:
                    bf:42:ef:2b:3c:c1:2b:d5:22:88:23:bc:bc:4b:49:
                    e0:8b:f8:9b:35:6c:91:26:7c:09:21:16:5c:05:5b:
                    a0:94:02:19:b9:e4:27:ed:25:6c:a3:90:88:75:bd:
                    f3:2e:f7:9c:50:dc:f7:69:7d:6e:07:51:5b:d0:b6:
                    e6:20:aa:1c:92:86:14:72:09:24:eb:5a:ac:bb:9d:
                    b0:da:4e:d8:0b:28:f0:3a:41:4d:d0:54:ac:56:47:
                    c3:38:a0:96:3c:a8:54:fb:24:40:cb:c5:c1:ba:28:
                    dc:fb:74:87:8d:a6:91:47:fb:a0:8a:c1:a4:fe:bd:
                    c0:44:93:c6:6f:3a:8c:45:4d:c8:ff:63:09:75:4d:
                    50:a4:71:b5:31:a7:68:f8:a8:e2:ea:af:f7:13:69:
                    4d:89:c5:c9:c8:55:c6:24:86:f6:6c:36:4b:16:98:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:27:25:0D:C3:71:CF:7F:DF:20:EB:0C:C0:82:F1:86:C4:40:D5
            X509v3 Authority Key Identifier:
                keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f9:d7:5f:ea:03:c9:83:0e:b6:85:55:29:bf:8f:58:e4:80:
         88:c3:9f:18:6b:e5:96:5d:a2:67:91:41:3c:08:fc:de:90:35:
         ca:6e:44:15:82:41:61:35:e7:15:38:cd:f1:2e:17:04:10:18:
         12:16:65:30:c4:75:79:66:cf:db:bb:3f:c6:8c:3a:5c:6e:f2:
         00:81:11:76:88:e1:dd:f8:a8:26:0d:41:0d:c9:a4:c6:19:aa:
         29:e3:8c:6f:72:b0:a3:ed:88:5a:a1:f0:2c:a8:b4:44:4b:16:
         cb:cd:5f:1e:17:b5:1f:83:3a:ba:af:43:f4:de:f7:16:0d:14:
         e7:d8:d1:d0:b4:89:ed:c2:e2:f1:4a:86:0b:dd:35:4a:6f:ea:
         f0:68:5d:32:1b:fe:49:b8:04:8e:fb:97:05:10:83:0c:6d:25:
         e7:40:64:95:3e:bb:90:c6:93:9d:3f:6b:d6:50:da:77:c1:75:
         d7:8c:20:ac:93:36:6d:09:47:a5:40:ff:97:4e:41:85:bb:39:
         26:8b:38:2b:81:90:90:89:63:03:5f:0a:43:d0:7a:9b:05:ed:
         7d:24:08:e4:07:20:4d:a6:2e:39:6d:df:9b:6b:d1:65:81:8e:
         06:69:d5:37:98:cb:ae:88:95:ae:f5:61:c7:3b:d1:2a:e8:8d:
         75:10:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:24:38 2026 by rpki-client