Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          JgZXO6cfk5UvmcZQrDW2g6yzyt7crHSKlJvqfhaSUVQ=
Subject key identifier:   30:6B:CB:53:32:A7:D7:B0:9B:65:1F:52:3A:36:68:1B:8B:E7:78:F5
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       01A0C33204BD43F8E2F4E7B18F34A670C755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          1A8A
Signing time:             Mon 21 Sep 2026 09:00:30 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:30 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:30 +0000
Files and hashes:         1: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (hash: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: aXfsMA0gCcjXJyTTPbj6um39zIFbaS0yk6TmuHz47GQ=)
                          3: MNQFqrdvbEoxedHfrXynKifNGnY.roa (hash: O31r8g9C5kBDn8OSezJHwFB/Y59lZjW3Z0fIfncmogI=)
                          4: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
                          5: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
                          6: uKVnkxpc55UHCp4G3gmfBYK9lgA.roa (hash: Yl+4aX3AL4iwnArD6mGCgp0IBTVDchipN4aGOMzOCE4=)
                          7: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:32:04:bd:43:f8:e2:f4:e7:b1:8f:34:a6:70:c7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Sep 21 09:00:30 2026 GMT
            Not After : Sep 22 09:00:30 2026 GMT
        Subject: CN=306bcb5332a7d7b09b651f523a36681b8be778f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cf:e6:7a:b2:87:e4:aa:eb:ea:6b:55:27:36:
                    eb:87:d6:2c:60:fb:92:66:41:3f:7d:65:f7:69:ee:
                    c4:27:8e:90:55:02:25:1e:73:90:aa:47:16:89:fb:
                    0d:ad:b9:c3:30:01:1e:59:e6:fb:f1:55:b6:ff:73:
                    be:8a:20:ef:29:4d:28:fc:a0:f6:95:8d:28:8d:db:
                    8f:68:d9:22:94:92:65:e0:32:a8:78:2d:fe:d1:c2:
                    46:2b:2b:8c:f4:61:ae:20:48:10:5c:f9:9f:24:84:
                    19:66:c5:aa:da:8b:3b:52:91:01:2a:2c:cc:07:c3:
                    a5:e3:43:d3:a1:3f:0e:b5:ff:bc:da:c5:a1:c0:2c:
                    32:02:16:c5:47:f8:a8:5a:1e:5d:62:ee:dc:62:fc:
                    0e:d0:e7:2b:e5:12:68:6a:be:71:e9:ff:32:cf:79:
                    b9:77:c3:37:3c:a7:0e:cf:b0:5b:7b:90:9c:96:54:
                    89:d9:46:bd:1f:68:37:ec:8b:a5:24:bd:6f:24:8d:
                    79:88:1a:7d:20:05:7b:2b:1b:4b:98:60:3e:90:f9:
                    fc:39:f8:36:32:55:73:4b:a4:05:03:aa:8f:85:7d:
                    4b:77:51:0b:2b:dd:f2:2b:06:af:35:1c:77:7d:f0:
                    78:6a:78:2c:4d:c9:e0:5c:4f:5a:70:f9:91:7c:92:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6B:CB:53:32:A7:D7:B0:9B:65:1F:52:3A:36:68:1B:8B:E7:78:F5
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:41:39:1f:16:9c:cc:94:48:d9:0e:56:b7:66:24:21:bb:9d:
         5f:40:64:b9:2d:56:cc:bb:cf:2e:6c:25:03:fe:7c:d3:f1:ff:
         82:66:7e:52:93:f5:00:e5:31:7f:91:72:b5:07:31:a2:5d:60:
         0d:5e:f8:20:01:4a:ba:63:c6:49:41:9f:af:5b:9d:63:ee:9d:
         e3:e3:d6:b9:b9:3f:cd:60:bc:98:f9:fe:a7:3d:19:6f:29:1f:
         75:00:45:41:9f:3d:80:20:4d:d3:a3:88:39:e6:6f:b6:5e:83:
         f3:4e:48:bd:2c:59:05:76:9e:7f:df:9d:87:58:eb:49:16:20:
         88:ca:29:2e:9f:07:ac:95:51:ff:72:11:41:4c:35:90:76:be:
         26:5e:89:e2:c1:30:98:19:4b:ff:31:2b:50:f4:8c:c2:c2:bf:
         1e:49:d1:fb:4b:8b:0d:2b:d2:07:4d:b0:0d:b2:a2:1a:66:ef:
         f1:92:e3:e7:4b:f1:1d:82:5d:57:ed:14:92:ec:1f:0c:a7:a4:
         20:40:3e:6e:3e:a7:94:b7:d6:89:24:5c:35:4e:87:25:2d:51:
         29:1a:af:54:5a:1a:d1:74:45:d1:4b:6d:9f:49:9f:47:82:1e:
         b4:2f:2f:c7:11:e2:44:de:12:2b:e3:09:c2:cc:1e:aa:88:2f:
         0c:a3:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:52:12 2026 by rpki-client