Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          BLS4imWgz5lbnBks4InHSmCkZdfM1/CZ1RuzEC2FV0g=
Subject key identifier:   62:17:B5:89:D7:AD:D4:4A:15:BA:45:5A:D0:35:0D:AA:5B:06:E7:ED
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       01A1C40B85A26288427E002FCF0DF2DD3E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          1B0F
Signing time:             Tue 10 Nov 2026 06:00:51 +0000
Manifest this update:     Tue 10 Nov 2026 06:00:51 +0000
Manifest next update:     Wed 11 Nov 2026 06:00:51 +0000
Files and hashes:         1: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (hash: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: EDY4Lphx8qY1jgDClrWBOdfU+K9J5TnMwi3pILk8DKw=)
                          3: MNQFqrdvbEoxedHfrXynKifNGnY.roa (hash: O31r8g9C5kBDn8OSezJHwFB/Y59lZjW3Z0fIfncmogI=)
                          4: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
                          5: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
                          6: uKVnkxpc55UHCp4G3gmfBYK9lgA.roa (hash: Yl+4aX3AL4iwnArD6mGCgp0IBTVDchipN4aGOMzOCE4=)
                          7: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c4:0b:85:a2:62:88:42:7e:00:2f:cf:0d:f2:dd:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Nov 10 06:00:51 2026 GMT
            Not After : Nov 11 06:00:51 2026 GMT
        Subject: CN=6217b589d7add44a15ba455ad0350daa5b06e7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:f7:9c:7c:8b:c0:6c:7c:a9:25:aa:ab:91:
                    33:0b:9d:7a:63:36:a9:c7:3e:43:4f:40:66:3a:2d:
                    6a:ca:70:46:2c:8b:3c:7f:81:eb:3d:e8:6c:0f:01:
                    a2:bc:c7:41:15:58:8e:03:a2:99:6b:73:80:3d:15:
                    46:3a:21:9a:94:74:43:0e:2b:dd:35:78:1d:65:bf:
                    ef:c9:54:be:e5:8b:81:b9:e1:7e:79:49:1e:9f:f1:
                    27:ee:5c:8d:c7:dc:7f:40:44:00:22:1e:22:32:e6:
                    d5:dc:d3:3c:8f:6a:d5:18:6d:18:2a:10:75:15:cd:
                    f8:85:61:2a:fc:a9:32:7a:09:da:3e:19:0b:f5:e3:
                    67:5d:ac:ab:4e:f7:84:08:32:42:20:73:8a:54:da:
                    24:7e:29:70:93:c9:ae:33:97:ac:a8:29:8f:42:d5:
                    ce:60:db:91:c8:9b:82:af:31:f8:68:99:37:e7:77:
                    4f:f8:e9:89:00:ee:89:c1:13:16:54:ac:2b:a4:78:
                    6e:10:5c:c2:c4:22:c5:a5:7a:77:bb:00:ef:b5:66:
                    34:b1:98:9e:36:55:a3:69:e1:7e:51:5e:64:47:6a:
                    5a:8c:87:c9:a4:02:50:62:6d:44:2c:1c:f3:c8:43:
                    93:70:17:d9:31:56:9e:a3:a9:73:14:08:cf:f4:40:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:17:B5:89:D7:AD:D4:4A:15:BA:45:5A:D0:35:0D:AA:5B:06:E7:ED
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:48:13:77:d1:08:75:51:fa:d8:84:aa:f0:9d:f1:bd:d8:d9:
         13:3e:7a:d0:81:35:94:5a:1c:78:86:e5:5c:c7:9a:4c:03:50:
         66:d2:53:75:d0:b5:26:d9:cf:a5:96:8d:19:a5:0c:5e:af:18:
         21:2b:2a:0e:ab:ef:d0:03:a3:db:00:c4:ab:05:84:ba:89:c2:
         ce:99:77:06:2c:e6:81:3c:87:ed:b3:7f:b0:a8:49:1e:61:4f:
         20:10:be:4e:22:e5:d9:17:45:aa:af:57:13:eb:ff:c7:52:99:
         5a:5a:55:9b:77:5d:e8:5d:5c:05:8e:40:46:96:41:09:4b:dd:
         5a:ff:36:70:07:fd:90:61:9f:db:20:65:7a:cc:89:69:53:5e:
         0a:c8:ec:90:4a:3d:2e:2d:ea:42:ae:c8:bf:4b:0d:90:13:ef:
         db:55:e9:3a:16:70:36:8a:cd:67:87:50:c3:6b:9c:2b:b4:34:
         d0:00:80:79:a3:09:22:67:97:9d:5f:a1:1a:c5:d6:06:44:18:
         7c:25:12:7a:03:0c:27:1e:45:3c:63:b3:b3:cb:50:6b:8b:fd:
         c0:ee:ee:d4:d6:4a:f0:62:71:a2:04:60:78:72:ec:2f:75:9e:
         67:8f:cf:ec:c0:a8:92:7a:e5:ab:82:1a:0a:ad:77:bd:34:f3:
         96:d3:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:07:21 2026 by rpki-client