Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
File:                     9lWaWOLE8UoftjRDGQgK88xWRGs.mft (raw, json)
Hash identifier:          5eTYK78P2ZuzT7HiadjaoG7WLagbkFA+sPe05EgpcbE=
Subject key identifier:   91:CB:24:07:D1:2F:3A:A0:2E:19:AE:D8:77:5E:EF:01:F2:31:B6:0E
Authority key identifier: F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
Certificate issuer:       /CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Certificate serial:       01A0D15BB7B7E0E3094D5BD0C8C31E179EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
Manifest number:          015B
Signing time:             Thu 24 Sep 2026 03:00:43 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:43 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:43 +0000
Files and hashes:         1: 9lWaWOLE8UoftjRDGQgK88xWRGs.crl (hash: u/Q2XeDxSKXKTxYaVBkHu8m4gmEQvoUhWwg+dqoLgPs=)
                          2: _j_QYhrm9EtHVz55rfuJrPeU9ac.roa (hash: NUaMPNcwY1qDOrksQXA+36Saq/+PThu5xZNDt3TsgDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:b7:b7:e0:e3:09:4d:5b:d0:c8:c3:1e:17:9e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
        Validity
            Not Before: Sep 24 03:00:43 2026 GMT
            Not After : Sep 25 03:00:43 2026 GMT
        Subject: CN=91cb2407d12f3aa02e19aed8775eef01f231b60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e7:a7:9d:b9:44:70:93:40:b7:62:7b:8b:c2:
                    4c:56:ad:da:16:d6:fe:ab:2a:ff:fe:a6:24:f3:d9:
                    e4:49:f6:6d:de:ab:46:3d:87:39:ad:82:b8:69:cc:
                    16:d3:df:d9:5f:af:02:25:97:80:b9:1d:07:ee:ab:
                    65:33:2f:87:57:6d:2d:04:7f:82:1f:b2:83:79:d0:
                    2a:8b:86:c9:d5:61:e7:d6:8c:5f:03:11:f6:41:62:
                    b2:57:cc:57:14:c1:92:13:2a:d4:b9:3d:01:75:9e:
                    d3:5d:85:b0:aa:d4:3a:1c:7c:b0:82:c1:d8:2c:31:
                    8c:cb:58:84:16:e3:6a:d0:ec:be:7e:bc:40:bc:c7:
                    41:9a:43:e1:e0:f6:1f:05:17:dd:92:67:c5:f4:58:
                    18:c6:b4:67:44:91:0b:9b:19:4c:1d:33:0d:d7:d5:
                    d5:ec:b8:76:d8:fa:d7:ee:e3:f0:2b:81:6b:0e:43:
                    29:51:27:9f:f3:56:56:c1:b9:9d:b3:a0:f7:86:df:
                    bf:24:5d:72:2c:42:46:d7:ff:1c:cf:6a:20:2c:d1:
                    60:8f:76:27:50:38:84:b1:d7:81:dc:fe:04:33:b6:
                    76:0d:72:4c:2d:5f:c5:58:74:89:29:24:f1:b9:ea:
                    ff:8c:c7:14:25:87:e8:65:b7:07:88:d7:83:df:11:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CB:24:07:D1:2F:3A:A0:2E:19:AE:D8:77:5E:EF:01:F2:31:B6:0E
            X509v3 Authority Key Identifier:
                keyid:F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:53:aa:28:ea:50:1e:53:34:a2:64:17:3e:cb:5c:7b:a2:24:
         bb:e4:5d:44:8d:cc:8d:b7:c5:89:68:52:52:02:08:01:b1:d5:
         b5:99:ad:aa:8d:94:6e:62:67:5d:3f:90:a5:3d:26:4f:14:4a:
         5e:e0:72:a3:e5:94:3c:e3:82:c5:1c:f0:ff:b7:02:73:ba:cb:
         6c:8f:93:17:58:29:1b:85:a6:72:34:65:e2:4f:45:db:3f:e5:
         bc:05:91:24:d5:5a:71:28:9c:3e:f4:98:e7:41:eb:6b:6b:af:
         a2:01:92:1b:e3:3e:42:72:72:69:7e:f8:9d:2b:99:85:42:73:
         b1:aa:b0:bc:be:93:72:3d:ee:bc:fd:28:34:f2:31:0c:8c:1c:
         30:1d:43:32:a4:40:88:0a:9d:a5:14:08:04:d3:67:e8:9a:81:
         42:fb:fe:f8:df:54:8a:56:e1:2f:bd:5f:18:9c:42:02:2c:29:
         c5:c1:0f:1b:6d:80:8e:be:8a:11:48:5a:9a:71:aa:f2:42:2f:
         4b:88:d3:3f:02:51:bf:30:3a:38:47:26:5f:af:b1:4f:cf:b9:
         3e:58:fc:02:5b:4f:39:59:bd:9b:10:8a:1e:aa:7d:c5:24:61:
         94:78:8e:82:62:a3:f6:47:8c:d3:1c:8f:9d:b5:24:46:db:7c:
         4a:1e:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:13:39 2026 by rpki-client