Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File:                     9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier:          nDZq8Zp0ZkKrV74loH5qZwk651OUU7sIvbSddvke7Uo=
Subject key identifier:   6F:F0:04:85:1C:6B:C9:3C:06:94:32:EB:CA:F7:52:82:F2:F9:D4:1D
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer:       /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial:       01A10693BCA26A6B346AA0DA105D29B82987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number:          156F
Signing time:             Sun 04 Oct 2026 11:01:47 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:47 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:47 +0000
Files and hashes:         1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: wNhJay5KFq5paks32N/7aB4T5DXKkh4qaFIiAJb3bPk=)
                          2: ksOPh_2fTunNVDQ0M7oZsMXzMTc.roa (hash: sTuOVD56/9SfiXVEt5t0X+gpGj1raLEEP3xJmICtW0g=)
                          3: maqDCk5ech9njf2wRdErF2LguqA.roa (hash: Yp6aTeCGyXLJ/FumA2AwCHAE91dWUbhOkfi6Jw4CZBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 11:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:bc:a2:6a:6b:34:6a:a0:da:10:5d:29:b8:29:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
        Validity
            Not Before: Oct  4 11:01:47 2026 GMT
            Not After : Oct  5 11:01:47 2026 GMT
        Subject: CN=6ff004851c6bc93c069432ebcaf75282f2f9d41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:b6:8f:1a:b2:17:dc:15:83:71:d8:27:5b:
                    44:cf:75:af:a5:b9:5d:3c:59:be:15:56:c6:3c:ec:
                    16:7b:06:37:6b:8d:3b:dc:11:63:79:73:7a:68:7f:
                    8c:df:30:4c:89:e9:88:71:58:4a:2e:d1:50:2f:b1:
                    e0:de:40:4e:7f:c8:cf:45:fd:52:f9:8c:cb:ce:a7:
                    a2:8b:ac:44:16:8e:11:d8:48:c6:d1:d3:f2:c6:85:
                    c9:b7:2b:7a:3d:23:a2:d2:af:2b:3e:36:26:08:96:
                    81:ca:83:72:75:c5:53:fc:92:96:50:c0:fe:a1:a0:
                    38:22:5c:ed:87:c8:bf:6c:ff:46:94:96:5e:33:72:
                    3f:64:55:c8:63:8c:75:60:8d:ae:ee:d4:50:dd:23:
                    a2:b6:d8:7d:c6:2d:4b:a2:42:03:91:ce:ff:03:2e:
                    97:93:29:c6:00:b2:87:ef:c3:ea:cf:2e:23:d6:f6:
                    be:e1:6e:e8:46:78:94:2c:94:19:fd:f6:f0:e2:21:
                    c3:f3:5a:03:cf:e1:ec:15:50:97:67:44:a4:7e:a5:
                    9b:36:3c:de:32:b1:ab:56:1f:34:80:0c:ad:ae:d6:
                    6e:65:bd:a7:6e:51:8d:5f:6e:33:6e:cd:f9:02:08:
                    ed:fe:71:e2:4f:ea:66:e0:4f:be:9c:d7:1e:04:9b:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:04:85:1C:6B:C9:3C:06:94:32:EB:CA:F7:52:82:F2:F9:D4:1D
            X509v3 Authority Key Identifier:
                keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:19:e8:c3:66:e1:9d:3d:40:21:cd:76:7f:98:5c:2a:f9:ef:
         9b:c1:de:d4:8b:8c:a0:14:0b:a1:2c:f8:a9:5b:95:fd:ca:f3:
         05:dd:74:84:fe:0d:a5:a0:b1:c8:f1:23:0a:67:7e:ec:2f:ab:
         9c:92:80:cb:2f:b3:1e:54:9d:7a:6b:77:1d:07:37:93:01:6f:
         0c:b7:67:f8:68:76:c8:16:27:af:a4:7e:1a:80:92:95:7b:78:
         88:fd:58:fd:16:dd:55:ff:70:7b:04:6d:e8:74:21:94:3d:c6:
         c9:a9:6e:8d:09:83:1e:f3:52:f8:d7:b6:ba:0a:ee:e7:df:8b:
         79:8c:12:5f:e9:3e:f1:e0:f4:c1:73:b4:31:a4:49:6d:01:25:
         08:76:43:c2:12:52:c9:8f:c2:db:2a:5f:e0:26:41:77:8f:25:
         d5:41:aa:60:57:4d:69:74:4b:1b:ad:04:27:4d:00:ca:98:36:
         da:fd:85:d8:94:55:c0:3c:44:3b:96:77:18:7a:b1:72:e9:e1:
         51:23:b2:b8:9b:36:e4:f7:ba:70:1c:c9:25:5a:df:3b:35:a2:
         75:01:44:84:12:42:1a:1d:36:98:ba:2a:bc:77:34:78:e6:5b:
         ed:a7:c9:ad:af:af:24:1c:29:38:ab:31:d5:a1:14:b9:1f:e6:
         c1:2c:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:53:43 2026 by rpki-client