Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File:                     0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier:          0Nh8kk5FnPYnS1mNYci3y5T6vcamcPxs8YtX/W+IlxY=
Subject key identifier:   8B:4C:EC:7A:E4:4A:5C:14:A6:FD:B6:2C:30:70:C7:E2:EF:53:BD:89
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer:       /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial:       01A0C21F43CE4E9FBF9C6429AEFD8C0694DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number:          1A60
Signing time:             Mon 21 Sep 2026 04:00:23 +0000
Manifest this update:     Mon 21 Sep 2026 04:00:23 +0000
Manifest next update:     Tue 22 Sep 2026 04:00:23 +0000
Files and hashes:         1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: Wal0d0CxCu1erDLGikCCwcFv3mL5sFuLoDyNiFbsbHQ=)
                          2: SoEs2uq-Lqa7VWg8JFQCPgrt2eI.roa (hash: NiDI43uxk76Y1iaXH3S9JcI5gdDit0xy1S3yktJNiKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:1f:43:ce:4e:9f:bf:9c:64:29:ae:fd:8c:06:94:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
        Validity
            Not Before: Sep 21 04:00:23 2026 GMT
            Not After : Sep 22 04:00:23 2026 GMT
        Subject: CN=8b4cec7ae44a5c14a6fdb62c3070c7e2ef53bd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:cc:ab:7d:92:2e:3a:dd:2e:50:ee:df:e4:
                    d7:a4:0d:f3:20:2b:4a:8b:52:7c:72:29:af:e3:ce:
                    ed:70:48:c0:3e:50:42:14:11:5b:2e:a0:43:cd:d7:
                    ac:22:2e:7b:23:92:08:4a:14:34:f6:05:96:ee:68:
                    6d:c0:2d:9a:4c:c6:48:56:58:b8:0e:1e:b1:f3:0e:
                    e3:6f:8b:80:b2:54:a7:10:e1:76:13:f4:78:3d:72:
                    3e:ac:2c:e1:d0:66:ac:1c:65:29:68:a5:95:24:6c:
                    4a:85:81:cd:1c:21:fa:5e:b0:c4:99:64:4b:94:8e:
                    75:4d:c0:29:85:f8:07:82:8c:ec:00:7c:23:2d:04:
                    1f:9e:77:11:e5:29:9e:e3:18:55:bd:f1:66:74:6b:
                    a0:93:fe:6d:10:a6:0b:b7:53:3c:da:f2:64:6e:3a:
                    d8:66:33:eb:4a:59:b1:6e:e1:3d:6d:71:c1:0f:17:
                    d2:be:1e:13:a3:52:da:71:4a:2b:8a:43:fd:d1:bb:
                    b8:c8:62:3e:9e:0b:a8:32:04:2a:f4:61:62:77:d3:
                    f0:19:f4:0f:79:62:d0:17:26:37:c9:17:2e:77:fc:
                    b3:e2:7f:14:d4:20:67:d4:48:d6:a0:fd:5f:42:11:
                    15:61:f1:f7:d1:b2:f5:dc:a5:21:08:86:b7:4d:aa:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4C:EC:7A:E4:4A:5C:14:A6:FD:B6:2C:30:70:C7:E2:EF:53:BD:89
            X509v3 Authority Key Identifier:
                keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:1c:a2:b2:9e:70:f4:16:ff:c0:4e:15:eb:ee:94:c8:6b:
         91:94:e5:0f:a9:39:c9:b1:3c:06:84:26:86:ea:2e:65:c4:83:
         a0:da:6f:a8:2e:d7:70:07:b1:55:f0:42:ee:c7:29:e7:35:e8:
         c6:d8:e8:a9:c1:3b:37:66:55:b2:13:f3:f8:15:49:ee:9b:52:
         46:5c:1b:e8:6b:4e:7e:8c:e4:46:88:cf:02:12:b2:3a:d7:b7:
         38:24:04:f6:a7:db:62:ef:62:91:b1:22:dd:30:6f:4c:65:09:
         f8:48:c3:ae:fb:77:a2:5d:ca:b5:99:4b:be:01:71:ae:29:e2:
         67:02:d4:c2:a7:2f:b8:43:8d:d9:61:df:e2:5e:d1:76:59:33:
         0a:69:3b:5f:b4:da:7f:d9:67:05:ef:65:9c:07:8e:30:fe:5d:
         31:56:07:8c:59:f3:23:57:15:1b:35:8c:30:7b:4f:c5:4b:33:
         b8:56:21:9c:ec:68:a4:e8:13:55:b7:6a:b3:5e:ed:d3:72:19:
         43:c5:9d:96:d1:64:17:f3:9d:1e:7d:63:17:48:22:b7:5b:61:
         53:d9:34:54:da:7e:43:eb:61:df:19:20:3e:32:6c:65:ba:ae:
         da:c4:2f:19:17:a6:dc:73:ad:92:f4:f5:25:16:fa:aa:bd:ed:
         1b:30:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:20:30 2026 by rpki-client