Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File:                     0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier:          mEj6rjwXScNAT3esidXfhpVOUGR4QeTLkoro2q+Agxw=
Subject key identifier:   7A:C4:5B:86:EC:0F:98:ED:0B:49:50:79:A9:FB:5D:37:B3:6D:26:B2
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer:       /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial:       01A0C7EADC885C175E227626314EA0334B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 07:00:52 +0000
Manifest this update:     Tue 22 Sep 2026 07:00:52 +0000
Manifest next update:     Wed 23 Sep 2026 07:00:52 +0000
Files and hashes:         1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: k8ei1eiEf/+5/zcGzDR4jmKGFuLCdAvrvjCMqSmMU84=)
                          2: 1-v2BZe7GqHI_RFasW9MH8N-JZxY.roa (hash: s0okpxj+ww26V5PGcp95/8yysRkdvbuly1G+a93DjM8=)
                          3: B3sV0jnamNo239vQrhEaWaSxAqM.roa (hash: 9SPwVzjU/44IydDd5luHKS0eXy9i/DzhGcx7z6/dCF0=)
                          4: ELWCm2DUfBNvitrNlID8nDgglxY.roa (hash: LnMdLptOOFbRYXfj64vft/9vyKxJPRvoWdQ0OsmJPdc=)
                          5: MWww8mg4IAuQ7tfubwcnBwcN-wc.roa (hash: h5+JwC9CF+2XnTKrJ979fW9yKh/yquKOOiCoaTps0Lw=)
                          6: RRB7Zwnksy52qvgZ6I9Xp0jWWlg.roa (hash: hlsuCsxcfM9yac6K8Me+suOwuRSN/YsWGfKp1JGJz9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:ea:dc:88:5c:17:5e:22:76:26:31:4e:a0:33:4b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
        Validity
            Not Before: Sep 22 07:00:52 2026 GMT
            Not After : Sep 23 07:00:52 2026 GMT
        Subject: CN=7ac45b86ec0f98ed0b495079a9fb5d37b36d26b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:53:da:14:9f:92:61:07:a8:26:cb:94:e4:
                    8b:44:75:ab:5b:32:00:80:eb:9e:7c:59:da:f6:11:
                    0e:2e:e0:e5:b7:cd:0b:fd:d1:90:05:73:74:58:2e:
                    0e:c8:7c:a8:99:e2:72:c1:8f:7d:58:29:b8:e4:82:
                    79:cc:29:45:76:4e:1c:16:2f:b8:c9:e7:0d:ef:0e:
                    b4:4b:e0:85:ad:be:f5:6d:06:0b:1d:5c:37:b7:c0:
                    20:e8:4e:be:fa:95:9a:ee:19:a7:4f:b7:2f:fa:41:
                    81:d9:17:b5:24:f6:08:4f:f5:ea:91:b1:31:bb:80:
                    3c:0b:de:af:64:78:35:de:b3:27:10:54:87:20:de:
                    0c:32:97:a2:8d:12:7a:dd:e4:c7:42:0f:3d:5f:d4:
                    6e:66:e7:aa:4f:fe:2f:2a:ed:e2:7c:16:21:c1:f2:
                    76:67:aa:ff:08:f2:5e:aa:5c:75:37:77:2e:32:8d:
                    1d:3c:51:ed:8d:54:9e:bc:c2:fa:4d:99:e8:02:08:
                    c9:39:da:1d:32:d5:d3:f6:f9:bc:0d:a2:50:11:99:
                    c6:0e:7f:7f:87:cd:72:f8:b6:e5:1c:e4:9c:f3:2e:
                    d7:07:65:30:c6:be:60:be:8b:1c:ed:cb:bf:f9:d7:
                    32:88:c0:48:00:1d:3a:d9:af:9d:ba:0d:01:96:ce:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:5B:86:EC:0F:98:ED:0B:49:50:79:A9:FB:5D:37:B3:6D:26:B2
            X509v3 Authority Key Identifier:
                keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:47:cd:df:23:df:6c:1e:66:7f:f5:9e:09:94:84:26:73:
         9f:b7:ca:e0:d5:dc:a6:d5:5c:3b:dc:be:72:79:1c:cd:90:e9:
         cf:fc:c1:95:69:62:64:0a:e0:9e:6f:a1:a5:79:47:d8:17:26:
         82:47:7f:d1:9f:b9:e7:1a:77:ca:93:c0:41:ff:d0:57:c4:0d:
         44:84:53:68:7a:e8:b7:9c:c3:13:c4:d2:51:ae:52:a9:13:3a:
         bb:89:74:9c:fc:1e:11:c2:af:c4:40:36:2e:57:3d:17:c4:48:
         59:aa:90:41:56:91:65:3d:ed:3e:dd:22:b2:4c:98:25:d0:53:
         ff:d3:07:3f:98:dc:ed:08:cf:d5:90:94:8c:e0:85:20:fb:e1:
         7a:da:b5:34:c1:57:aa:81:cf:2f:79:31:a8:cc:f7:79:2a:a0:
         11:e0:98:c6:2f:2f:62:f3:a1:c6:b9:ec:5e:a6:9a:1f:e9:13:
         c2:38:4b:71:49:15:36:f7:fe:93:05:2b:3a:af:ac:1a:64:55:
         21:0c:8d:a2:dd:65:27:b1:1d:a3:fd:7e:f6:70:fa:24:e2:04:
         31:6b:ba:b4:b9:a8:79:43:59:fa:ff:25:11:7c:7f:7f:03:a9:
         54:e1:15:85:90:18:10:12:5a:8e:78:b8:af:0d:c8:10:08:7f:
         ea:3c:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:28:39 2026 by rpki-client