Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
File:                     9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json)
Hash identifier:          x4nrTKkYsN0F1Y/gxmUxJ6jP9ED+2vOOivSe47AzSJg=
Subject key identifier:   EB:43:41:BE:70:E4:92:E5:66:58:DD:16:15:EA:4A:D3:17:E8:B4:E8
Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
Certificate issuer:       /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Certificate serial:       01A0D3F08AEE2306A42EE729E86ABAA32211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
Manifest number:          03D5
Signing time:             Thu 24 Sep 2026 15:02:31 +0000
Manifest this update:     Thu 24 Sep 2026 15:02:31 +0000
Manifest next update:     Fri 25 Sep 2026 15:02:31 +0000
Files and hashes:         1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: dhghwlNJb2KKbSWtAHwYAkPiAAKtySzq08FETSXHdOo=)
                          2: BzRL5dLKwivSlyjmJMancnc4uqU.roa (hash: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I=)
                          3: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (hash: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw=)
                          4: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (hash: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:f0:8a:ee:23:06:a4:2e:e7:29:e8:6a:ba:a3:22:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
        Validity
            Not Before: Sep 24 15:02:31 2026 GMT
            Not After : Sep 25 15:02:31 2026 GMT
        Subject: CN=eb4341be70e492e56658dd1615ea4ad317e8b4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:8e:85:f5:1e:64:b7:98:5b:f4:be:c8:bc:
                    3a:82:e7:2f:29:d3:59:83:4b:0a:7d:92:64:55:ac:
                    3e:7d:3c:0f:e7:ee:9b:1c:ea:c8:d6:98:f4:97:a3:
                    94:60:f4:64:57:ed:68:19:5b:4f:ed:01:90:fd:57:
                    2f:0b:79:e8:ad:03:ff:0a:d0:0b:9d:38:e7:95:74:
                    4e:28:8f:00:ec:13:63:dd:d1:51:3d:54:9c:45:01:
                    ad:75:4b:ef:55:75:91:ea:b8:62:6d:e3:a0:4d:06:
                    55:b5:1a:40:10:40:3c:ad:6f:9b:e2:fd:5b:0d:e0:
                    db:ee:4b:a1:37:f5:8c:30:b6:50:aa:19:a9:3e:50:
                    54:f6:e9:35:c1:fb:7d:c9:6b:4d:69:9a:95:36:14:
                    99:c8:47:45:d4:df:46:88:3c:01:78:cc:2e:74:7f:
                    02:ff:c1:24:2f:5e:57:60:05:76:e3:92:06:fa:b9:
                    96:95:1a:58:db:40:cc:c2:c4:09:41:c9:2f:95:47:
                    37:30:bb:4d:1d:53:1b:41:3f:86:d6:ed:5a:8e:c2:
                    a4:4d:9b:a6:81:2f:e3:c3:cc:ff:1f:70:af:fa:fd:
                    cd:36:7d:2f:f4:b2:f9:8c:eb:08:18:00:f7:47:82:
                    77:06:5c:d4:e3:b9:b8:9e:7b:ac:d5:ea:63:d4:8e:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:41:BE:70:E4:92:E5:66:58:DD:16:15:EA:4A:D3:17:E8:B4:E8
            X509v3 Authority Key Identifier:
                keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:51:b2:ad:49:59:4a:c8:fc:0a:ec:b2:7a:9a:64:b0:e2:56:
         14:d8:48:4e:ca:b6:0d:47:23:de:d6:bf:3e:ea:09:32:64:82:
         a8:7a:e9:c6:17:88:d3:a7:54:66:ef:38:b3:c9:eb:e3:4b:9c:
         dc:5e:d4:1d:ed:eb:36:aa:4a:d8:69:15:21:bb:75:4a:c8:68:
         d5:73:fb:44:a3:39:5e:42:66:47:99:bd:de:cf:09:7c:ba:f7:
         b8:bd:7e:0c:76:46:c2:aa:8d:36:d9:dd:8f:98:5e:89:a9:48:
         6f:d5:66:02:25:e9:f1:c2:d9:5b:77:91:cd:73:63:72:b2:78:
         6c:b4:86:33:5f:72:0c:d3:13:7c:3c:4e:b2:09:4a:5b:37:1d:
         79:ab:ea:84:6c:59:18:29:a9:f4:c2:0a:03:7b:09:df:fb:86:
         6b:ff:a7:11:26:9a:8d:06:1a:72:6b:47:2a:b8:13:c9:5a:1e:
         36:a5:96:e7:fb:cc:b0:b6:f3:36:c1:ee:01:a9:b7:9b:9a:19:
         ca:f8:92:ef:6f:fa:e6:05:39:cb:39:51:e6:ca:8d:c3:31:d6:
         9f:da:3e:bf:33:6d:ed:18:8c:14:55:dd:6a:c7:84:4e:c4:8f:
         af:b8:85:92:12:b6:4d:57:08:78:38:48:28:1f:cd:9e:f5:be:
         7c:18:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:35:34 2026 by rpki-client