Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File:                     9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier:          SMh2efoHFa3wNXgAWAjFHK8YfZTIIqB+ZMdKZLfouyc=
Subject key identifier:   6B:18:79:48:A0:DE:6E:E9:F8:57:F3:C6:78:FB:8D:AF:BF:8B:1D:92
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer:       /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial:       01A0DF86070035E20E75DD228300B58AE738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number:          1A75
Signing time:             Sat 26 Sep 2026 21:01:37 +0000
Manifest this update:     Sat 26 Sep 2026 21:01:37 +0000
Manifest next update:     Sun 27 Sep 2026 21:01:37 +0000
Files and hashes:         1: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: 3COAnciaHkgWbRCTxT4y+FRGEyGnjLORO35071dHOrs=)
                          2: JuwdF3pXKULgX8rdBkYwVawnKUg.roa (hash: J6niK53xMmSAm4XjHsm9sqSbekhWgzfMokxnfXFEmFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:86:07:00:35:e2:0e:75:dd:22:83:00:b5:8a:e7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Validity
            Not Before: Sep 26 21:01:37 2026 GMT
            Not After : Sep 27 21:01:37 2026 GMT
        Subject: CN=6b187948a0de6ee9f857f3c678fb8dafbf8b1d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:97:a5:99:2a:76:5c:29:bc:99:0f:d9:3a:
                    c0:1b:86:be:71:1f:0c:50:fb:d0:b8:28:37:55:43:
                    43:75:b5:bc:1e:60:c5:d4:95:e9:f9:ca:69:b5:e6:
                    ad:90:4f:90:fc:9e:31:69:04:0c:a5:cb:b9:cc:27:
                    91:49:87:ea:20:08:7d:29:c4:b1:cc:48:db:42:7d:
                    76:45:0b:25:b5:10:48:4c:b0:6a:ae:6a:59:28:89:
                    7d:e8:f3:c7:21:89:57:4d:2f:dd:23:c9:94:28:b2:
                    2b:b4:7e:8f:0e:95:d6:70:88:14:39:29:77:13:b1:
                    b3:e0:ad:1a:dc:a7:99:74:22:49:e9:dc:32:9a:78:
                    4d:be:64:fd:d8:7a:c5:e7:b4:ab:e6:da:3b:b5:83:
                    f7:48:7e:27:55:5c:37:a3:06:d2:5e:02:01:47:3c:
                    41:d5:bd:f4:a8:84:27:cf:99:71:67:65:f0:56:d9:
                    e4:c8:1f:75:81:b7:8a:e6:00:2a:7c:7d:3f:f2:58:
                    b6:aa:39:2c:c9:8d:db:4f:bd:9f:f0:10:a9:ed:19:
                    eb:6f:ef:ed:f4:c3:5f:ec:4b:d2:56:39:79:fb:61:
                    da:e5:47:63:34:d7:dd:3f:c7:2f:c7:6a:fa:b2:cd:
                    67:7f:a8:09:db:9e:f7:2a:ea:79:ba:33:11:ce:1b:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:18:79:48:A0:DE:6E:E9:F8:57:F3:C6:78:FB:8D:AF:BF:8B:1D:92
            X509v3 Authority Key Identifier:
                keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:f4:d8:13:a3:21:02:cc:d9:55:b6:b4:e4:58:46:6a:b2:
         f2:5f:2d:47:74:35:81:48:f0:e9:d9:f6:fd:0a:bb:46:e1:fd:
         20:ee:bf:f1:0b:17:a9:d5:ad:8a:ac:42:58:93:50:e5:52:fd:
         03:3a:61:1e:6b:03:36:91:14:31:72:91:6f:6f:0b:7b:62:9c:
         10:9a:a6:d0:08:dd:e7:40:78:8c:c5:47:0f:6c:a7:38:e0:97:
         47:52:2a:00:73:a7:61:a5:cd:6e:d2:dc:ec:84:9c:4a:8b:d2:
         bb:c4:1b:fd:91:f5:fa:6e:a8:42:a8:b1:8e:d4:67:56:6d:f0:
         09:06:23:51:d9:4d:98:02:fc:f7:72:ff:a7:a0:7b:e4:86:5b:
         29:29:fc:90:bd:55:81:57:41:5c:33:96:7f:3d:d3:1b:b4:2c:
         4f:d8:44:68:6f:d0:cc:26:ca:db:88:6a:62:3b:5c:f4:02:51:
         77:ae:cf:7c:9e:70:98:e5:ee:0a:5f:32:4c:34:75:8d:86:f9:
         e6:aa:7c:ca:cc:b2:8f:92:61:60:8d:82:19:c4:02:39:7a:cf:
         27:91:41:ed:cb:23:7e:52:4d:4b:ea:74:bb:05:c6:f5:26:71:
         af:15:03:ab:7d:ed:ea:d8:9f:e5:ce:d7:7e:d9:f6:1b:9b:32:
         4c:c2:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:38:26 2026 by rpki-client