Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          eF+nX+uF4HQWKTJtZn75iLqN5NJmeK17fLcy6KLZsII=
Subject key identifier:   F9:21:0C:CF:1A:02:B6:4F:02:7C:41:E3:03:4D:DB:DB:75:A4:9F:26
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       01A0C25656B0759AA22837D814C251C3AAE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          096E
Signing time:             Mon 21 Sep 2026 05:00:33 +0000
Manifest this update:     Mon 21 Sep 2026 05:00:33 +0000
Manifest next update:     Tue 22 Sep 2026 05:00:33 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: hnlNv9Bxq2NEwbLAoxBNoxYCvAO9c2iRaws9nRxLaGI=)
                          2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:56:56:b0:75:9a:a2:28:37:d8:14:c2:51:c3:aa:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: Sep 21 05:00:33 2026 GMT
            Not After : Sep 22 05:00:33 2026 GMT
        Subject: CN=f9210ccf1a02b64f027c41e3034ddbdb75a49f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:1f:85:16:b4:37:12:b6:be:8e:79:32:7d:
                    3b:c1:99:75:85:f9:06:1d:8b:6d:7d:a0:21:6d:2c:
                    6b:4f:8e:de:e1:d9:e7:bc:c8:b8:ef:69:3e:70:65:
                    ba:06:d9:4f:41:35:1d:46:42:54:af:10:bd:eb:af:
                    12:15:d7:18:f5:6c:87:26:82:56:e2:0d:34:57:41:
                    b0:0f:da:c5:26:cd:51:a9:04:72:45:19:af:f5:c5:
                    80:29:f4:62:d3:4b:5e:15:a0:ad:ec:c7:51:d1:e2:
                    05:ec:12:4a:20:71:22:c7:0b:f6:db:29:44:84:54:
                    b9:85:25:dc:15:96:3d:80:59:98:e7:b4:c9:ca:a9:
                    38:5d:a3:e0:a3:a9:c1:f0:07:f3:46:11:44:06:40:
                    4f:d9:e4:af:27:a1:07:f9:68:40:b6:5e:fd:10:78:
                    5d:44:6d:95:21:33:c1:31:0a:2c:a3:e0:f5:d8:ee:
                    00:45:3b:2a:c5:23:71:09:ae:a0:78:02:55:18:41:
                    26:61:44:ec:80:1e:27:99:d0:03:ad:72:66:f7:aa:
                    67:72:1f:7f:94:8f:9a:e7:b3:a8:87:3b:bf:4d:ac:
                    0c:7a:54:d5:3c:55:fb:6b:b5:62:08:42:be:4c:c5:
                    0c:5d:8f:fe:2e:6a:5d:42:db:f6:6e:c4:57:a3:3b:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:0C:CF:1A:02:B6:4F:02:7C:41:E3:03:4D:DB:DB:75:A4:9F:26
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:17:2d:28:75:e3:68:1e:26:95:0f:1f:3b:16:ac:9c:ba:
         b8:db:cd:c7:7f:4e:5d:44:e5:3a:2d:8b:ed:ea:09:d1:fb:4c:
         28:17:b0:0c:39:85:d2:f9:1c:96:c4:07:23:9e:e4:91:ae:a8:
         d2:aa:29:de:8a:57:56:af:d8:6b:5c:a1:5d:83:39:56:38:eb:
         25:0e:37:9a:fc:5e:f3:d9:a5:08:b6:7a:94:02:55:aa:55:b5:
         f9:f8:5e:71:6c:e6:06:7a:01:4e:65:60:5c:4d:e5:ce:fb:a4:
         29:85:a4:ba:9b:e9:da:24:ad:b3:7f:4d:d8:8e:98:d5:39:f5:
         23:82:5d:62:5c:2c:18:30:55:44:b5:47:64:a4:92:00:84:53:
         67:f8:02:4f:c3:be:c3:e6:14:c4:d3:ff:d3:84:04:f1:61:71:
         73:a4:e3:89:03:89:bd:bc:79:f5:f3:96:5d:69:35:9b:e7:da:
         45:aa:f4:28:c9:47:f6:7d:46:1e:17:54:af:d5:4f:fa:a7:8e:
         24:d7:af:d1:b7:32:24:3f:d0:3a:e8:e0:cc:a1:f2:6f:3f:40:
         6e:21:20:d2:72:06:55:13:ef:38:82:a3:21:93:48:56:6e:f7:
         84:7e:6a:24:5d:2e:c2:ed:4b:43:86:03:16:19:1d:32:89:49:
         23:72:79:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:32:44 2026 by rpki-client