Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File:                     9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier:          YYGzkCtgplxZ8vDzz/VYYRjBM7eQ26CtHsXErsr7IDM=
Subject key identifier:   DD:45:55:2D:A6:1B:B1:53:E7:90:C6:61:47:FD:BC:E2:6E:54:1E:6F
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer:       /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial:       01A0D9BA58996A3424707CD5DC97C666E101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number:          0EBB
Signing time:             Fri 25 Sep 2026 18:01:03 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:03 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:03 +0000
Files and hashes:         1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: 9gF7ndZc0z9F8Zn0w4Rhy7Hum2JjQhOT29ZQSXemvOM=)
                          2: uvizS4ukuC_gEdKACqyA3QErVlg.roa (hash: 7ZQzxgJlvYq7/1nZi/aQGYcGnnJ6bHEVEWXvW9zSYP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:58:99:6a:34:24:70:7c:d5:dc:97:c6:66:e1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
        Validity
            Not Before: Sep 25 18:01:03 2026 GMT
            Not After : Sep 26 18:01:03 2026 GMT
        Subject: CN=dd45552da61bb153e790c66147fdbce26e541e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:d2:1a:0e:51:bf:8c:7b:98:b1:70:25:06:
                    38:e4:50:57:3c:e1:93:3c:7c:ea:aa:e1:f1:cd:10:
                    eb:c2:f5:88:f5:a5:2f:fd:de:00:e3:43:9c:16:8e:
                    9f:0d:5e:89:1e:28:02:fe:dc:ea:90:96:9c:31:8d:
                    70:40:5e:21:4e:78:49:9d:77:cb:26:98:09:84:80:
                    2b:35:3b:4f:37:32:11:58:5d:bc:45:6e:bd:79:be:
                    fb:eb:52:8c:d6:76:bf:c9:ef:52:20:6b:dc:9a:c3:
                    fc:8e:fc:01:10:b1:45:1a:2f:25:e4:61:a8:b3:bf:
                    8d:b6:c1:69:ff:1e:86:4c:3b:1b:cf:46:f8:24:ad:
                    51:09:9d:f2:d7:e7:bd:12:1c:21:0c:cd:d2:6f:67:
                    b3:1d:46:7e:5a:0f:c3:7e:00:1a:1d:29:a9:e4:d0:
                    60:81:23:35:a1:58:02:01:5f:48:fb:53:c8:27:29:
                    ad:37:6d:f6:be:fd:ad:6b:3f:31:17:14:33:a9:b6:
                    45:5e:4f:9b:88:cc:3d:76:9c:9d:2d:6e:9d:3d:66:
                    c6:fc:a1:83:40:65:de:81:7d:13:c5:d2:e4:11:39:
                    ae:7e:7b:3b:92:4f:76:ce:80:da:fb:dd:95:49:e3:
                    fc:71:fe:c5:62:ad:4e:ca:aa:36:3d:dd:5b:e7:08:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:45:55:2D:A6:1B:B1:53:E7:90:C6:61:47:FD:BC:E2:6E:54:1E:6F
            X509v3 Authority Key Identifier:
                keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:66:a8:59:d3:c3:1e:15:f3:6c:d7:2f:f6:5c:44:65:29:
         d5:01:36:9e:ff:02:f9:5a:0e:3c:53:62:17:37:2d:89:e4:1a:
         64:eb:93:b5:e5:62:36:1d:9c:13:07:b5:63:2d:36:18:ef:15:
         b8:f2:18:26:03:c0:df:1d:e5:34:6f:41:72:23:72:d9:e0:87:
         49:c8:97:8b:23:a4:04:3f:9b:14:04:b9:4d:41:90:94:af:f2:
         e7:19:8f:17:63:a0:c2:da:81:5f:5e:a2:9f:e3:78:58:33:36:
         72:84:58:53:f6:e4:6b:b5:20:5b:b0:ea:00:cb:a7:f9:f4:90:
         23:89:1d:b3:b6:2c:7b:ea:83:c5:99:99:ae:dd:6f:22:d5:e9:
         d4:00:bc:ac:38:4d:38:76:b6:fb:b9:48:18:59:32:48:8e:b3:
         b3:4e:fb:0c:fe:34:bb:f4:d2:07:9e:55:8a:c8:29:86:10:19:
         77:17:8e:ce:9e:fe:e2:c4:35:e7:36:a9:b3:d7:2c:68:9b:1e:
         d1:ac:cc:f9:28:d0:2a:6f:91:b1:d6:10:ee:5a:3d:b8:23:d4:
         7a:e7:fe:26:fd:20:22:72:b8:8d:d3:a7:ec:ea:77:35:65:33:
         77:10:8a:55:6c:1e:55:1f:97:92:dc:85:b4:6f:b4:61:93:bb:
         d2:42:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:55:36 2026 by rpki-client