Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File:                     A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier:          gmPs17D8pq27XJnkfT1Unyy4vi+974RCOp7OWE9vnhM=
Subject key identifier:   F9:BA:FC:DC:72:B1:65:BD:DE:B3:2C:F5:5C:B1:8A:3E:79:E1:34:13
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer:       /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial:       01A18262DDEFFEFA347E6D261A2A943D1C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number:          0EDE
Signing time:             Wed 28 Oct 2026 12:01:19 +0000
Manifest this update:     Wed 28 Oct 2026 12:01:19 +0000
Manifest next update:     Thu 29 Oct 2026 12:01:19 +0000
Files and hashes:         1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
                          2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
                          3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: dYbaP4PgxhXtaHtiH0Op9oGs3S/XSH1mVDJsgQ+AbWs=)
                          4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:62:dd:ef:fe:fa:34:7e:6d:26:1a:2a:94:3d:1c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
        Validity
            Not Before: Oct 28 12:01:19 2026 GMT
            Not After : Oct 29 12:01:19 2026 GMT
        Subject: CN=f9bafcdc72b165bddeb32cf55cb18a3e79e13413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d2:f7:c6:e3:c0:4b:14:ae:00:c3:3b:b8:93:
                    2d:96:0d:fd:35:53:35:d2:fb:6b:06:f8:90:85:90:
                    53:7d:18:91:ff:e5:30:db:49:3b:7d:d9:ef:ba:54:
                    0f:cb:f1:0c:55:cb:2d:e3:b2:4b:f9:e6:a3:6a:b6:
                    5f:ef:65:d0:85:bf:b4:05:09:5a:f9:12:5b:17:1c:
                    10:8b:d6:d6:cc:5f:11:0b:ad:c1:6c:b3:84:85:06:
                    ce:f8:a4:2f:2e:87:f5:0c:9c:31:60:cd:5f:ca:af:
                    29:50:c2:7d:8d:19:60:c5:cc:d9:1e:83:69:d0:c4:
                    0a:df:03:c4:77:17:4c:61:c8:7c:ca:64:e6:d0:97:
                    7b:84:0f:22:a6:29:4f:e2:2d:5f:6a:0d:a4:6c:b1:
                    ea:05:f2:f7:05:83:5b:c3:c9:6e:58:ee:82:33:a0:
                    1a:71:13:8b:4e:c2:4c:87:04:bf:84:4c:0e:3c:d5:
                    4b:00:5b:1a:a5:c9:58:26:ea:aa:5c:59:07:a9:5a:
                    d8:49:0c:f9:59:44:27:75:1e:73:84:5e:a8:b8:37:
                    a0:e6:0e:54:3b:7d:e0:bf:79:f6:bc:f0:6e:4b:1a:
                    bf:e8:f8:ce:7e:e7:0b:dd:44:9e:ee:75:d6:47:c7:
                    53:a5:43:be:a7:19:3d:09:d2:97:83:d0:d2:c0:15:
                    35:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BA:FC:DC:72:B1:65:BD:DE:B3:2C:F5:5C:B1:8A:3E:79:E1:34:13
            X509v3 Authority Key Identifier:
                keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:23:a0:bf:0d:ae:3c:27:99:57:4b:6b:e9:dd:fb:cb:24:2a:
         54:29:da:04:96:fe:2a:84:63:89:a9:68:78:0d:e4:0a:d4:c5:
         74:84:30:44:e1:36:d5:ba:34:9b:3a:27:60:ce:e0:29:b3:da:
         4f:88:8a:be:71:a7:dc:9d:10:d7:43:63:48:e0:2c:c8:23:2e:
         d1:ad:39:45:5b:9a:53:06:7b:aa:a8:cc:b0:4b:79:68:ed:58:
         e1:d8:4f:48:e1:a0:58:9f:3a:70:17:7e:42:22:58:ac:62:73:
         33:45:1b:1b:73:6a:d7:52:9d:f0:c7:b7:79:86:7f:07:34:a9:
         83:fe:93:9a:e9:36:a0:c0:e3:3c:85:f6:28:e8:d7:fc:64:ea:
         9c:d2:93:03:bf:70:36:e3:c1:03:cb:ce:71:f2:8c:48:74:5e:
         11:e9:92:04:cc:5b:cf:cb:a4:54:af:64:9e:56:eb:d8:48:1e:
         82:0d:9c:ba:1c:d3:8c:8a:c1:38:46:9e:2d:ff:ef:ee:82:5e:
         87:75:b7:25:28:16:6e:16:ea:40:ba:5c:aa:69:36:9f:53:a8:
         65:7f:47:b2:0b:62:ad:56:9b:cd:81:a1:e4:e0:fe:98:69:e6:
         18:51:27:ca:e1:b1:7e:be:95:a9:a2:8e:55:a5:b0:70:cd:d9:
         c7:2f:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:45:47 2026 by rpki-client