Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File:                     RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier:          sdw5Jo6wJnnmDDgXKcegBHjG5WjN41RWLIjGWCEkV7s=
Subject key identifier:   18:42:4A:72:0E:F3:69:A2:4D:0B:65:7F:3F:36:0D:9A:45:03:7C:F2
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer:       /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial:       01A06EA7CD005D6F8D298957CA7AA400898A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number:          0895
Signing time:             Fri 04 Sep 2026 23:01:25 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:25 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:25 +0000
Files and hashes:         1: 1W8oXRyVWj6B25QVlKpKqn4htFc.roa (hash: ylLKhtgKcpGFiJV81EY7Ky60StXV0M2FwWK+HE1XjRU=)
                          2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: MH/yIdCb0DaSgld0FLSUwfGmG0f9WkAYZVrIVyXnev8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:cd:00:5d:6f:8d:29:89:57:ca:7a:a4:00:89:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
        Validity
            Not Before: Sep  4 23:01:25 2026 GMT
            Not After : Sep  5 23:01:25 2026 GMT
        Subject: CN=18424a720ef369a24d0b657f3f360d9a45037cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:1d:37:62:0e:2c:1d:0e:a5:13:40:d5:de:
                    c0:ab:16:5d:e1:96:f5:bf:10:fd:59:69:6a:6c:6e:
                    9f:12:72:cd:80:0a:95:b1:40:9f:8e:fd:b8:5e:13:
                    80:82:cf:2a:8c:bc:0f:cb:0e:ef:63:bd:43:02:52:
                    f5:e5:4a:ac:e3:62:6e:f0:77:b5:f3:6d:db:8a:bc:
                    a6:51:a9:a7:7f:3b:7e:23:27:de:9c:24:7b:8f:a2:
                    b2:24:d4:fa:73:d1:1f:8e:af:a0:53:b4:62:c5:7a:
                    83:af:43:11:25:ff:a8:a0:41:9a:a5:d6:5d:7b:00:
                    81:74:32:a5:0a:26:d9:aa:9d:b7:9d:5f:e3:f9:e3:
                    39:b6:c0:6a:b5:42:e5:4c:51:8a:82:17:04:a2:0a:
                    ea:19:42:93:cf:dd:0f:a0:c9:3f:f4:2f:47:30:e2:
                    5b:4d:6c:2c:e1:47:40:b6:07:77:38:99:b5:ed:8d:
                    16:65:7a:01:9d:d5:ed:fa:ce:63:aa:62:3f:12:0d:
                    39:da:a0:9e:21:d8:6b:61:78:e1:22:aa:6c:e3:1b:
                    ec:3b:a6:a2:b2:68:63:f0:86:89:cd:64:71:e5:b8:
                    72:ee:c5:6d:37:f0:79:29:f6:15:1d:28:fe:6a:a1:
                    bd:74:60:a2:54:c7:24:30:36:ac:6f:a9:ae:e4:e8:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:42:4A:72:0E:F3:69:A2:4D:0B:65:7F:3F:36:0D:9A:45:03:7C:F2
            X509v3 Authority Key Identifier:
                keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:35:49:35:87:51:61:a7:7f:ba:d5:37:d7:f4:11:b0:76:
         9d:6c:46:b7:8e:71:f0:72:6c:da:cd:fc:d8:fe:43:de:ed:08:
         f7:67:9c:38:7d:eb:41:2f:d0:68:91:ed:d7:b3:01:66:bd:1b:
         b8:73:a2:15:2b:88:c3:90:ac:9a:72:fd:b8:80:59:eb:8c:91:
         a3:44:40:cb:db:94:4a:4c:43:5b:74:93:dd:ae:26:95:d1:28:
         ee:a7:46:38:dc:41:55:02:78:9e:c5:37:9e:af:b8:2e:57:4d:
         8b:8c:b6:5f:d2:ab:07:4b:77:20:a0:58:95:56:cd:16:70:df:
         ad:b3:47:01:26:71:a5:60:ee:fe:85:ad:3f:34:18:eb:dc:66:
         3f:0f:54:47:f0:55:e4:e4:58:70:46:54:c9:34:da:fb:35:ed:
         89:b5:70:5d:e9:48:f0:41:d5:8a:82:9c:d6:6a:eb:38:a3:3f:
         1d:04:61:85:45:e4:0c:95:f8:c5:52:b7:7a:40:22:8d:6b:f4:
         12:47:3e:f1:2a:b4:2f:ef:b4:a6:77:47:30:9d:d4:92:e4:21:
         50:89:61:4c:f4:9c:66:b1:69:8f:c6:4d:21:c1:d9:c0:fb:31:
         61:f0:6a:11:82:5e:be:b2:d7:39:d7:d7:ee:fb:fc:40:42:d7:
         36:81:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:11:45 2026 by rpki-client