Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File:                     9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier:          7KUUtcPOqW8T1KAeg73pMbjYS8RzUSVhzm3KZciOuwA=
Subject key identifier:   0E:CF:A3:9A:2F:B8:EF:20:B0:B0:B5:47:DD:C4:10:8E:8E:45:6D:A7
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       01A08B9F7093A3492D7BD11CD8235E4275DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number:          09D1
Signing time:             Thu 10 Sep 2026 14:01:16 +0000
Manifest this update:     Thu 10 Sep 2026 14:01:16 +0000
Manifest next update:     Fri 11 Sep 2026 14:01:16 +0000
Files and hashes:         1: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: aDHwFGo6vipI2wPExW8sJgYmgko8ziYwGo3OlFxKtUI=)
                          2: DTajfEiYAfwU9wznkihFnvtM700.roa (hash: 0NM6zYcwmQ05W0Dcf5q5e1n9JwwtYJ2TI/Zem3bjahI=)
                          3: ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa (hash: 5I9TJRb3cc5VhsKq+pB92ABihn+aPu3v2b27S765Sxc=)
                          4: YHFA4JQJT_w-qOyv1tdQo99hP7U.roa (hash: bzABHukn/tUJxV914JpkLB2MX+U4A40WKsjCRa7w6mI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:70:93:a3:49:2d:7b:d1:1c:d8:23:5e:42:75:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Sep 10 14:01:16 2026 GMT
            Not After : Sep 11 14:01:16 2026 GMT
        Subject: CN=0ecfa39a2fb8ef20b0b0b547ddc4108e8e456da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:02:49:33:5a:14:3a:0d:b0:3c:0b:e6:24:
                    2c:6e:4b:f5:54:60:d0:74:df:54:e5:9e:4b:cb:ca:
                    20:d5:7f:a9:6d:76:c1:65:2e:88:fb:1d:b3:4a:4f:
                    27:ac:d1:c3:2c:5b:20:dc:15:7f:e8:b1:5c:24:6f:
                    cd:35:45:92:9d:32:d6:cf:fc:6e:69:e2:be:91:b0:
                    8a:89:8b:ad:c0:e9:85:7a:7e:1c:99:7f:9d:19:75:
                    71:ab:6b:72:9e:05:1c:bd:81:ee:1d:dd:4f:6a:c0:
                    67:32:d8:20:d1:91:72:0b:98:a0:9d:3c:e9:67:76:
                    ba:c6:30:78:d7:a7:1f:7c:b6:ef:a5:27:7f:5e:be:
                    81:62:57:46:57:c2:4b:90:71:17:ce:35:c2:4c:e0:
                    8d:e8:b6:b7:40:aa:db:14:2d:b5:6e:a0:f1:72:83:
                    64:11:6c:38:4e:7a:56:28:4c:da:13:85:d5:8a:2d:
                    7f:11:ea:00:0b:95:5b:28:98:89:a9:7a:3f:f8:bc:
                    ab:f1:84:4a:28:1a:d0:5e:30:11:cf:e8:98:8c:6e:
                    a5:07:fb:b1:68:0c:65:3a:fa:0c:d1:36:20:c6:8a:
                    fe:9a:c7:e6:3a:22:9c:6a:c2:c2:d0:73:bd:53:42:
                    7b:8d:de:17:4e:e4:97:d3:06:07:40:fa:9d:d6:3c:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CF:A3:9A:2F:B8:EF:20:B0:B0:B5:47:DD:C4:10:8E:8E:45:6D:A7
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:0e:25:1f:9a:4b:04:4c:6b:c2:2b:24:27:3d:54:5f:ed:
         32:7c:fe:d8:5a:74:fa:ea:31:6d:08:8a:3a:b7:92:39:ef:31:
         f4:cc:fc:39:43:39:53:6d:42:bc:78:7c:e8:ea:ab:df:70:10:
         33:e6:34:67:6b:74:5c:75:d5:3d:66:79:71:cb:71:e0:58:d7:
         5e:66:32:99:ce:10:05:4c:33:7d:b5:03:80:7f:98:ac:0f:2f:
         09:62:f7:7d:6e:2a:80:27:1c:21:e9:b9:ac:6a:3b:ee:24:48:
         43:81:58:b0:b1:46:7e:5c:44:6b:21:17:08:42:59:78:bd:c5:
         ce:e2:84:b2:a9:d4:d0:bf:2f:46:a6:15:31:86:98:96:35:ae:
         d3:4b:65:a5:cc:ae:ad:50:d2:11:d9:a9:ca:2b:00:ff:46:c7:
         92:0a:16:0d:00:f8:cb:b8:2b:ac:b1:ec:a0:e0:16:54:04:11:
         f2:1b:57:c7:a4:a3:e5:a0:ec:9c:14:b9:89:6e:33:f2:db:f5:
         8e:d0:95:f9:31:27:64:23:56:0a:7b:ef:7d:c7:b5:f2:17:85:
         f7:cd:7b:4f:3d:e0:62:32:4e:a8:2f:f0:4c:d6:1f:a4:a8:f8:
         40:e9:e8:a4:55:14:63:46:36:00:48:06:a4:bb:f3:1c:3d:c8:
         93:1f:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:16 2026 by rpki-client