Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
File:                     m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft (raw, json)
Hash identifier:          Zv0veM4otaZSB9PdghAzeY/g1DKNLb0I3+BvpGdbCOc=
Subject key identifier:   A0:73:02:53:27:F1:86:8E:87:FF:A3:49:B3:EA:92:D3:FD:B6:2A:08
Authority key identifier: 9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6
Certificate issuer:       /CN=9bb672a7414643fde42fd5d7d964426ccfbe0ff6
Certificate serial:       01A08BD5D5F4BF2ABEE5F42AB65487CAF4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
Manifest number:          9F
Signing time:             Thu 10 Sep 2026 15:00:41 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:41 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:41 +0000
Files and hashes:         1: 1-iqRWTEyF4ajtF5LcGXfc70ss5M.roa (hash: Dz6lLNPsk+ndbehBfxapa+ksrphrNfbcDIDf943cyGI=)
                          2: m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl (hash: o5OUJY+XOQ55tQYLF2oz0zK23NMZtJNH9ftzlLj4F30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d5:d5:f4:bf:2a:be:e5:f4:2a:b6:54:87:ca:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb672a7414643fde42fd5d7d964426ccfbe0ff6
        Validity
            Not Before: Sep 10 15:00:41 2026 GMT
            Not After : Sep 11 15:00:41 2026 GMT
        Subject: CN=a073025327f1868e87ffa349b3ea92d3fdb62a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:b3:2f:6b:e0:9c:59:09:f2:ec:c8:0c:97:
                    a5:47:f5:55:90:5d:9b:cb:13:43:0b:92:23:2b:ad:
                    7e:e3:51:bf:0f:ed:9b:9e:66:fb:47:d7:24:1b:9a:
                    35:15:e4:55:01:3c:33:09:f7:78:07:b3:31:a8:43:
                    ec:bd:e4:46:30:85:b5:7a:47:e2:16:7c:da:99:84:
                    40:47:84:49:48:a4:e0:0f:a4:76:e8:ae:46:44:47:
                    11:ea:8e:25:ea:bf:d7:a9:67:51:2c:1d:84:6c:03:
                    42:aa:6a:d2:17:8d:c5:d8:c2:6d:a2:aa:32:65:43:
                    33:28:38:76:15:a6:ef:e0:d0:98:b3:91:8c:6f:55:
                    c0:4f:11:31:b8:28:c3:95:e6:02:98:c7:b6:21:4e:
                    13:7d:95:a3:68:bb:cc:e7:b0:cd:85:e7:c9:d1:05:
                    80:f5:74:8c:2c:73:c4:2b:0d:14:ef:53:b0:0a:8b:
                    73:6c:31:59:44:8d:cd:48:2b:18:1a:1b:4e:37:f7:
                    2b:bd:c2:24:d8:e2:7e:e6:61:4c:11:c8:fb:09:d7:
                    1e:13:8b:02:c8:82:00:46:80:7a:29:5d:64:9f:d5:
                    ab:91:0c:e9:6b:b5:cf:9e:8d:33:da:38:52:9f:b8:
                    9f:27:e0:48:02:39:2e:8e:17:6b:1e:22:9b:58:4c:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:73:02:53:27:F1:86:8E:87:FF:A3:49:B3:EA:92:D3:FD:B6:2A:08
            X509v3 Authority Key Identifier:
                keyid:9B:B6:72:A7:41:46:43:FD:E4:2F:D5:D7:D9:64:42:6C:CF:BE:0F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6b764a-c723-43d2-b190-afced98b2f2f/1/m7Zyp0FGQ_3kL9XX2WRCbM--D_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:46:6b:dc:f4:0d:b1:1a:e3:e2:58:e1:51:c4:c0:ac:9c:a1:
         3e:62:c6:2e:f2:b9:78:6e:9a:1a:9b:4b:03:33:94:b5:dc:85:
         b2:5c:6a:59:a7:cc:79:78:68:05:9c:88:8f:e1:f4:6d:ab:51:
         35:36:ff:73:26:77:44:97:67:89:a7:cd:7c:62:51:96:e5:6b:
         83:cb:fb:f5:4a:8a:d1:1c:83:65:9e:8b:42:0d:08:c7:8b:7a:
         e1:7e:78:c4:a2:3c:e9:3c:3f:b8:1c:1c:2d:ba:2e:b7:f1:fc:
         36:e4:8c:1e:83:40:9c:36:bd:e7:f8:d0:51:19:c3:d7:a5:0d:
         db:3e:02:ef:d0:43:80:b4:96:30:69:eb:17:c1:a0:ae:c0:42:
         e7:a7:61:ac:e4:c0:73:7c:bf:a4:1c:96:31:1b:af:d2:26:8f:
         cb:0c:f0:da:e7:ad:16:af:43:bd:bf:6b:a0:0e:af:6a:bc:2e:
         ca:7e:d2:95:92:62:35:e2:40:ac:18:a5:16:4e:92:45:56:e0:
         f0:44:b8:38:06:90:90:58:55:1a:ad:c5:9e:25:28:ad:db:48:
         77:44:a1:23:a3:15:5b:61:e8:80:6f:71:33:45:52:74:55:14:
         11:1b:a1:a5:23:9c:cc:f2:e3:2d:6c:8f:f8:e4:e3:5c:d5:fd:
         67:b6:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:09 2026 by rpki-client