Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          ryKYmglJAv6qLCcr41NCHE2mvHYSYkBDUyOzA/JOTls=
Subject key identifier:   C0:8E:67:45:D2:42:B7:BD:C0:29:9C:4C:54:7C:69:97:B4:DA:86:4D
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       01A123C19C91AA389EC7E4007B7E688ED1C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          12B4
Signing time:             Sat 10 Oct 2026 03:00:53 +0000
Manifest this update:     Sat 10 Oct 2026 03:00:53 +0000
Manifest next update:     Sun 11 Oct 2026 03:00:53 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: rUN1cNzC9uzT8+GQlYpAzARRYvmVoru1PGW8b9mNHAQ=)
                          2: 9NC9VZWVXCDGXS-Gbz2sbEpud3w.roa (hash: ENTPA3eKA+o83CbO6DLdaT2bnskiGmTmI748T5YuAPs=)
                          3: E-bHCsYrW7SrEgoszTkYjWaBUl0.roa (hash: SQvcR4616bSFv3T1JdnviQPzodPyTLJ2qwgGIvoGyQQ=)
                          4: dx_EmdaCtCk3lPgY9GHpXyywHN4.roa (hash: A9UJpCPfL7hO2rNlUxE5iQopLk2eq6WPtVOcMxT85dU=)
                          5: jlFVDqu5eEvY4hcppuGoxG329Xk.roa (hash: sg7bhA6MrODM/82hHvHec0CZxFeKMYnKwUZdeRQd/VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:c1:9c:91:aa:38:9e:c7:e4:00:7b:7e:68:8e:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Oct 10 03:00:53 2026 GMT
            Not After : Oct 11 03:00:53 2026 GMT
        Subject: CN=c08e6745d242b7bdc0299c4c547c6997b4da864d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:01:02:48:41:ae:0b:01:e0:97:72:1d:aa:
                    c0:7f:19:c8:71:76:f1:d3:43:91:fc:65:f9:41:ee:
                    67:f8:47:8d:06:b0:e4:ac:cc:64:2e:b7:af:8d:2a:
                    90:39:c6:6b:1b:45:73:c7:e5:b0:33:2b:7a:f1:24:
                    32:38:05:10:f6:13:f9:c3:b4:78:70:cc:79:b0:f4:
                    af:4a:86:6e:11:a3:49:f0:82:53:2b:93:55:3b:f7:
                    90:a1:b0:03:ff:cf:7c:5d:46:9b:06:3a:76:d1:88:
                    a8:ff:dd:41:39:87:10:3b:2d:37:7d:e0:13:5c:f9:
                    52:db:c8:7d:b3:ce:fe:b2:6b:d6:5e:a6:9e:81:59:
                    a5:c6:2b:9b:01:8b:f9:4f:e1:6c:c9:7e:c9:62:4b:
                    06:74:c4:a3:b0:69:b1:1b:a9:00:48:cb:21:8f:43:
                    79:59:30:f2:e4:c0:34:c1:10:d5:1c:50:5f:d1:0d:
                    c7:da:c8:e8:7a:0e:7b:51:72:01:30:ab:6c:4a:81:
                    b7:d7:6e:68:c1:02:40:fd:4c:45:00:b6:ac:b5:82:
                    34:44:02:05:61:6c:76:12:92:8a:d6:db:80:2a:40:
                    3b:c1:ec:b8:f8:4c:55:5a:51:00:fe:f6:8a:0b:4f:
                    44:67:e5:d8:c5:ae:de:8d:9a:25:5e:cc:30:a4:83:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8E:67:45:D2:42:B7:BD:C0:29:9C:4C:54:7C:69:97:B4:DA:86:4D
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:34:c8:ae:bc:f1:7e:f6:1d:35:fd:6c:14:98:33:6b:22:53:
         07:f1:6e:80:6e:54:3f:86:28:80:37:48:16:06:ad:68:03:cb:
         d3:0a:87:42:9c:93:8c:55:c7:77:a6:57:06:11:81:a8:af:80:
         cf:15:fb:33:76:0a:fd:ef:da:64:92:f9:26:41:28:96:c6:92:
         95:01:9b:e4:d0:a8:12:3e:e8:4b:4d:47:73:97:f1:5d:f3:14:
         1b:90:be:b9:e7:2d:5c:af:19:20:a1:2f:4e:aa:52:a8:19:55:
         11:91:e1:69:33:99:89:42:71:d1:7d:48:68:0c:f8:09:35:3d:
         27:20:11:c3:d5:73:7c:ee:a2:7d:26:32:6b:27:0a:c4:07:47:
         29:94:04:ad:63:4c:7c:35:5f:4d:24:23:20:97:5a:2a:5d:66:
         6e:bd:17:74:20:01:3a:f0:1c:03:7e:3a:76:b4:c3:a6:6b:2c:
         81:8a:65:9c:56:58:84:f9:2a:cd:cd:0d:e2:21:01:f5:a3:09:
         5e:24:b4:2d:e5:50:dd:8b:7e:9f:95:a0:c0:f7:2e:25:f5:0d:
         8b:98:a4:a0:34:e0:25:5d:b1:c8:0a:df:8a:41:70:46:78:89:
         f8:ee:4a:06:ce:d0:90:b1:80:e8:c1:1f:e0:9f:66:25:cc:fa:
         20:c8:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 09:56:51 2026 by rpki-client