Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
File:                     CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft (raw, json)
Hash identifier:          cWIQ0mtg/LAT5Gh+gMAskdYJ8zOZ6d3tVuRdQLty8Ek=
Subject key identifier:   A9:09:B9:BC:36:1F:83:08:E2:C5:87:37:E7:9F:FD:43:A7:72:81:A6
Authority key identifier: 09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30
Certificate issuer:       /CN=0947bf06ffd6aa837371666ac4fb485c3322af30
Certificate serial:       019FF9116EC208E539124A966200F3EE5D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
Manifest number:          F9
Signing time:             Thu 13 Aug 2026 03:01:36 +0000
Manifest this update:     Thu 13 Aug 2026 03:01:36 +0000
Manifest next update:     Fri 14 Aug 2026 03:01:36 +0000
Files and hashes:         1: 1eP5CXO1PBIl9QsPThVXxpFKkiI.roa (hash: KZ7tVteP3lGVX8UW1l2BZ5G++9dxomswpEwb1weu7Qg=)
                          2: CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl (hash: pLURn7t29T/cA+GCIPaWK6BEGp/G1y3ds+akPuPRlmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:11:6e:c2:08:e5:39:12:4a:96:62:00:f3:ee:5d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0947bf06ffd6aa837371666ac4fb485c3322af30
        Validity
            Not Before: Aug 13 03:01:36 2026 GMT
            Not After : Aug 14 03:01:36 2026 GMT
        Subject: CN=a909b9bc361f8308e2c58737e79ffd43a77281a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:8a:a1:ad:78:ae:a7:c0:36:59:e4:24:13:
                    a9:ce:83:52:18:4c:70:63:68:73:d6:58:1f:dc:c9:
                    6f:20:9f:7b:99:23:93:3d:85:6a:55:31:a1:ca:01:
                    ba:d9:59:97:34:b4:5f:96:95:cb:38:f3:30:e4:14:
                    3f:cf:a8:1d:2f:2c:9f:77:20:af:5c:f3:ec:46:09:
                    02:16:44:8b:1b:89:80:26:34:ae:5a:75:94:d6:7a:
                    01:08:01:05:ae:e2:9c:29:72:90:4b:36:c6:c4:67:
                    b7:58:25:e6:29:fb:e1:e9:9c:a6:e7:d9:d9:ce:63:
                    a7:bb:a9:6c:58:2f:ab:3e:2b:93:bf:37:9b:5e:a6:
                    f4:69:69:ac:8e:27:c8:74:d6:ee:78:d2:f7:6f:1b:
                    53:26:5a:f7:6f:18:00:2e:4c:80:ba:b2:56:5c:1a:
                    99:fa:d9:f2:50:45:01:38:0e:80:d4:b4:8f:14:63:
                    d5:02:94:ac:bb:46:44:0d:88:61:be:b8:aa:6f:45:
                    76:ed:2e:30:a2:d4:c3:e9:b6:42:e2:cf:3d:e2:c7:
                    91:1e:c1:11:c5:04:20:ae:d9:cf:c9:c8:54:09:fe:
                    63:cf:9b:fe:c2:0b:dc:cb:38:c2:63:3d:68:f3:0a:
                    90:e6:17:b3:e3:e5:0f:84:84:15:85:ed:86:32:df:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:09:B9:BC:36:1F:83:08:E2:C5:87:37:E7:9F:FD:43:A7:72:81:A6
            X509v3 Authority Key Identifier:
                keyid:09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c4:96:78:7e:f9:6e:21:b9:19:7a:3a:a1:03:ae:3c:81:55:
         f8:34:c4:d2:57:7f:ff:1c:ad:df:6c:9b:dc:0d:d1:68:92:32:
         72:84:17:a5:0c:df:1e:69:04:6d:b9:5e:5f:c7:8b:e7:6c:65:
         45:8f:d7:35:ae:e8:bc:cf:88:e9:41:a3:5c:0f:88:02:09:e8:
         cf:d3:11:1f:54:c2:2f:9d:bc:53:52:e0:6b:0d:59:1a:fc:40:
         c4:f0:c8:f9:89:0c:93:4f:4f:b3:89:32:d1:fd:e4:aa:95:9b:
         a0:f1:17:25:92:c4:03:17:5c:f9:4c:99:37:46:db:66:bb:67:
         b3:ad:02:65:89:a3:12:14:1a:76:fd:14:e9:72:59:ee:9a:a5:
         2c:f4:1e:58:b6:9e:9c:be:10:f7:e3:dd:cb:f0:f5:83:53:90:
         31:fc:cd:95:63:d4:60:49:01:27:88:71:0b:8d:8f:3f:3d:46:
         67:dd:3d:38:d0:bb:ce:cf:b1:0b:ec:b0:2a:66:aa:25:ba:02:
         2c:f7:9b:9b:3d:7d:d7:68:e4:bf:c0:94:48:ca:ba:03:ad:4b:
         b5:2e:dd:a8:bb:46:e8:24:12:b3:0f:48:e6:c7:d1:68:45:1c:
         eb:2d:fe:bc:8e:22:f0:45:a1:f2:b4:bb:80:59:4d:a9:ff:df:
         35:0a:4a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:19:02 2026 by rpki-client