Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File:                     9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier:          ugppFnzVeHehhXDzEUTpntmfTvJVaME3iJnK9EoqQGI=
Subject key identifier:   25:07:EF:69:B6:6D:3D:A3:4E:99:E5:09:33:31:6E:A3:B0:C4:27:97
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer:       /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial:       01A13E263049D282973C41E7E34B6911698B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number:          0F99
Signing time:             Thu 15 Oct 2026 06:00:52 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:52 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:52 +0000
Files and hashes:         1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: gRfDCOS9Yh9HpII4E22YYC+A2SX5w9YUw1RsAuJEbPA=)
                          2: h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa (hash: yzd9rByRC5Jsp/Gy055ZEn4rSEyip4EOwsA55gh4BjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:30:49:d2:82:97:3c:41:e7:e3:4b:69:11:69:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
        Validity
            Not Before: Oct 15 06:00:52 2026 GMT
            Not After : Oct 16 06:00:52 2026 GMT
        Subject: CN=2507ef69b66d3da34e99e50933316ea3b0c42797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:ac:62:4c:1e:c0:32:8b:da:84:05:3a:33:
                    ae:dc:98:7b:92:a0:d7:a1:ed:0f:b6:6d:d0:89:85:
                    f1:85:ef:16:95:33:5b:20:4f:49:ef:03:99:99:00:
                    f0:c4:de:62:89:85:bc:4f:d6:ee:72:df:79:4b:c8:
                    7f:86:57:f9:00:36:71:26:a9:0b:f4:43:38:34:e6:
                    23:41:6a:66:b7:73:79:84:61:95:da:c2:f2:76:30:
                    8a:a3:8c:5c:70:14:3b:97:f2:ab:9c:73:9f:f6:50:
                    6a:5c:4f:d7:9f:57:0d:f0:91:28:47:66:69:c6:61:
                    7e:69:a1:70:37:ab:02:dd:cd:c3:f2:cc:82:35:33:
                    aa:9f:31:e6:d7:06:bd:f9:bf:e9:07:0a:ca:9d:4c:
                    a1:c4:2c:8c:4a:5d:cb:c5:c3:d4:ef:43:3f:b7:34:
                    55:fc:9a:d2:12:d5:0b:bb:e2:72:db:0c:a1:8e:91:
                    81:7a:d3:b8:8e:92:51:fa:84:ae:43:29:68:e0:05:
                    58:bb:0d:9f:a4:bb:f1:7a:40:9f:54:3f:46:b1:d2:
                    21:63:57:f2:ec:f8:64:62:32:a2:9f:e8:48:3e:28:
                    16:bb:f6:d9:23:fe:82:74:20:50:b1:cb:7d:7c:b5:
                    e8:d5:a2:22:e6:e3:8d:07:96:6f:70:56:22:a7:ff:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:07:EF:69:B6:6D:3D:A3:4E:99:E5:09:33:31:6E:A3:B0:C4:27:97
            X509v3 Authority Key Identifier:
                keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:81:b9:9c:96:c4:1e:79:10:18:be:5e:a6:40:cd:da:04:de:
         43:39:5f:87:82:5f:fa:76:10:70:76:7f:44:20:dd:22:f1:45:
         ba:0d:d7:53:3d:1b:22:9c:4d:a9:f4:3a:a3:62:dc:5e:ca:7d:
         b4:5e:7d:6c:23:9d:5b:7a:c8:29:7e:6a:38:0e:5e:2e:dc:9d:
         20:24:e5:09:82:d2:b1:79:2a:d7:b8:db:fb:03:42:c4:a9:39:
         35:ab:b3:95:80:2f:36:91:76:45:a1:ac:45:b2:a2:dd:b1:ef:
         49:5d:0c:74:32:a2:a1:b6:65:b8:21:2d:dc:cc:93:dc:09:2b:
         00:02:c3:6c:11:3a:00:8a:22:20:09:8a:df:ce:59:4e:5b:c2:
         4d:f1:f6:88:26:a5:24:0a:31:ba:f3:56:a3:ae:11:ae:b7:1a:
         6e:29:fc:82:37:c6:37:64:a4:0b:74:97:5e:9a:6c:da:41:2b:
         82:c0:4d:ad:ee:d4:bf:84:7e:7e:5d:0c:41:d5:5a:2c:d5:d2:
         2b:2d:e8:9b:45:0e:fb:a2:05:28:6f:26:c4:ad:a9:73:17:21:
         7c:9d:42:86:75:99:f1:a3:dd:1c:ca:b5:c7:77:44:7f:86:81:
         d8:55:9d:22:93:1e:e1:3c:8a:78:f3:e6:b7:ff:d0:48:e0:9a:
         80:3c:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:59 2026 by rpki-client