Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          Hw+UfsnuxpRdUI6+0V+bCi1RJR+hL9sc2bgkACWqwT8=
Subject key identifier:   CD:D4:6A:D4:39:4E:B5:CA:F5:5C:D7:E8:73:19:CD:2D:D5:0F:B8:41
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01A102B652080A81508938FCFE8FDD9A98D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          187A
Signing time:             Sat 03 Oct 2026 17:01:05 +0000
Manifest this update:     Sat 03 Oct 2026 17:01:05 +0000
Manifest next update:     Sun 04 Oct 2026 17:01:05 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: yDGT90Z4YfmMU4wsD5tAcEz5kOALpVrp387778lEnj8=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b6:52:08:0a:81:50:89:38:fc:fe:8f:dd:9a:98:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Oct  3 17:01:05 2026 GMT
            Not After : Oct  4 17:01:05 2026 GMT
        Subject: CN=cdd46ad4394eb5caf55cd7e87319cd2dd50fb841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:d0:9f:cb:8a:4c:1a:03:81:09:af:53:f8:
                    58:90:a4:c2:cc:24:a5:c5:d4:53:64:ce:61:55:81:
                    9c:43:bb:23:aa:af:10:af:bd:af:c6:61:8c:8e:34:
                    46:a5:05:d4:df:d7:fd:16:b1:c0:66:ff:7c:76:db:
                    a7:62:71:48:dc:b3:c9:6c:81:e2:ab:36:98:e7:f5:
                    42:3d:33:08:fa:4a:32:36:25:63:41:39:b8:85:a8:
                    bb:44:92:d1:d0:2b:9d:62:25:03:3c:75:92:73:fd:
                    f6:bb:93:55:a2:12:da:39:65:94:16:1e:63:e7:87:
                    bf:6b:f1:3b:0d:cb:cd:26:3e:10:d2:61:32:db:33:
                    65:d2:99:6d:f7:58:f7:0c:96:b9:6d:7d:9d:ae:81:
                    dc:7f:f9:32:f6:68:cb:61:0d:1b:8c:96:c2:73:a6:
                    c0:02:e2:80:70:98:7d:ba:cf:27:49:15:8b:56:67:
                    99:70:6b:cd:e2:2e:10:0b:95:bf:46:f7:be:d9:d2:
                    7d:67:94:89:06:48:5c:99:3a:92:2a:2a:67:ef:2f:
                    e5:21:b7:99:60:e8:c4:4d:07:85:2d:c1:b0:6f:a9:
                    47:33:69:18:1b:73:26:3a:88:08:7a:4e:ef:c9:56:
                    34:2b:88:5c:54:7d:d9:92:0a:19:15:44:9b:99:8e:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D4:6A:D4:39:4E:B5:CA:F5:5C:D7:E8:73:19:CD:2D:D5:0F:B8:41
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:14:ad:87:84:80:7d:a3:8e:8e:2e:15:8a:2c:94:c0:11:aa:
         20:f5:17:30:46:98:dc:a3:e4:70:1e:db:8a:ec:ea:6a:97:6d:
         94:ca:ff:d9:4a:c1:81:bd:1e:d8:3e:78:3e:ba:4b:72:44:b7:
         f2:bb:b2:c5:bb:32:84:a4:5d:4b:c1:10:dd:d7:7b:8f:be:1b:
         9e:5c:a6:4e:d5:dc:86:63:a4:30:94:de:2f:74:b2:7c:4f:f0:
         b7:5d:f6:86:bc:fe:8b:0e:f2:cd:bd:58:22:93:b0:ba:04:49:
         6e:04:6a:af:75:0a:16:00:76:2f:29:6a:f6:00:27:bb:51:dc:
         d6:9f:3d:8e:a5:4a:c5:68:e8:ef:e6:a0:a6:71:22:42:fd:50:
         96:40:57:1d:11:5a:8b:5e:ae:fd:f6:e8:48:bb:17:5a:7b:0e:
         de:00:84:0d:52:2e:2d:0e:53:f4:35:b1:c7:21:bb:ce:d8:46:
         5c:34:7e:9d:cb:1d:e6:03:26:7a:ea:6e:1a:e2:f2:96:ec:c9:
         c4:0d:f2:5a:da:8b:f1:d0:20:48:38:9b:0c:78:eb:c5:ed:cf:
         16:e1:7b:ad:7f:0b:72:18:0f:ba:e9:42:ae:88:5b:9d:50:45:
         ff:a7:0f:6c:bb:fe:9d:af:69:e2:1b:bb:8c:54:dc:41:cd:b2:
         af:27:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:45:53 2026 by rpki-client