Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          j7F/yhpyUnq6UNhxNaYhX8pMVhGEfZK9lIWJEJOayWw=
Subject key identifier:   59:A0:38:F8:4B:EC:13:6F:FB:F0:2D:C3:24:A7:C5:6F:D5:81:62:94
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01A0D64C00479DA1EF4463724EB296A8E816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          1863
Signing time:             Fri 25 Sep 2026 02:01:40 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:40 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:40 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: NScCMqXQ/6kK5nsqrUdZktkbplw1GKKdBOQnhxnKBFc=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4c:00:47:9d:a1:ef:44:63:72:4e:b2:96:a8:e8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Sep 25 02:01:40 2026 GMT
            Not After : Sep 26 02:01:40 2026 GMT
        Subject: CN=59a038f84bec136ffbf02dc324a7c56fd5816294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:91:65:d5:d9:ad:ca:f2:88:3a:ba:10:c5:
                    9f:46:57:89:63:c9:7d:04:28:11:c2:a6:4c:4c:05:
                    0d:f8:10:22:67:24:83:f1:ee:04:bf:fa:4e:ca:5a:
                    44:6f:53:fc:19:c4:a0:a0:91:f1:16:e7:05:88:7a:
                    14:cd:2f:f6:41:bb:56:44:ac:d9:46:27:40:10:cd:
                    32:92:15:90:3a:ad:b4:76:6b:bf:bc:a7:bc:2d:eb:
                    d1:fd:a6:e8:d7:2a:b4:b8:ff:7a:8b:dc:3f:6c:ef:
                    e9:aa:c8:40:48:bf:7d:fa:9d:e1:cd:b1:e8:92:9f:
                    72:fd:31:83:43:76:71:f7:7d:2c:17:fa:a9:8b:84:
                    87:96:23:59:9d:77:92:cf:84:8e:89:7b:7c:0c:0a:
                    15:73:58:c4:41:33:97:01:31:bd:9c:8d:f6:b6:bf:
                    4d:8e:d8:cc:c0:12:a7:b2:89:89:02:b3:2e:9d:51:
                    27:9b:45:4e:b1:35:f9:13:6b:51:72:6e:48:88:72:
                    eb:fe:47:0c:2a:78:40:ad:1a:d1:b2:cf:fe:c0:58:
                    94:32:d1:a5:80:64:d4:ce:80:76:35:e1:da:23:26:
                    61:92:a2:4e:52:58:a7:f4:e7:a0:00:be:cc:a7:13:
                    4e:df:93:ca:01:b4:60:25:0f:ac:1e:fe:80:01:45:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A0:38:F8:4B:EC:13:6F:FB:F0:2D:C3:24:A7:C5:6F:D5:81:62:94
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5c:74:bd:22:10:76:19:04:4b:cb:8d:ce:8d:3c:2b:1d:35:
         bf:aa:4b:5a:8d:a3:ed:42:fa:ef:42:27:5d:cb:77:05:2a:ab:
         10:9e:1c:64:4e:97:92:a3:92:61:ed:11:c9:b5:cc:30:52:9c:
         a4:4d:ac:29:8c:04:91:43:97:d4:46:05:05:20:68:9e:10:b4:
         a9:56:2d:e2:57:0e:31:8c:26:fd:6b:3e:5f:6d:1a:38:30:ce:
         e2:c0:2d:32:a8:4a:d4:65:dd:60:a1:68:ec:7a:b3:cf:34:37:
         83:9f:2a:f7:07:85:c6:e7:eb:d6:1f:36:ff:7d:43:71:39:e4:
         be:d9:28:16:52:58:5a:fe:c6:b5:d4:e1:23:9b:ba:c4:bb:12:
         81:12:38:26:6a:cd:81:25:be:36:92:6c:22:66:a6:81:8b:37:
         5f:e9:52:1d:88:fe:18:1c:d0:b1:f7:7e:f6:44:ee:17:dc:43:
         71:4b:57:cc:74:7f:aa:fc:3e:b5:5b:63:1b:d2:4b:3f:52:b9:
         05:bd:17:3e:a5:d2:16:d6:53:4d:b6:ae:50:ca:df:a5:5c:d6:
         79:ce:7b:7f:a7:c4:85:e1:c7:a2:86:ad:b8:50:53:50:5e:75:
         cc:ae:23:60:33:98:b5:1d:cc:6a:45:ce:24:0e:7d:26:85:66:
         d0:1a:0b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:27:30 2026 by rpki-client