Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
File:                     9vqbUoZNztDV7ON-dDciSyVCJIs.mft (raw, json)
Hash identifier:          5lj/C3d17tYPe5OUjzf5+v5gQ7T8uEM+fiM9Rzsloc4=
Subject key identifier:   7E:37:45:32:5E:6E:B1:DC:59:FE:48:AB:A0:F6:02:22:10:DA:46:4F
Authority key identifier: F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
Certificate issuer:       /CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Certificate serial:       01A040F2EE267FF420FDD762A5D7C8FD0B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
Manifest number:          037D
Signing time:             Thu 27 Aug 2026 02:00:57 +0000
Manifest this update:     Thu 27 Aug 2026 02:00:57 +0000
Manifest next update:     Fri 28 Aug 2026 02:00:57 +0000
Files and hashes:         1: 9vqbUoZNztDV7ON-dDciSyVCJIs.crl (hash: c1EO71vNn8ERBtrI2k90wLwl81xSDZ7DK9PJGYKBkpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f2:ee:26:7f:f4:20:fd:d7:62:a5:d7:c8:fd:0b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fa9b52864dced0d5ece37e7437224b2542248b
        Validity
            Not Before: Aug 27 02:00:57 2026 GMT
            Not After : Aug 28 02:00:57 2026 GMT
        Subject: CN=7e3745325e6eb1dc59fe48aba0f6022210da464f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:c9:9c:56:7e:d6:9f:19:72:70:58:46:d4:
                    53:08:1b:89:5f:ba:b6:ab:84:d7:c8:51:14:3b:86:
                    ce:40:eb:18:24:46:68:23:8e:d6:d1:00:3c:75:42:
                    ed:e6:a3:55:84:82:aa:3a:7b:e2:62:f2:85:10:5e:
                    7d:5b:dc:bd:3b:db:9c:c2:97:64:b8:62:25:a7:e6:
                    62:c9:49:59:e8:7a:ea:8a:f8:2f:25:d0:43:5b:ed:
                    94:d7:ee:fc:01:02:f8:8c:19:94:4b:2f:5b:91:fb:
                    d3:0f:3d:9c:36:5d:5f:3d:cf:58:44:e3:a1:60:a6:
                    17:30:66:48:78:28:c1:20:c8:8b:83:56:d2:04:01:
                    ad:04:e6:ca:d1:ca:61:c3:dd:e9:04:fd:b0:fa:06:
                    36:54:16:b4:4d:b6:cc:04:e2:3f:2d:e4:c0:0b:1c:
                    0e:00:cd:72:3f:60:fc:ca:ea:e7:73:40:e9:3e:10:
                    15:cb:9b:11:e3:79:4b:61:fc:15:b0:02:fd:a1:5a:
                    d8:a2:65:dd:db:35:74:0d:8a:be:db:7a:2f:bb:67:
                    91:60:ee:86:3a:d6:f4:86:00:ca:1a:30:ac:18:af:
                    3e:ee:a2:a2:a0:f5:ec:8d:91:88:4d:f0:38:c8:bc:
                    53:25:82:48:bb:7d:35:03:5b:81:c8:ff:1c:72:01:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:37:45:32:5E:6E:B1:DC:59:FE:48:AB:A0:F6:02:22:10:DA:46:4F
            X509v3 Authority Key Identifier:
                keyid:F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:6f:70:36:83:a8:d9:62:a5:73:34:43:3a:0d:e8:28:95:
         2c:f9:ff:ee:87:63:c0:48:30:c3:d9:4c:1c:28:c4:e2:a8:7f:
         1c:3b:d4:1e:92:13:d0:8d:0d:f2:1d:38:af:0f:37:f5:87:ba:
         6a:d4:40:6d:63:95:30:37:1a:21:e4:d9:93:f3:68:1b:02:e8:
         97:b4:37:1c:b1:f7:0a:d1:52:1b:68:04:cb:97:41:81:b4:c8:
         77:db:03:d4:f2:05:9b:cb:05:c3:e3:43:ec:54:6c:76:8b:f6:
         ac:b0:44:ab:8f:66:1a:1f:4c:43:40:c5:9e:7a:34:c1:7f:72:
         a3:d4:55:e1:7f:a4:36:54:68:fb:6e:d3:36:9d:d4:bb:93:41:
         37:d4:e7:0e:93:dd:b7:c8:2b:f0:a2:e7:68:e9:07:c4:70:b9:
         f5:dd:c0:1d:21:83:8f:44:9c:7b:0b:c0:4b:d1:3b:9e:35:ae:
         a5:d5:5b:ac:67:1d:87:a4:b0:ab:2a:47:57:ec:6c:9f:e1:7f:
         2b:22:02:68:11:e7:31:77:e6:81:f1:8e:13:6c:5c:11:d5:93:
         1d:8d:63:cd:bc:19:66:cc:25:5e:ac:8c:25:18:61:ed:de:b5:
         81:01:51:d7:60:87:11:0b:06:b3:8b:bb:35:7a:9a:59:f9:82:
         18:1a:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:53 2026 by rpki-client