Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
File:                     mcFmTbj325Ln1EZQdic5W8EH3V0.mft (raw, json)
Hash identifier:          epBHY3rjeJNmxTs1h0gw2KZpVFLAhzqXVkeLRUC0+cA=
Subject key identifier:   4F:AA:33:2C:D7:A6:1E:AA:B7:8A:99:DF:CE:61:04:59:B0:B9:FD:FE
Authority key identifier: 99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D
Certificate issuer:       /CN=99c1664db8f7db92e7d446507627395bc107dd5d
Certificate serial:       01A00281A43C9EB2074F3133CB65535D0F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
Manifest number:          09
Signing time:             Fri 14 Aug 2026 23:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:45 +0000
Files and hashes:         1: L3SCpmXJBeENQlngFVsPO7y4j9I.roa (hash: TNxBSmMFYjhX4xx6VIgUZfTdujBVV7wlaoUOw5FQgSs=)
                          2: mcFmTbj325Ln1EZQdic5W8EH3V0.crl (hash: 9fGDQHvlz03o84PFQmRQGzA9pi9OST5ixjs+cOrwxUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:a4:3c:9e:b2:07:4f:31:33:cb:65:53:5d:0f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99c1664db8f7db92e7d446507627395bc107dd5d
        Validity
            Not Before: Aug 14 23:00:45 2026 GMT
            Not After : Aug 15 23:00:45 2026 GMT
        Subject: CN=4faa332cd7a61eaab78a99dfce610459b0b9fdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:69:6e:8c:6f:0e:52:c5:46:a2:71:3e:e3:
                    43:82:8a:4b:6a:7d:67:8a:07:ff:d0:a4:25:6c:d5:
                    bc:c0:c4:8e:3b:f2:92:4a:88:cc:b0:d5:22:32:e0:
                    54:3b:e0:13:cf:1d:bb:26:d5:d2:d9:95:a3:35:de:
                    14:d5:7b:ee:33:7f:9b:c9:2e:09:c4:00:d9:c6:54:
                    5b:ac:d7:ef:94:3e:2b:e2:67:94:66:bd:6c:84:b7:
                    05:aa:c2:1f:86:98:9d:60:ab:02:1e:c7:21:34:ce:
                    5b:cd:29:21:dc:6f:c5:4f:ac:ca:af:83:cc:d6:62:
                    4a:e6:35:fd:a0:4f:64:93:17:e6:25:f2:9d:35:c9:
                    78:d8:a6:f0:fd:67:35:24:be:e0:84:13:b6:91:1b:
                    d8:59:75:e7:20:ce:0e:3c:70:82:c2:3c:1b:86:b6:
                    fc:40:e9:32:c3:6e:e4:06:89:a0:78:f7:05:48:7e:
                    de:2e:26:3e:13:94:71:42:cb:f3:c9:99:3f:66:af:
                    6d:ea:c6:e4:3f:1a:b8:4d:c6:05:16:7e:55:6f:b9:
                    fd:14:56:46:32:be:51:2c:be:44:de:92:31:0a:70:
                    06:01:b9:37:57:bb:69:0a:49:04:5e:04:c6:5f:c6:
                    f5:a1:3b:5e:40:84:d7:25:19:ed:8b:68:0a:e1:0e:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AA:33:2C:D7:A6:1E:AA:B7:8A:99:DF:CE:61:04:59:B0:B9:FD:FE
            X509v3 Authority Key Identifier:
                keyid:99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:ac:a5:9a:eb:11:3b:63:91:00:2a:55:78:aa:ad:ca:21:d7:
         6a:89:ca:1e:aa:d2:4f:c5:41:e2:32:81:70:ca:0a:85:73:f0:
         f7:c2:e4:4b:84:46:bf:a0:10:71:89:57:ad:35:92:ba:5c:a9:
         9a:7e:e9:8e:38:e5:f2:c5:85:e8:d8:95:b5:f9:d1:0a:af:f2:
         54:d8:1c:21:d1:25:d4:35:16:a6:e8:cf:64:53:70:59:a2:57:
         18:05:06:a6:8e:b8:e9:be:f8:46:9e:72:83:2a:c3:62:1a:e2:
         3a:df:01:b5:91:1e:73:a9:df:d2:50:fe:5b:70:74:22:49:bc:
         92:4a:c7:5a:eb:d0:d4:76:c4:be:01:1e:88:8d:78:2b:a5:1d:
         a3:7c:56:9d:d2:b0:0f:9f:b3:ef:57:84:7f:af:f6:d1:ff:28:
         f9:07:b0:3b:d6:cd:3a:07:7a:0a:c5:7f:d0:79:23:40:9e:c6:
         d9:ad:cb:7d:76:54:50:32:0a:22:fc:9f:f1:a8:0e:5e:7f:57:
         b7:d9:7d:e7:ae:2c:19:01:5d:96:83:84:5b:0a:64:5e:bb:c0:
         c3:a1:31:fa:64:3f:33:cc:92:ae:5f:f1:3d:32:3c:19:0b:3f:
         2d:66:81:59:8b:e2:94:18:63:dd:a5:72:ff:d3:29:33:a3:f0:
         89:73:ce:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:15 2026 by rpki-client