Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File:                     4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier:          fbwe0JM3CG2JqIMfxErRO5Yw+4i6dPFtK8clJBRPgTQ=
Subject key identifier:   6C:C9:4B:D2:3D:9C:58:22:7E:81:E1:0C:18:83:92:F6:6C:AA:BF:AE
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer:       /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial:       01A0009347DAD6EF4E3E8BC13254806CAB95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number:          0D5B
Signing time:             Fri 14 Aug 2026 14:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:47 +0000
Files and hashes:         1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: 6F2rSq/X37XJBvv09/RBqqNWUFH7qxWH3DfePdE5NlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:47:da:d6:ef:4e:3e:8b:c1:32:54:80:6c:ab:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
        Validity
            Not Before: Aug 14 14:00:47 2026 GMT
            Not After : Aug 15 14:00:47 2026 GMT
        Subject: CN=6cc94bd23d9c58227e81e10c188392f66caabfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:2f:d4:e3:72:ce:9f:e9:28:96:1b:fb:ae:
                    92:a7:94:76:35:bc:d9:1e:be:de:2e:64:79:52:1a:
                    49:bb:b8:75:c7:0e:7b:33:42:eb:f1:e7:26:05:16:
                    a2:43:8c:11:19:18:37:c3:ac:54:ba:c9:58:6a:aa:
                    56:ac:cb:33:69:61:ab:06:c3:8e:85:67:4e:a0:10:
                    1e:23:93:3c:a8:cd:3d:b2:d6:8c:93:ee:5b:2b:9e:
                    1e:da:25:6d:0c:b4:39:70:fe:69:ad:b9:ab:f7:87:
                    c2:94:d8:f7:eb:1f:e5:e6:cb:26:df:f0:d5:d3:70:
                    a6:58:40:8e:a1:55:e1:05:d6:b8:de:e2:6a:ae:0d:
                    bd:90:78:60:94:bd:ac:f7:52:37:b1:5c:fc:d6:46:
                    6a:10:37:93:13:12:ef:dd:7f:85:25:62:38:41:59:
                    a0:fe:89:1e:70:ed:03:c8:24:34:50:f3:94:9d:aa:
                    d4:70:66:d6:44:ec:fc:85:23:fb:48:e9:07:a2:b4:
                    35:7f:43:88:a8:b0:54:4c:79:b1:72:2d:47:9b:9f:
                    13:a3:87:6a:88:7d:23:2a:e0:14:8e:bb:24:3c:6f:
                    b6:15:e5:56:90:2a:0d:28:d8:15:79:18:80:de:84:
                    a3:ca:32:8a:f9:dd:59:a6:20:1d:d2:c2:93:5c:fe:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C9:4B:D2:3D:9C:58:22:7E:81:E1:0C:18:83:92:F6:6C:AA:BF:AE
            X509v3 Authority Key Identifier:
                keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:48:03:37:2f:49:24:f2:a5:df:b1:a4:e0:3b:e8:ad:f7:9f:
         62:af:b9:af:ab:47:d9:06:83:f9:35:0d:aa:08:51:1f:18:47:
         f3:6a:36:c8:f2:55:c6:1a:c5:6f:da:04:3e:7b:3e:7f:ea:23:
         23:cc:7b:4e:eb:5d:60:05:68:9b:00:94:f2:ee:34:dc:82:ce:
         85:bc:41:9d:9f:c7:59:15:58:55:d1:36:20:b5:0c:07:40:be:
         d6:09:e8:66:8f:bf:d5:73:cb:bb:6c:21:0f:e4:f0:0d:d2:7d:
         75:bc:be:cb:ea:87:9c:f6:43:32:7d:ab:d7:9c:2d:c6:f7:c3:
         b4:0a:9d:21:fb:4f:52:67:0d:3e:84:74:51:f5:f8:3a:bb:20:
         1d:8f:fa:6f:da:18:06:d1:38:3c:c7:24:74:11:03:bf:4e:b5:
         f4:40:9e:02:5b:12:e6:80:f4:78:7c:36:cc:7e:a6:3a:bb:ae:
         b9:9d:18:66:59:78:6c:4a:f6:59:45:f8:c8:53:19:1b:f9:ee:
         22:7f:e6:d2:b8:16:90:15:53:0e:74:5b:06:8c:60:e8:39:56:
         fb:0a:bf:10:46:f7:6d:0f:03:ee:43:a6:4a:ae:1f:c4:66:b9:
         8d:7f:df:04:b4:7c:55:c7:fd:64:5d:2a:57:63:16:62:d2:69:
         79:1d:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:40 2026 by rpki-client