Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File:                     9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier:          I63Jo3YnIJJ38DyB9VaAytZEhcCCqehOaOovm3CYRmY=
Subject key identifier:   E6:B4:19:D9:4F:15:ED:8B:3B:41:2E:D6:D1:D3:BA:61:DA:22:CD:D4
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer:       /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial:       01A00101115C591C826EFC914C9BE70F122E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number:          086D
Signing time:             Fri 14 Aug 2026 16:00:42 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:42 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:42 +0000
Files and hashes:         1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: dGuXirxUn6JjqSQakcfmWHYH2Cy3iXeHeLRHc25K/6g=)
                          2: b1tEVuM57ah52OvUq3Fvdd-4XkA.roa (hash: Odyf//1QBuLxW+qHnAmLWghjISD9y11hRldd+HjGtOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:11:5c:59:1c:82:6e:fc:91:4c:9b:e7:0f:12:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
        Validity
            Not Before: Aug 14 16:00:42 2026 GMT
            Not After : Aug 15 16:00:42 2026 GMT
        Subject: CN=e6b419d94f15ed8b3b412ed6d1d3ba61da22cdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:a5:a0:2d:6b:89:76:53:a5:b7:5a:f2:21:
                    96:13:4b:f1:d8:27:b4:44:0e:5c:4d:ce:d5:a1:cf:
                    c0:59:db:29:fd:af:64:41:7a:5e:69:6c:8f:4e:9b:
                    8a:eb:a7:23:cf:90:0b:34:75:5f:05:ba:93:20:fd:
                    fe:c0:3e:bd:dd:25:83:bb:f3:10:62:46:25:12:0f:
                    27:18:ff:1c:31:58:8c:5e:a2:69:d4:65:f9:95:d1:
                    8e:12:ae:d9:db:a5:70:f2:b8:04:63:71:5a:11:4e:
                    95:f3:ef:80:c2:86:f2:a0:38:d8:f6:a1:30:cf:cb:
                    a4:9d:7f:eb:d4:97:f5:d6:ce:43:28:d3:49:93:b0:
                    43:7e:ad:04:70:8a:0c:05:d0:d6:26:f0:68:26:cf:
                    b7:1b:a9:06:b3:db:b5:bb:b3:09:a2:9e:70:49:00:
                    49:29:9c:37:30:a2:98:66:dc:52:ee:32:e6:79:80:
                    e7:41:77:ed:e2:83:6c:29:8b:6c:a7:11:f5:d0:9b:
                    88:4f:5a:62:94:b5:46:73:45:98:9b:4f:3d:ff:10:
                    db:fb:e6:c8:08:07:d4:f8:66:4a:26:e2:6c:6e:16:
                    0d:6f:36:41:01:49:85:71:3f:05:c8:9a:47:f1:1f:
                    09:53:b8:4e:ec:7d:7b:27:04:00:45:5e:13:46:2f:
                    f1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B4:19:D9:4F:15:ED:8B:3B:41:2E:D6:D1:D3:BA:61:DA:22:CD:D4
            X509v3 Authority Key Identifier:
                keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:2d:3e:65:c0:d2:a5:94:05:af:68:5e:7b:fe:2b:44:52:38:
         d2:82:84:d5:95:b6:08:0a:8b:de:03:1c:68:c3:09:08:b9:21:
         ee:70:ed:22:6f:9d:a7:7f:27:04:b1:c0:5d:ac:ce:4e:1e:41:
         25:59:3d:fa:9f:0a:06:f8:3d:c5:ce:b1:72:af:8e:75:9f:87:
         55:e9:71:4d:56:07:f6:32:a4:7f:84:5c:52:e9:f6:09:a7:25:
         72:46:b0:4b:41:a0:1e:8e:df:b4:8e:37:ac:49:a1:55:d1:be:
         7a:19:64:45:26:de:d0:7b:0c:e6:b4:bb:c2:f2:93:a7:c6:eb:
         0c:b0:a0:87:07:32:33:a8:b3:df:8c:b9:ea:64:d7:53:c7:96:
         a8:e1:1d:21:93:f1:42:a0:07:eb:ae:30:9c:42:a8:7b:1a:d0:
         6d:fc:ef:6f:64:17:41:b9:be:a7:d8:af:d7:74:de:56:e7:d7:
         8f:11:34:18:23:cb:54:94:21:1b:c9:92:e1:62:10:08:a6:2b:
         5c:01:10:01:12:7c:86:17:73:7a:94:e7:4a:a7:c0:5f:28:18:
         25:8d:fc:64:be:c8:2a:60:eb:79:06:1b:d7:7d:89:c1:ed:e7:
         23:94:97:8c:81:dd:45:06:b4:81:63:0b:a5:62:fb:38:ec:e3:
         9e:89:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:36:00 2026 by rpki-client