Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File:                     9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier:          xn3PyeVN4GF9P2GGTV496sX8vHRobqxnoQUrPYJeBcg=
Subject key identifier:   9F:B8:9C:13:64:46:49:40:2D:EC:B2:23:89:9C:6D:3C:F9:60:5B:5A
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer:       /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial:       01A000CA8C92905ACA605197AC2E25195443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number:          1A09
Signing time:             Fri 14 Aug 2026 15:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:09 +0000
Files and hashes:         1: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (hash: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI=)
                          2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: h4R75aeUwbF8qFqz9CGH5YlWsviKk6iVy7Xww2imjts=)
                          3: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (hash: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:8c:92:90:5a:ca:60:51:97:ac:2e:25:19:54:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
        Validity
            Not Before: Aug 14 15:01:09 2026 GMT
            Not After : Aug 15 15:01:09 2026 GMT
        Subject: CN=9fb89c13644649402decb223899c6d3cf9605b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:7d:a7:0a:bc:96:ae:b2:a9:a2:28:b1:6c:
                    c6:0b:53:7a:45:c2:54:e2:8d:87:93:a2:97:1f:b1:
                    b1:48:32:f3:ca:28:97:df:7f:c1:f2:6b:9d:7b:58:
                    8e:ce:1d:8d:fa:18:b2:e0:8e:b1:b3:4f:20:cb:9a:
                    ba:32:72:af:5e:02:ac:61:95:91:64:fc:08:8c:19:
                    79:73:d8:2d:c4:17:7d:f9:ab:9f:3b:a1:6b:95:51:
                    4b:cf:ed:f9:c9:f6:d4:9f:97:d5:84:45:63:ea:19:
                    42:99:aa:4f:16:a9:07:f9:e3:87:ba:54:db:e4:8b:
                    e8:c5:a0:fe:52:6b:23:7b:b5:fd:08:f2:c6:d5:c4:
                    4a:b2:57:80:b9:cd:21:04:7f:42:de:99:10:e8:f5:
                    c7:e6:24:c3:70:46:b8:6e:68:68:93:14:c3:a2:91:
                    19:f1:ff:3a:f5:5c:fb:a7:d3:9c:7e:e7:7a:65:38:
                    05:2e:95:16:e1:af:d1:52:6b:fe:dd:52:aa:7e:b9:
                    5d:8d:2a:9f:3d:76:9c:c6:46:cd:e5:a5:18:1f:26:
                    87:74:fd:60:af:d8:6c:07:1e:f7:60:4a:38:7d:81:
                    14:73:8c:a0:01:37:c0:df:6b:55:be:30:94:e4:8b:
                    b9:6c:c8:38:e9:06:d0:21:7f:8c:f1:95:bc:09:09:
                    b5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:9C:13:64:46:49:40:2D:EC:B2:23:89:9C:6D:3C:F9:60:5B:5A
            X509v3 Authority Key Identifier:
                keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:50:17:76:db:6c:dd:0f:0b:ba:fd:69:02:63:8d:cf:70:72:
         9d:ee:c1:14:d5:a7:1f:35:58:5d:03:a1:1e:5c:2f:2e:52:bd:
         8e:ac:6f:8a:f5:eb:a6:ff:d9:fe:ae:a7:f9:d8:87:c1:69:f0:
         aa:32:f9:ec:4a:93:08:68:c0:37:e6:09:79:90:4b:5c:0f:cb:
         fa:75:5f:d4:49:3a:51:a7:18:3c:11:90:53:65:72:0f:c7:72:
         7b:91:8a:58:a1:44:49:0f:bf:df:1c:7b:59:fb:5a:c9:ab:ab:
         91:fd:77:51:32:7c:80:43:37:42:1f:30:07:04:71:33:06:ff:
         ce:d0:0f:59:66:11:f5:e9:17:54:c2:9a:55:d7:23:ae:c7:4d:
         a4:71:cc:e1:e1:6c:4c:c8:a5:ba:31:cd:4e:af:c2:e6:7a:12:
         94:d5:c5:0a:f5:ba:82:31:22:d1:da:22:a2:1f:ff:00:76:7b:
         71:46:1c:a3:1e:96:46:44:19:40:e3:c0:dd:5e:d9:88:99:d9:
         3c:1e:67:db:9f:12:a5:c9:9c:d6:19:13:77:02:10:70:e5:0e:
         58:a0:b6:04:f6:2e:e4:63:cd:d6:03:e7:46:b3:ca:44:26:f5:
         dd:3e:a4:61:54:ce:47:09:32:73:01:39:0f:08:b2:e0:70:a7:
         67:16:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:52 2026 by rpki-client