Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File:                     m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier:          W0b+hnqsyADPnc0gV3er8Xhgj7LdtnIWwisit9v2PC4=
Subject key identifier:   01:5A:8C:73:26:C6:B6:81:A6:6B:BE:6C:4B:3B:FC:4D:2E:41:05:A0
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer:       /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial:       01A08CE84E10679608D14FA3090D7D2D89D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number:          01DE
Signing time:             Thu 10 Sep 2026 20:00:29 +0000
Manifest this update:     Thu 10 Sep 2026 20:00:29 +0000
Manifest next update:     Fri 11 Sep 2026 20:00:29 +0000
Files and hashes:         1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: dLKbzmBr80539jMV0Cj1p8PhcMm9WF4Lp5IKxt0N4UE=)
                          2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:e8:4e:10:67:96:08:d1:4f:a3:09:0d:7d:2d:89:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
        Validity
            Not Before: Sep 10 20:00:29 2026 GMT
            Not After : Sep 11 20:00:29 2026 GMT
        Subject: CN=015a8c7326c6b681a66bbe6c4b3bfc4d2e4105a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:b5:bc:75:5e:88:41:e0:34:6d:07:71:88:
                    6b:b5:cf:dd:da:46:da:75:3c:df:00:75:ac:bd:dd:
                    b4:b8:d9:71:5f:83:f9:fa:9b:99:5e:14:6b:3b:81:
                    df:ca:e7:e5:fa:77:a6:ed:b9:3f:73:dc:4d:df:ef:
                    2d:1e:3c:7b:1d:95:17:84:bf:7d:25:a4:b8:77:05:
                    83:a3:36:03:e6:62:ea:58:d9:73:0d:a0:36:f2:e3:
                    2d:ab:d1:c3:d8:1c:77:4a:4a:0f:13:03:bb:6c:8a:
                    e7:61:95:0c:56:76:6c:75:b6:0d:45:8d:ce:fe:b3:
                    5d:4e:3f:2a:e6:05:9e:d5:8d:d6:39:5b:62:93:8b:
                    fd:a8:91:ab:d3:fa:c1:69:b2:d8:08:39:e0:17:67:
                    f6:e0:aa:6a:82:29:08:fe:ec:02:30:fa:b6:d0:65:
                    1e:84:9c:ab:c2:a4:4c:cc:c8:bf:6a:a4:5e:02:45:
                    ae:a8:0e:da:0e:69:0f:a5:3d:3c:b6:fd:38:7b:05:
                    e7:4b:0c:82:7c:9d:86:0f:a9:28:00:c6:78:5e:ac:
                    42:64:1d:50:fb:bc:70:c0:04:39:b4:d0:41:59:56:
                    e7:5f:29:41:af:65:90:d5:5c:3d:86:c8:80:c7:ad:
                    f4:f7:6e:4e:94:a3:1c:b9:89:2b:4e:18:a2:e0:3e:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5A:8C:73:26:C6:B6:81:A6:6B:BE:6C:4B:3B:FC:4D:2E:41:05:A0
            X509v3 Authority Key Identifier:
                keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:44:28:4d:fc:a1:bc:d2:37:5a:a0:5d:d4:97:d0:1d:c2:74:
         29:e1:42:e8:cd:e2:be:7c:e0:65:3b:6e:fe:45:f2:e2:f2:72:
         0a:39:2d:9b:e8:85:66:eb:a2:b3:bc:56:26:57:de:c9:f4:6f:
         ef:b5:69:f1:9a:b0:c5:f1:32:43:75:bd:2f:48:84:c1:4a:34:
         e1:d4:59:84:3a:da:fb:44:a9:34:c8:b0:ca:5c:89:a1:5f:2d:
         eb:0e:6a:3b:bb:35:14:20:2a:23:cb:dd:2e:a2:2f:88:74:78:
         68:d5:8d:49:4f:76:47:c0:1a:1c:d9:63:8f:21:22:5a:d0:1b:
         73:18:f2:df:ee:18:34:9a:41:a9:fc:72:1c:8f:2f:31:ee:4b:
         58:85:4e:35:b5:cd:a1:1d:83:aa:43:a8:c4:e9:bf:7e:52:13:
         1b:08:b9:f3:54:25:40:01:b4:ca:e3:c1:ef:f6:73:ca:38:bd:
         be:01:90:b3:8f:e3:b2:50:0c:44:54:af:68:8f:99:42:56:ca:
         37:7f:68:be:15:8f:d6:44:ad:e9:69:eb:db:14:50:56:82:ac:
         b6:69:b7:0f:7a:e0:d5:2c:d5:c3:f6:35:d9:db:c3:e4:fd:0f:
         a8:7d:dd:9f:48:cd:b1:86:85:a4:d5:1b:9f:64:fd:55:89:63:
         ec:73:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:24 2026 by rpki-client