Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File:                     9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier:          SwYpzd225S1uLFKut3rFM9OL2MIlbyOSYIB++4sB1h8=
Subject key identifier:   F9:93:5B:F7:78:97:EB:18:57:86:5A:59:73:61:45:DF:B1:68:46:65
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer:       /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial:       01A0021392ABB54D7EDEF62373700F1A90FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number:          09D5
Signing time:             Fri 14 Aug 2026 21:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:32 +0000
Files and hashes:         1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: DQiiHEIFYpIU3T9diHw7Jy8Nps436Wh0iJcx65L3h3w=)
                          2: U0VlaKKNtdOTOqK2MVcrObf1kHo.roa (hash: aj9GxjWDAWuJEL63II9rLgS5knljvCRB2AV58y//rLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:92:ab:b5:4d:7e:de:f6:23:73:70:0f:1a:90:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
        Validity
            Not Before: Aug 14 21:00:32 2026 GMT
            Not After : Aug 15 21:00:32 2026 GMT
        Subject: CN=f9935bf77897eb1857865a59736145dfb1684665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:76:d6:0a:fd:a9:fb:e4:36:5d:ac:3a:06:
                    87:9e:6f:f0:38:0c:67:ae:e1:8c:76:86:c2:2e:30:
                    15:38:57:7b:36:e3:11:9b:70:68:09:9f:9f:2d:62:
                    c3:b7:57:8d:09:12:39:fc:7f:46:c5:e4:af:cd:46:
                    e5:01:4b:d6:64:09:2c:96:b3:f2:52:fc:91:39:f2:
                    25:51:9e:82:0c:ee:59:c2:68:35:40:09:64:f5:6a:
                    d7:d3:e2:93:e7:3c:8b:72:59:f0:94:58:fa:39:18:
                    e0:0b:8d:13:be:10:58:7e:9b:c9:fd:a1:02:01:5a:
                    3b:54:cd:24:45:7e:a9:1f:31:7a:a4:bb:09:9d:a1:
                    3e:fc:29:2f:af:8e:f1:11:b8:16:46:8d:42:0d:c8:
                    97:21:b2:cd:e3:de:b7:5d:f0:7e:90:d3:28:0e:53:
                    ac:d0:12:e7:b6:c0:21:dd:3a:39:c5:6c:a4:86:15:
                    9d:ad:ea:fd:9f:db:7d:6d:9b:08:7c:55:5c:cc:32:
                    d2:86:6a:3c:ca:89:43:a4:b9:b0:fd:c5:af:0a:9f:
                    41:5c:5c:c6:5a:74:f5:49:c1:c1:7c:6a:d7:9c:4c:
                    98:55:09:aa:83:13:9f:a8:ea:16:4b:7e:00:e6:d1:
                    fd:f6:20:59:71:4f:db:28:a5:98:77:84:68:e7:64:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:93:5B:F7:78:97:EB:18:57:86:5A:59:73:61:45:DF:B1:68:46:65
            X509v3 Authority Key Identifier:
                keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:4b:e7:e1:41:a4:76:b4:1a:90:c7:1a:dc:8e:ac:4a:3f:
         99:6a:c3:79:21:b9:ff:6e:60:79:51:c3:26:93:34:fd:d0:f0:
         2e:73:e2:6e:28:02:d8:20:fb:65:1e:0c:c6:01:0c:ee:cc:9f:
         00:64:e3:b6:67:dd:5f:2d:25:df:83:46:c4:23:52:fa:ee:3c:
         f9:16:65:0e:fa:1a:2d:93:2a:a0:0d:5f:30:9c:62:9d:ca:d1:
         c2:4c:ac:d6:eb:25:90:9b:fb:a6:ab:6a:51:2e:09:5d:c8:58:
         31:19:c5:2c:42:e2:28:59:5b:a2:06:39:d3:28:70:76:f4:c1:
         f2:66:9b:4b:e0:82:95:c5:7c:e9:fc:4a:1e:56:e9:65:d7:0d:
         50:76:5f:a8:42:6b:dd:ba:5b:c8:db:9c:20:41:ad:be:cf:3f:
         d2:ca:6d:b8:b9:b0:42:03:0e:63:4c:0c:f4:53:e4:ea:ac:d7:
         b5:13:a1:ac:f3:80:b4:c8:32:6c:b7:1f:1e:cd:6e:5a:13:56:
         c0:0f:95:61:f2:f3:72:8a:1d:5e:00:7a:b8:86:86:2e:c2:97:
         c7:09:e1:00:cc:9c:bb:78:97:18:7b:28:24:dd:d4:28:47:54:
         59:7e:39:6d:ad:54:28:85:84:46:7d:4f:6d:4b:bf:cc:ab:5f:
         c1:41:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:32 2026 by rpki-client