Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File:                     9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier:          pelwvnTq3YS3HZc5j1dzAJaeOUUTb8lo4Dk+J06qOzQ=
Subject key identifier:   D0:B1:87:16:BA:07:12:4B:A8:0E:34:5E:A0:3E:50:7A:CC:0C:6C:A5
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer:       /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial:       01A13E5CD554B26BD13BAD3C672828C5DC36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number:          07A3
Signing time:             Thu 15 Oct 2026 07:00:33 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:33 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:33 +0000
Files and hashes:         1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: qPTJnmGtHh7LaaSsw5S1Skpfm88xqGuXBYfJ+xb0DVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:d5:54:b2:6b:d1:3b:ad:3c:67:28:28:c5:dc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
        Validity
            Not Before: Oct 15 07:00:33 2026 GMT
            Not After : Oct 16 07:00:33 2026 GMT
        Subject: CN=d0b18716ba07124ba80e345ea03e507acc0c6ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:a9:d8:0d:94:71:8c:19:cf:67:5c:a4:9f:
                    12:d4:b7:13:dc:87:dc:8d:72:a6:c0:a2:8d:ee:2d:
                    8c:86:e9:1d:2c:fe:8e:66:c0:38:ce:b6:55:ab:4d:
                    91:f4:b9:5d:c5:c3:b3:c5:cd:43:59:c5:9a:1d:a0:
                    b9:67:82:bd:cb:a2:84:ad:88:b5:fa:cd:5b:2d:cd:
                    42:31:b3:ef:7d:11:ce:54:cc:26:56:62:6f:75:4f:
                    1b:93:16:26:89:20:29:7a:20:75:97:23:d8:72:91:
                    75:06:24:c7:5a:d6:83:93:2f:25:c6:9b:73:c5:3f:
                    29:12:c9:3d:e9:32:30:01:a4:e6:4a:29:5c:10:5a:
                    f6:af:c0:34:5f:27:aa:63:fa:ca:5c:6b:8a:3c:c4:
                    19:79:7a:d3:cd:c7:de:d0:43:6b:d2:ad:8b:88:88:
                    90:3b:68:a4:98:f8:82:16:db:33:1b:6c:ab:59:19:
                    56:f5:ad:4b:a3:f3:8f:45:61:5c:e1:a1:1b:2e:a2:
                    8f:91:12:7c:2c:de:5f:e0:58:ce:f7:8e:5f:2f:56:
                    f0:94:4e:83:2d:a4:9e:13:d9:e1:e5:29:d6:e3:ba:
                    42:42:d2:98:45:f3:f3:08:10:0b:ed:4b:de:80:38:
                    3e:d2:9e:29:df:56:6b:a6:87:37:26:cd:23:2e:a7:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B1:87:16:BA:07:12:4B:A8:0E:34:5E:A0:3E:50:7A:CC:0C:6C:A5
            X509v3 Authority Key Identifier:
                keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c4:70:07:ef:5b:05:0d:31:97:35:42:23:e6:8f:20:82:de:
         1c:39:60:4b:56:f0:45:0f:35:4b:52:8a:cf:d6:15:bd:b1:9e:
         02:64:ac:71:40:d8:da:64:39:a6:80:fe:3d:dc:eb:67:82:5b:
         15:73:38:13:10:57:39:5f:e4:0a:cb:b3:1d:c5:c8:cb:0a:c4:
         d1:b5:98:bf:7c:dd:df:72:04:78:6f:18:88:d3:a9:02:30:24:
         c0:e5:a4:3e:d3:d4:c7:5a:13:5a:22:0a:4c:d2:29:96:0e:a4:
         91:14:45:87:7b:c1:03:92:75:da:a2:0a:e3:1f:b6:cd:80:37:
         c6:64:98:bb:73:86:a9:2b:c5:32:19:60:78:cb:43:02:a9:1c:
         57:72:70:1c:e5:a6:4a:21:d5:df:d8:92:4c:15:38:fc:b4:ac:
         89:02:0b:51:99:8b:0b:06:91:98:22:ef:82:92:d2:98:05:c0:
         02:1a:35:a0:1d:77:c6:c0:b9:e3:cf:76:4d:8e:09:2b:1a:ff:
         dc:e4:ba:4f:fc:20:56:6f:fa:dd:ff:a4:b0:67:d9:db:10:2f:
         06:bd:8a:39:e6:c5:2f:6c:3b:0c:d6:19:aa:92:2a:fd:ca:70:
         c5:ea:79:ba:f1:03:c9:d6:85:9b:fd:0e:3c:cb:35:0a:f4:2d:
         43:aa:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:46 2026 by rpki-client