Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/0a6a28-6fe1-4c98-be8d-5702102b48a9/1/9q_A9Q19cfuYRR_SKnvkQLMQ-ns.mft
File:                     9q_A9Q19cfuYRR_SKnvkQLMQ-ns.mft (raw, json)
Hash identifier:          1yOjQY8y5TBVFKcwNWLtKxm1MjdEa5p0rNI/gYOSFC4=
Subject key identifier:   B4:CD:00:3A:F0:1D:F5:C6:BD:AB:CD:6E:CD:2C:FA:D4:E6:E6:03:47
Authority key identifier: F6:AF:C0:F5:0D:7D:71:FB:98:45:1F:D2:2A:7B:E4:40:B3:10:FA:7B
Certificate issuer:       /CN=f6afc0f50d7d71fb98451fd22a7be440b310fa7b
Certificate serial:       01A040BCA081F84EFFD9FEA4E3D1E592845F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q_A9Q19cfuYRR_SKnvkQLMQ-ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0a6a28-6fe1-4c98-be8d-5702102b48a9/1/9q_A9Q19cfuYRR_SKnvkQLMQ-ns.mft
Manifest number:          F3
Signing time:             Thu 27 Aug 2026 01:01:38 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:38 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:38 +0000
Files and hashes:         1: 6WCTODG2r4GYdqoX4R-2zoyxBX4.roa (hash: oufxI+asDUGVAXk5Mh5KsLQlnAsBDx5ZFKmsBEpnAfw=)
                          2: 9q_A9Q19cfuYRR_SKnvkQLMQ-ns.crl (hash: GP55QL8bxY3qWLAH9tJBow5/dTVBIfB3AxpUtAQ2u8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/0a6a28-6fe1-4c98-be8d-5702102b48a9/1/9q_A9Q19cfuYRR_SKnvkQLMQ-ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/0a6a28-6fe1-4c98-be8d-5702102b48a9/1/9q_A9Q19cfuYRR_SKnvkQLMQ-ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q_A9Q19cfuYRR_SKnvkQLMQ-ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:a0:81:f8:4e:ff:d9:fe:a4:e3:d1:e5:92:84:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6afc0f50d7d71fb98451fd22a7be440b310fa7b
        Validity
            Not Before: Aug 27 01:01:38 2026 GMT
            Not After : Aug 28 01:01:38 2026 GMT
        Subject: CN=b4cd003af01df5c6bdabcd6ecd2cfad4e6e60347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:31:a0:7d:71:11:70:45:8a:ca:c9:0f:87:
                    5b:6d:80:f2:13:e9:ab:1d:82:c2:a9:3e:9e:ec:9b:
                    e2:6b:64:58:02:b0:22:dc:b4:60:15:3c:9a:5e:84:
                    41:7b:8e:82:d8:a5:99:21:aa:5b:f4:f6:74:3d:12:
                    bd:f5:f0:4c:ca:0f:3f:57:59:88:ff:6d:b2:8d:ff:
                    28:99:e9:9f:4d:bf:3a:bc:20:62:42:85:62:74:68:
                    1b:f5:88:24:40:98:1c:ec:92:f5:47:27:dc:76:43:
                    8f:f4:5d:30:cb:4a:e6:2f:85:14:b9:b3:98:a5:6a:
                    31:ab:94:35:58:13:66:fe:25:3b:ba:f2:c7:cd:1a:
                    b2:25:fe:2a:79:22:75:a5:4b:ea:ff:15:bd:7a:07:
                    c5:41:34:ee:e2:69:97:40:28:46:f0:01:8e:11:ab:
                    eb:77:7b:82:9a:ea:5e:1b:51:f0:97:27:9a:31:23:
                    fc:12:87:0b:26:17:39:ac:4c:d3:c4:cb:ce:bc:1e:
                    4a:25:57:0c:b4:75:ca:94:be:a6:7c:4e:e3:f7:47:
                    3f:a6:b9:02:64:4a:a5:0a:64:88:06:d0:d2:28:b9:
                    01:f4:9e:f0:14:e4:e7:50:d0:75:ff:32:c3:4a:6c:
                    eb:fd:e1:5a:c1:be:cd:59:cf:de:2f:ea:6d:e2:d9:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:00:3A:F0:1D:F5:C6:BD:AB:CD:6E:CD:2C:FA:D4:E6:E6:03:47
            X509v3 Authority Key Identifier:
                keyid:F6:AF:C0:F5:0D:7D:71:FB:98:45:1F:D2:2A:7B:E4:40:B3:10:FA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q_A9Q19cfuYRR_SKnvkQLMQ-ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0a6a28-6fe1-4c98-be8d-5702102b48a9/1/9q_A9Q19cfuYRR_SKnvkQLMQ-ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0a6a28-6fe1-4c98-be8d-5702102b48a9/1/9q_A9Q19cfuYRR_SKnvkQLMQ-ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:df:8c:0c:2d:fd:ff:1a:19:a7:b1:ca:e3:8b:16:c3:d1:6e:
         a2:05:0f:0a:15:50:c8:28:31:24:cf:ee:25:47:69:f6:80:37:
         da:41:cc:39:eb:88:1b:a3:c0:a8:4e:f1:3c:14:eb:e9:c7:ea:
         5b:19:4d:31:35:2d:6a:60:40:86:69:5c:e7:58:d9:4e:82:77:
         57:ab:fc:79:eb:c4:72:33:a3:bd:8a:07:9f:50:e7:9a:c6:30:
         ed:d8:d1:98:48:97:60:0d:12:9a:36:c8:e6:77:ee:43:56:81:
         62:6f:a8:47:b5:66:f1:f6:38:72:31:4b:e1:a0:5f:d6:af:42:
         5e:3b:e8:9f:46:d7:85:47:9a:db:73:43:12:a1:55:7f:3a:81:
         f4:f4:5c:b0:93:da:aa:62:6f:ba:e7:b1:15:23:fa:05:7d:5d:
         a5:5c:eb:8b:ca:8d:5a:d0:52:38:19:02:8c:07:9d:1d:e1:84:
         10:f2:99:84:61:be:ef:36:f5:3f:bd:3e:b7:81:2d:39:67:bb:
         25:a8:00:f8:fc:a7:19:54:23:32:66:99:08:43:9d:d2:68:b1:
         e3:eb:c3:7f:9f:3e:2d:e5:f7:92:7d:ec:c7:c9:cd:28:a7:7d:
         7f:96:70:14:7c:85:f4:14:87:5f:94:48:45:f8:c3:4b:54:69:
         ff:cc:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:28 2026 by rpki-client