Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
File:                     9jXHTatSTz72yWtovplcMCXPD-A.mft (raw, json)
Hash identifier:          xgWcuRtRXIc2o/qvOWnqSUxR/Wlm07dDDjlfrkbKCsA=
Subject key identifier:   99:63:8E:B5:C0:4D:70:76:5F:B8:FB:83:1B:84:FA:30:D9:50:2D:D9
Authority key identifier: F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
Certificate issuer:       /CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Certificate serial:       01A03F72469227BE89700EBD53662B236949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
Manifest number:          01E8
Signing time:             Wed 26 Aug 2026 19:00:48 +0000
Manifest this update:     Wed 26 Aug 2026 19:00:48 +0000
Manifest next update:     Thu 27 Aug 2026 19:00:48 +0000
Files and hashes:         1: 9jXHTatSTz72yWtovplcMCXPD-A.crl (hash: 9c2dslDORmSe36FjcAg6GPGiT5L4EgPtlry2aMfubBE=)
                          2: JYgzUyiaZYs05bVlx3hglGkBd1Q.roa (hash: BMikKwWOpzTQc4z6QjV3HCSDgmz4fqzntIpupmntBpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:72:46:92:27:be:89:70:0e:bd:53:66:2b:23:69:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
        Validity
            Not Before: Aug 26 19:00:48 2026 GMT
            Not After : Aug 27 19:00:48 2026 GMT
        Subject: CN=99638eb5c04d70765fb8fb831b84fa30d9502dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:ff:e3:23:5d:a2:25:2f:1e:71:1e:70:2e:
                    0d:01:6d:0d:02:67:1b:95:10:d0:3a:40:dc:a5:ac:
                    b9:de:e3:7e:e7:64:82:d7:9e:03:89:65:a3:80:f3:
                    5d:ce:4b:1d:ae:c3:d8:19:0d:cd:6c:eb:51:d1:f9:
                    2d:56:20:b0:71:40:01:80:9a:fa:e8:92:ac:7c:0a:
                    52:c8:c2:9a:af:bc:4c:40:78:52:24:48:99:c5:e7:
                    55:5a:2d:ae:d3:74:b5:cd:10:a5:64:ff:30:1e:98:
                    06:94:d8:41:e5:13:6e:cd:1f:bd:96:d9:42:33:a5:
                    ad:af:06:f2:a8:3c:71:f3:e7:30:d9:ea:63:0a:53:
                    24:b8:8f:0e:41:0f:ae:26:25:ac:ec:d7:c0:3f:50:
                    78:e4:b3:c3:4b:56:a3:db:be:91:1f:4e:48:7c:c9:
                    f4:59:a1:e5:b2:5f:6f:94:a1:89:4e:d9:15:37:25:
                    18:0c:d3:db:4d:6f:be:c5:c5:5f:b2:58:38:45:00:
                    be:94:5b:c5:1b:fb:d9:78:ab:90:3a:9c:ee:49:0c:
                    d8:53:3b:39:7a:f3:61:c4:fb:fb:93:07:35:45:a1:
                    83:c6:fa:bd:41:fd:6e:d2:7c:aa:94:2c:86:60:91:
                    9c:18:03:c8:88:82:d5:b7:e2:aa:b2:d4:6c:6a:64:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:63:8E:B5:C0:4D:70:76:5F:B8:FB:83:1B:84:FA:30:D9:50:2D:D9
            X509v3 Authority Key Identifier:
                keyid:F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5e:ab:1b:76:43:55:2f:ad:4e:58:27:e2:33:de:d9:7d:46:
         5c:bf:aa:08:e5:79:63:d5:8d:ae:df:66:c3:15:90:e4:67:0c:
         27:c9:1a:3a:b9:6a:e9:5c:9d:70:01:7c:55:9f:e5:a0:c5:6c:
         c7:76:23:84:ae:5c:2e:c7:13:0f:35:88:c8:b8:86:9d:0f:ca:
         7c:c3:d7:6d:ab:8f:1f:27:b4:d4:09:84:f9:ec:8b:f2:5a:5c:
         42:ff:de:12:ea:71:a1:f5:52:5b:bd:34:8a:b4:23:e3:51:d9:
         09:36:29:06:c9:9f:58:ec:48:e6:73:f8:4c:e8:9d:fe:aa:e0:
         15:cb:00:db:0d:d5:4e:d5:2b:c3:56:bb:3e:9e:f4:0a:3b:f7:
         11:ab:e1:41:ee:cb:69:d6:59:f4:f0:ba:fe:fc:39:ce:9b:4f:
         9d:4c:fb:13:e0:c8:8c:19:7f:82:43:a8:cf:67:82:d4:51:1e:
         87:13:c1:84:78:56:79:2c:9c:93:81:ba:d1:a3:0b:99:45:b7:
         52:05:1c:44:0b:fe:e4:81:d8:6a:1f:56:a7:07:f1:ed:14:c2:
         bb:4f:59:d6:04:04:f1:d0:6d:ed:bb:d9:d6:79:52:6d:6c:3e:
         a7:a7:71:70:33:d5:8e:67:49:a1:8d:b9:9d:e5:d3:7a:78:d5:
         29:4e:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:06:38 2026 by rpki-client