Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File:                     9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier:          kvWSXMMmfGfM5XXFd3oc235zefgUDAcvB4+BHX4IfAY=
Subject key identifier:   4D:44:70:E5:7E:3F:4E:28:35:7A:A7:8F:93:F8:A6:90:CB:65:09:AE
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer:       /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial:       01A13E26F54ADFE5E1D8DB72C25365E063CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number:          0A76
Signing time:             Thu 15 Oct 2026 06:01:42 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:42 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:42 +0000
Files and hashes:         1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: l8zR27rY1i2xtkMKZnog8upsU6zO0It25IE6Y8l7gAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:f5:4a:df:e5:e1:d8:db:72:c2:53:65:e0:63:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54460596d6d532401de313df890366e5376d602
        Validity
            Not Before: Oct 15 06:01:42 2026 GMT
            Not After : Oct 16 06:01:42 2026 GMT
        Subject: CN=4d4470e57e3f4e28357aa78f93f8a690cb6509ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:0d:53:5f:3b:bd:34:d0:34:d0:5f:ae:74:
                    3f:33:71:e2:da:c4:ca:d5:bf:d7:b6:9b:c3:38:51:
                    19:e3:22:e8:89:bb:d2:f2:16:4a:4c:9a:de:20:2d:
                    07:39:e7:88:83:fa:4a:99:96:f5:87:0a:9c:48:79:
                    79:dd:b1:2f:0b:9b:9e:66:ff:c5:b1:40:2f:73:6f:
                    a2:10:b8:7a:d0:02:3a:c1:3e:71:60:ec:53:4a:f7:
                    e8:54:ed:0c:3b:46:76:75:01:68:98:33:a9:19:fd:
                    ba:ea:62:30:c6:55:26:f0:a8:9e:e7:40:9d:9a:c5:
                    68:6e:da:19:c6:25:91:84:57:47:18:fe:dd:99:e6:
                    07:d7:ee:a2:83:93:45:bf:41:a8:a6:45:cd:1d:6b:
                    26:7c:11:dc:f9:b1:25:e6:03:64:30:56:4c:39:86:
                    41:58:4a:de:19:a0:66:00:94:ee:47:f1:f9:c8:2a:
                    51:52:c3:c9:81:d6:b2:03:7b:51:7e:ae:43:14:2a:
                    c2:cb:11:da:67:45:b0:c6:70:a6:d7:fa:79:90:35:
                    3e:35:61:ae:5c:a7:59:d0:a3:05:4c:55:a6:6e:4f:
                    1b:9a:fa:b7:b7:de:17:d0:54:2f:52:2f:8f:de:64:
                    a4:cb:9e:e0:cc:49:dc:c9:b4:34:42:dc:34:0d:ff:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:44:70:E5:7E:3F:4E:28:35:7A:A7:8F:93:F8:A6:90:CB:65:09:AE
            X509v3 Authority Key Identifier:
                keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:d6:f2:a4:3e:98:ef:ea:9a:ce:6f:51:41:0a:82:af:66:
         47:00:94:db:ee:ce:16:fc:bf:a9:d5:61:21:53:25:2f:a9:ff:
         ba:60:b9:26:9c:7a:b4:fa:30:99:b9:b5:aa:23:7b:2b:d1:fd:
         4f:7b:44:09:94:13:f1:cd:25:d7:0b:fb:23:82:11:34:28:14:
         dd:fd:33:3c:56:94:43:d3:81:a2:8a:ed:09:2a:f3:31:fc:9a:
         c3:f0:6f:0a:1b:94:73:f1:d1:d4:55:52:6d:35:3d:36:90:ba:
         2a:41:ab:da:32:43:78:fe:7a:6f:d8:89:b5:57:ce:95:07:81:
         82:dc:ed:3b:2d:af:81:82:5f:e0:a2:c8:89:a6:a3:e0:ab:9e:
         e3:b5:d0:07:7e:01:a7:99:aa:68:4c:8f:ab:86:4b:e8:fe:e7:
         f7:8a:23:29:c5:bd:bb:e0:19:e3:c7:6e:81:ae:21:06:90:69:
         da:e4:aa:83:1d:1d:24:7e:4d:1e:ef:51:51:99:77:6e:43:a4:
         cf:5a:aa:c2:18:c4:ff:6c:80:eb:c2:11:b6:97:7a:6a:08:c3:
         29:98:79:d5:2f:94:4e:a9:61:9d:83:8e:5e:8b:d9:4b:45:d9:
         c0:a8:d7:cb:83:18:bb:cc:60:41:3d:6b:bc:0a:b7:d7:4b:ad:
         b3:e8:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:29:41 2026 by rpki-client