Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File:                     9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier:          z1mECYgNSeU0rCzPoSsGi2Afd3h/TbdO5E1YOIzie3s=
Subject key identifier:   2D:5C:C4:E8:ED:66:4F:0E:E2:17:02:0B:D2:2F:1D:41:57:3E:B6:8A
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer:       /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial:       01A08B30E5E12F6A9E9730CC4AA1141F8FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number:          066B
Signing time:             Thu 10 Sep 2026 12:00:32 +0000
Manifest this update:     Thu 10 Sep 2026 12:00:32 +0000
Manifest next update:     Fri 11 Sep 2026 12:00:32 +0000
Files and hashes:         1: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: tqqH/+bxBG5Sc6vXX9m3iU9AWye61rHV+yhmepez9yU=)
                          2: Z5Bt0mcpjuYCBhTBe_0r3j_HEOE.roa (hash: CQtnMCBgc31J7ELcq2ticHIWUxTxloi8VsRDj7ga9wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:30:e5:e1:2f:6a:9e:97:30:cc:4a:a1:14:1f:8f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
        Validity
            Not Before: Sep 10 12:00:32 2026 GMT
            Not After : Sep 11 12:00:32 2026 GMT
        Subject: CN=2d5cc4e8ed664f0ee217020bd22f1d41573eb68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:66:f2:09:4a:78:45:e6:24:2f:36:51:76:
                    c2:90:34:cc:4b:7f:4e:0d:c1:ca:16:24:d1:d3:ae:
                    61:83:31:12:55:12:60:b1:f2:f0:ad:bf:23:83:16:
                    45:0d:8a:2c:7f:16:af:db:32:ff:32:8f:de:90:02:
                    20:0f:eb:5a:b4:40:bb:d4:ee:23:d9:0e:c6:70:88:
                    1d:b7:05:43:f2:7f:3a:c4:0c:ba:d6:c8:f8:46:cf:
                    1d:00:6e:25:03:c0:f9:4c:13:2d:0f:54:01:de:cb:
                    d2:7d:b4:db:fd:be:30:bc:f1:e0:78:56:be:2d:c9:
                    2b:79:0c:11:97:24:3e:63:40:66:03:d5:24:c5:d0:
                    10:bb:5d:59:de:ba:a2:be:bc:e4:72:91:6f:b8:37:
                    ac:9d:41:7d:5c:05:ef:d7:01:6f:99:f3:d1:74:f3:
                    be:da:72:16:11:db:ca:a7:a3:c2:bd:cf:a9:a0:e3:
                    c2:4f:29:68:d2:64:22:c5:73:35:a7:55:22:01:08:
                    c1:13:f6:29:a6:65:64:8c:b2:75:7d:17:fa:84:d2:
                    7f:5e:46:2a:cb:16:ff:cc:84:af:af:a4:83:5c:c4:
                    df:26:d6:6c:ba:ef:25:ab:a5:1f:0b:11:2a:4f:c7:
                    df:da:f8:5a:d1:b7:5b:0e:4f:c9:ab:24:97:42:e3:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5C:C4:E8:ED:66:4F:0E:E2:17:02:0B:D2:2F:1D:41:57:3E:B6:8A
            X509v3 Authority Key Identifier:
                keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:af:70:f3:a7:63:99:32:0c:95:31:d6:ae:9a:5a:bf:eb:
         ee:1e:2f:f7:26:f1:57:ef:62:80:50:d7:cc:92:ba:e5:e8:d2:
         dc:5e:b4:37:93:66:b8:1a:d0:24:94:b0:22:e9:28:c6:ae:6a:
         73:5f:b2:59:b8:38:17:38:c1:31:f1:d8:65:ae:99:b8:da:66:
         bc:e2:84:b7:1a:9b:f0:c4:5a:1e:14:6a:e9:4b:ae:bd:e4:d2:
         f2:1d:d7:20:5e:dc:a4:a1:ae:5e:5a:f6:4d:af:5d:eb:87:be:
         15:2b:e4:ea:10:a6:fa:87:09:3f:1f:c1:92:88:41:37:5d:4a:
         eb:0b:a0:ab:32:f6:69:b1:f3:58:9e:fc:f4:94:92:cb:4b:47:
         56:a4:35:da:fd:82:cd:64:b6:8d:12:ad:84:2c:3c:ad:ea:71:
         1d:4c:4d:ed:1d:57:45:26:fe:75:de:63:4a:ea:fe:45:d0:3d:
         bc:5f:e6:5c:34:38:8a:a5:f3:e0:f2:b9:e8:85:99:13:d1:7c:
         26:37:5a:d4:5d:19:fc:6f:5c:5f:d4:5c:81:47:6e:f9:f6:a0:
         c6:84:4e:11:b6:34:9b:8d:be:5c:ba:50:be:29:07:8e:df:0b:
         da:bc:59:cb:c5:9f:eb:58:d4:05:a2:ab:f0:7a:0c:8d:e0:c5:
         71:77:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:38:15 2026 by rpki-client