Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File:                     n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier:          aM5XdqZU2lcJJ025QjnJWd0QWPjqxkIJTwSprmQuBHU=
Subject key identifier:   39:F6:3D:45:49:B3:36:C1:E6:AE:3C:49:AE:94:44:3C:32:D0:1E:01
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer:       /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial:       01A1795EA4CDD604B6044C33E62CB6E0F700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number:          13FE
Signing time:             Mon 26 Oct 2026 18:00:07 +0000
Manifest this update:     Mon 26 Oct 2026 18:00:07 +0000
Manifest next update:     Tue 27 Oct 2026 18:00:07 +0000
Files and hashes:         1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
                          2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
                          3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
                          4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: b33PtA0OFekIuQ1ZqTMckv7jEPqkRFZVTI2bzEc3f2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:5e:a4:cd:d6:04:b6:04:4c:33:e6:2c:b6:e0:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
        Validity
            Not Before: Oct 26 18:00:07 2026 GMT
            Not After : Oct 27 18:00:07 2026 GMT
        Subject: CN=39f63d4549b336c1e6ae3c49ae94443c32d01e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:5b:3c:75:34:12:4a:8c:d2:cc:16:5b:65:
                    6b:bb:df:62:45:92:e3:26:5c:bb:4e:44:4c:67:d3:
                    4c:43:88:ca:42:0c:74:f6:a6:3f:fa:78:7b:27:2d:
                    91:b1:67:17:50:9b:3c:43:cc:f4:79:3f:9c:69:46:
                    02:00:2e:63:0f:04:9a:f1:f6:f7:00:66:e7:e9:38:
                    4a:97:4f:c5:17:a7:54:32:61:0d:d7:17:1b:25:9e:
                    ae:0e:fd:99:9a:42:eb:b8:97:cc:8c:e4:82:08:00:
                    e5:f6:97:b0:fa:13:44:df:21:5c:e1:29:0d:c7:19:
                    0d:79:59:c5:69:5c:b0:6f:d3:cf:bd:1b:47:71:7e:
                    06:5b:bf:ba:3f:16:33:83:7b:cd:61:1f:36:fd:62:
                    f2:51:31:24:d5:9f:68:cf:ee:17:ee:d2:f6:d9:dd:
                    0e:e0:bb:55:0b:56:0b:6f:f2:a1:d8:c9:36:4e:dc:
                    38:76:ea:df:cc:3c:0d:f7:c1:58:00:f0:c3:b4:7e:
                    33:76:54:fe:90:1e:37:72:21:bd:13:e1:23:97:8a:
                    96:73:28:a2:0f:95:b7:1b:e6:29:5a:15:83:02:be:
                    d0:8f:5b:ca:10:66:ba:62:c2:46:6d:09:65:4b:98:
                    d2:79:34:5e:b5:e0:a4:1d:81:c7:cb:cd:88:17:24:
                    e8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F6:3D:45:49:B3:36:C1:E6:AE:3C:49:AE:94:44:3C:32:D0:1E:01
            X509v3 Authority Key Identifier:
                keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:bd:30:f9:57:7b:79:7d:ff:c5:28:3b:a8:5e:f3:2e:3e:
         26:2b:8d:54:45:a4:8c:bd:cb:be:11:ba:a5:e8:79:28:e4:af:
         cd:a9:38:da:0f:d7:8c:82:30:00:b7:6c:e0:c8:3c:8a:87:f6:
         a4:c8:6c:3c:e3:33:43:9b:1e:97:10:83:bf:7b:62:13:87:e9:
         91:94:e5:4a:78:80:4f:48:d8:7d:c9:1b:44:38:72:69:fb:af:
         b9:12:99:44:90:4a:13:44:b4:8f:a9:5f:4d:01:2a:b0:fc:65:
         75:0e:97:67:8f:91:72:29:9b:5e:38:29:ef:fe:d9:d8:02:8d:
         f7:4c:02:d6:76:65:04:8f:65:82:b3:ef:79:c5:ff:20:3c:b8:
         04:d2:05:9d:b8:7d:3e:d2:70:e5:89:05:23:49:51:5e:0f:f5:
         bb:ef:e7:c4:90:3f:26:1d:a1:82:d0:6b:c7:64:fb:04:f3:f7:
         48:20:7c:62:31:00:a5:88:31:60:a1:3d:ce:42:f1:6f:57:ea:
         81:cf:9e:62:ac:29:fd:31:25:f2:97:d3:41:bf:18:b9:bd:af:
         00:bb:19:a0:55:78:e9:41:3b:ef:05:e9:5a:c8:9b:e2:34:b3:
         78:3c:f9:47:5d:78:06:e8:1c:d2:ac:00:c2:79:91:b7:0f:4f:
         15:7b:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:35:36 2026 by rpki-client