Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File:                     91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier:          kwGV/GsJphOIUl4a2LjT5m+e93nIhbHOgegt7nyhcbQ=
Subject key identifier:   02:4D:83:A1:8D:D0:79:05:18:1A:DD:33:76:B1:B2:9D:FB:E6:D7:08
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer:       /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial:       01A08A8C34CDD6547A9097E052AC7B800D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number:          15CE
Signing time:             Thu 10 Sep 2026 09:00:39 +0000
Manifest this update:     Thu 10 Sep 2026 09:00:39 +0000
Manifest next update:     Fri 11 Sep 2026 09:00:39 +0000
Files and hashes:         1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: NBw23m0ODQuGUM5GcvOtiQVW0Yl0EYGj/jDKPJ773cI=)
                          2: zzK4qCAtynNjDjZWUiRCQn5dpDk.roa (hash: E6+IdS0ezqI3UKO4kCUBOk2GF16tHu1sV21TlzMQxMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:34:cd:d6:54:7a:90:97:e0:52:ac:7b:80:0d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
        Validity
            Not Before: Sep 10 09:00:39 2026 GMT
            Not After : Sep 11 09:00:39 2026 GMT
        Subject: CN=024d83a18dd07905181add3376b1b29dfbe6d708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ae:f2:13:f9:1a:86:1f:84:b3:54:ed:b5:8c:
                    87:09:e3:23:c3:a2:a6:ee:df:f0:f8:b2:7a:51:86:
                    a6:3a:77:fd:94:5d:e8:6e:05:f8:69:38:31:a2:93:
                    e5:37:78:00:82:b7:d1:58:e3:c5:43:d8:db:03:f1:
                    77:e9:fd:44:58:40:fc:fd:11:21:14:95:ba:66:28:
                    b4:93:95:60:eb:39:97:a2:41:72:2b:60:f3:b6:76:
                    13:da:e6:7a:c7:01:72:a3:0f:f9:18:c6:4a:6c:d2:
                    a3:51:20:da:43:2e:e2:12:04:1a:d6:53:89:6a:4e:
                    39:20:b5:f7:60:a9:84:7a:8b:b6:93:bf:a1:aa:79:
                    87:17:03:49:7f:23:00:89:d2:56:92:8b:91:05:34:
                    fb:39:67:9a:c1:96:7b:8f:c8:ea:8c:54:68:8d:b7:
                    ca:4a:b7:af:57:2a:2e:26:94:a5:3b:d0:f5:29:ec:
                    0d:0b:4e:d6:f3:a2:3d:90:0c:89:17:c3:f1:e9:e4:
                    c9:aa:f2:76:cb:5f:c0:79:30:21:70:64:ba:83:7a:
                    91:78:61:2e:fd:f4:dd:d3:f0:77:c6:11:0c:ae:73:
                    e4:00:0a:1a:90:44:19:22:c3:15:3d:d5:0e:2f:4d:
                    77:40:ff:84:8c:97:34:85:b9:51:5a:d9:51:a0:6d:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4D:83:A1:8D:D0:79:05:18:1A:DD:33:76:B1:B2:9D:FB:E6:D7:08
            X509v3 Authority Key Identifier:
                keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:03:10:62:40:97:15:68:91:0b:29:9b:76:58:a3:94:99:fc:
         6a:4a:ab:6d:cf:19:e1:89:18:c7:c1:41:0b:79:90:26:23:7c:
         5d:47:b8:54:47:8b:4d:b2:82:7b:0d:1f:cd:d4:37:46:c4:5e:
         57:13:e9:1f:3a:17:c9:2f:bd:a7:e8:f5:fa:d3:24:e4:b5:7d:
         d0:0b:6d:b6:70:86:d1:52:1a:24:79:ef:e9:d7:b6:f1:3d:33:
         58:de:3b:0e:00:c6:4b:55:40:e1:de:e8:70:95:5b:36:69:90:
         a4:7a:2e:0d:b9:07:25:90:97:de:28:5e:93:a4:df:71:3d:64:
         1e:2d:7e:13:2b:ad:45:03:ee:e9:ae:f7:f0:d4:de:4d:3f:03:
         b5:76:4f:25:82:dd:ec:21:1b:9a:48:2f:c3:d5:7a:0f:69:63:
         7c:af:90:55:d9:18:e5:ea:42:1b:d9:6b:ff:6f:bd:2c:8c:1f:
         3a:e1:41:dd:8c:2a:e9:ec:22:45:4f:93:e1:92:13:61:47:d4:
         3d:d1:9e:4e:9a:cc:47:24:db:a3:4e:85:8e:2f:8b:35:db:12:
         0b:bb:fb:1f:8f:a6:4b:d1:e4:4a:55:7b:90:39:9d:5b:4c:d9:
         6a:0e:f2:c1:35:ad:36:db:3a:83:31:5d:c7:d5:fa:62:64:ae:
         f0:c7:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:06:36 2026 by rpki-client