Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File:                     D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier:          HCCDDxUM9lPAu+o0g0uufmRTtFTwlSgL5jiLwRvlJIg=
Subject key identifier:   C2:B8:CB:8D:B4:FA:90:F4:40:EB:FA:66:61:77:02:D2:79:E0:E6:B0
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer:       /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial:       01A001384E3996BFF82C5D2CD4275D1AACA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number:          09B1
Signing time:             Fri 14 Aug 2026 17:01:02 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:02 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:02 +0000
Files and hashes:         1: 5XJcsA0Yt7Zdff_LSEdl66W_iVs.roa (hash: b2S+2HR2gX8LbhzerywHZG+Oq0Xjm9O6862mVOPJiR0=)
                          2: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: OXhR+JbtvInAHwMkCGfxNkG0ZqdIbL7U+fxQnz/CUQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:4e:39:96:bf:f8:2c:5d:2c:d4:27:5d:1a:ac:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
        Validity
            Not Before: Aug 14 17:01:02 2026 GMT
            Not After : Aug 15 17:01:02 2026 GMT
        Subject: CN=c2b8cb8db4fa90f440ebfa66617702d279e0e6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3c:63:c5:ed:15:fa:50:b8:0d:f6:83:e0:b6:
                    99:5f:70:9e:0f:e2:0f:95:72:64:d9:bd:b3:4c:b9:
                    82:4d:50:3b:21:7c:37:e3:54:81:6c:bc:06:87:4b:
                    cb:5b:7e:79:c3:97:9a:86:75:8b:64:b5:c8:55:5b:
                    79:2c:03:5b:ef:71:a7:63:b5:6f:24:8d:ba:61:8d:
                    ff:a6:c8:b4:b2:9c:e5:cb:e5:70:1e:a7:a6:43:56:
                    a1:d6:69:df:7c:b7:76:20:a2:db:06:21:9d:2c:ee:
                    49:7a:a3:c0:e1:66:6e:e9:30:4a:5d:3f:ba:f6:79:
                    ce:dc:2d:5b:37:f2:a2:f2:e2:be:c3:89:ed:9d:4b:
                    a0:91:ac:06:fc:d6:da:70:4f:b8:10:a9:62:71:e0:
                    d8:b2:45:17:25:b2:0e:fb:df:a1:b8:83:d6:d8:e2:
                    85:ac:56:45:e2:bf:58:9c:de:8d:a9:43:05:31:78:
                    ea:1d:0f:04:06:29:cd:04:44:c3:21:83:9c:12:2b:
                    ca:80:59:a8:65:4a:d3:01:2a:e9:ab:5d:70:67:ca:
                    75:5e:7f:01:24:ae:e2:d4:20:77:c1:55:ea:e4:a7:
                    78:08:14:b0:02:1a:03:d4:c1:e2:2f:e8:8c:27:e1:
                    45:8c:ac:2d:30:25:3f:54:79:13:d9:be:40:85:38:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B8:CB:8D:B4:FA:90:F4:40:EB:FA:66:61:77:02:D2:79:E0:E6:B0
            X509v3 Authority Key Identifier:
                keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:f7:a8:7b:73:73:fa:65:99:12:34:43:99:9d:ac:ec:11:
         e1:da:52:ad:8e:2c:fc:b7:0a:26:57:ab:c4:c3:e9:fc:66:3a:
         d2:22:61:0a:d3:aa:ae:0a:fd:80:9e:59:fa:30:c0:e2:a0:03:
         10:ed:2a:94:f0:c0:ca:46:fd:a9:47:40:18:88:c9:65:74:61:
         2c:b5:4d:05:db:c9:64:47:4b:2d:33:d3:ee:ac:a7:53:4b:7f:
         65:28:f5:45:19:1b:87:0a:15:62:e4:99:17:76:10:96:5e:be:
         8b:25:69:b8:5d:f4:5a:84:ea:cc:ec:f6:0a:ef:b7:e1:81:75:
         6f:e3:f3:d2:9f:a2:04:8d:4a:3b:06:6d:b7:2b:a6:b0:ae:20:
         e6:9c:6d:c2:8a:85:dd:34:9c:f9:6e:2b:04:6a:66:7e:bc:1d:
         8d:c1:0c:77:d3:df:e0:00:91:a8:6f:7e:fd:61:1c:18:d8:96:
         e6:2c:0b:08:22:98:f9:9c:3d:3f:de:1e:7a:74:d1:80:03:91:
         70:19:b6:07:14:d1:bf:df:e4:c0:41:84:95:c1:c2:63:2c:48:
         62:5c:86:c2:68:9f:38:2a:f9:a2:ef:ac:ea:a7:2d:40:ba:e8:
         d6:1d:ee:5f:7d:74:c0:87:28:0e:96:ab:bb:07:60:76:cd:53:
         71:f7:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:08 2026 by rpki-client