Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
File:                     RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft (raw, json)
Hash identifier:          1mKAdJbGS1MGW4Hf85BKERomutOoom965iI3MkQTZrA=
Subject key identifier:   AF:FF:BE:49:9F:66:E7:F4:91:87:BB:AD:E7:A0:37:FB:40:09:D1:41
Authority key identifier: 45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
Certificate issuer:       /CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Certificate serial:       01A08BD69DE3A67E78C7E1D33CB047A936FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
Manifest number:          11B9
Signing time:             Thu 10 Sep 2026 15:01:33 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:33 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:33 +0000
Files and hashes:         1: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl (hash: 2LZRHR7qQFro7DfkDZI52rKulDWIBmcyGIV1NMyb4lU=)
                          2: iBZH9xLd0zyACP8OFYzhScTPN60.roa (hash: hb9DBt4b/awETrD9MjB0afdtZlVeiqyp5xxAKLKl4MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:9d:e3:a6:7e:78:c7:e1:d3:3c:b0:47:a9:36:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
        Validity
            Not Before: Sep 10 15:01:33 2026 GMT
            Not After : Sep 11 15:01:33 2026 GMT
        Subject: CN=afffbe499f66e7f49187bbade7a037fb4009d141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:82:55:c7:c3:bd:cc:cf:84:b9:5f:a3:3d:6b:
                    84:f7:25:6b:c9:3e:a4:d3:59:6e:5d:07:6e:e6:90:
                    86:5e:d6:82:36:e2:74:7f:69:85:bb:3a:19:a9:c5:
                    f7:60:d8:f2:e7:4e:cf:38:90:1f:48:24:a7:ae:35:
                    ea:59:2b:f6:17:64:99:12:3c:c0:e8:61:bb:45:af:
                    a4:3a:c1:18:dc:1f:3e:30:58:72:08:30:22:72:14:
                    fd:3e:81:02:fe:c7:4e:51:c9:89:e5:b6:06:06:45:
                    59:19:60:8d:64:a2:cb:44:02:5d:4d:22:8e:c7:52:
                    4e:a4:0d:7e:85:e4:4c:a5:4f:62:27:83:8d:43:e4:
                    56:8e:f3:07:dd:bb:f4:d9:03:f1:9a:41:05:cb:78:
                    37:63:81:2d:7c:46:72:c5:c9:88:2d:20:92:93:42:
                    52:c5:0c:2f:03:99:85:1b:66:7d:98:a9:74:73:48:
                    f8:91:3c:20:d9:8f:b8:de:2d:55:5e:c2:ab:44:f2:
                    0b:25:d3:25:48:77:a5:bb:9d:3a:1b:a8:61:7d:d6:
                    e6:02:3c:66:74:3b:5b:bd:d6:3e:f7:bd:fe:f9:8a:
                    54:12:ad:b0:f9:da:bd:05:6f:c8:9a:01:e3:25:8a:
                    5b:ee:80:00:61:27:24:48:5a:73:08:fa:c2:2b:52:
                    11:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FF:BE:49:9F:66:E7:F4:91:87:BB:AD:E7:A0:37:FB:40:09:D1:41
            X509v3 Authority Key Identifier:
                keyid:45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ef:9c:9d:a8:15:ab:2d:15:13:9c:01:28:83:3c:3a:23:7a:
         81:d0:fd:a9:f0:11:43:d3:68:ca:9c:12:0d:18:b6:a5:49:15:
         81:a6:66:01:73:50:cd:b2:e3:88:06:32:81:6d:47:bc:00:87:
         e8:e8:15:30:ce:c3:21:71:22:86:63:03:26:db:86:fd:f5:f0:
         1b:1a:e3:99:25:d9:c1:64:e6:16:28:7e:cb:ee:39:2a:39:39:
         cd:6b:70:13:6c:1d:7e:df:4b:b2:0f:5c:89:22:39:4e:9d:27:
         cf:86:8a:0f:17:cc:11:aa:11:4f:f7:f4:fe:5e:52:b3:44:a2:
         f0:3d:4a:89:4f:ac:cd:22:e6:97:f5:64:83:c3:7d:90:a7:45:
         58:32:5f:33:7d:68:44:8d:6a:c5:6f:b9:3c:64:d9:11:64:be:
         c5:11:55:c0:5b:a0:ae:7d:75:13:9b:9d:68:a7:90:6f:ab:b2:
         73:1a:5f:79:ef:cc:38:5a:ea:bd:08:d8:80:da:ce:2c:50:6b:
         c0:1d:d5:17:0a:3c:86:5e:e0:4c:f2:fc:70:5e:36:24:19:2f:
         d6:b1:ed:45:a4:86:28:15:a8:06:62:31:b2:56:6d:63:38:dc:
         cf:00:77:4d:8f:4d:f3:38:98:00:04:de:37:f2:0b:89:38:23:
         59:e9:28:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:56 2026 by rpki-client