Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File:                     f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier:          nmPKqw7zQPQ6uF28Q3fm38IsF4YIzVCi+sij5eijABc=
Subject key identifier:   F7:1D:50:BF:25:5D:AE:DA:47:F3:BD:FB:26:EB:90:4D:E2:C4:D9:8F
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer:       /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial:       01A08B9F64D663BC2C535C9BDCDB1FA70319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number:          15D0
Signing time:             Thu 10 Sep 2026 14:01:13 +0000
Manifest this update:     Thu 10 Sep 2026 14:01:13 +0000
Manifest next update:     Fri 11 Sep 2026 14:01:13 +0000
Files and hashes:         1: G6WXhyvVtMAy_hDzbTynLKDz6nI.roa (hash: hU50SCH6HViVYgZI7FoCwUv3dNNmWkj31LMFtbg1FRw=)
                          2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: uBtKlD5c2UuB21n5IhBSLFz0kmmqQzJpfcCAmCiwypI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:64:d6:63:bc:2c:53:5c:9b:dc:db:1f:a7:03:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
        Validity
            Not Before: Sep 10 14:01:13 2026 GMT
            Not After : Sep 11 14:01:13 2026 GMT
        Subject: CN=f71d50bf255daeda47f3bdfb26eb904de2c4d98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:55:a8:e2:d4:f5:9b:5d:d3:1d:f6:de:13:30:
                    b8:1a:29:c2:e7:20:5b:45:d3:8d:77:ac:1d:a0:5f:
                    8e:af:97:e1:b9:33:25:ef:09:62:d3:cd:fc:3a:8c:
                    fc:aa:77:dc:b8:d3:6f:2a:fa:da:c3:4a:a8:f8:52:
                    c9:df:e0:c5:fa:25:a0:c9:cd:81:ef:22:14:0e:e9:
                    dd:5e:89:43:bc:c1:a0:38:9a:69:6b:6c:af:e4:da:
                    16:e4:43:bc:8b:36:7e:6b:70:e3:11:d7:4a:a3:e6:
                    e9:fd:e7:db:c4:e1:b1:9d:33:8d:c0:f0:ec:ba:68:
                    36:55:e7:fc:ae:36:f3:f9:c0:3d:56:ae:80:19:af:
                    d6:0a:c8:e5:7e:66:bd:af:1d:ee:ac:04:d5:7f:78:
                    19:8c:bc:eb:73:9c:e7:9c:28:9b:df:a7:06:2c:b9:
                    9c:80:fe:6e:57:15:8b:b7:64:78:0c:d1:81:26:5a:
                    51:ef:dc:12:57:61:58:b1:4a:4c:96:43:04:67:a6:
                    5d:6b:65:a8:49:70:71:71:81:55:4a:39:90:2e:bb:
                    33:f8:1c:05:7e:53:1a:60:3c:d3:4d:3b:79:ce:50:
                    d0:54:1e:cd:ba:8e:95:c8:47:ce:e9:14:47:68:bc:
                    2e:d3:73:60:37:5e:3e:75:b6:af:82:59:ac:24:b5:
                    48:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1D:50:BF:25:5D:AE:DA:47:F3:BD:FB:26:EB:90:4D:E2:C4:D9:8F
            X509v3 Authority Key Identifier:
                keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6d:76:03:5f:b9:f9:db:5e:94:d2:8f:de:91:4d:46:c5:df:
         77:dd:32:cc:57:34:94:1f:ef:e0:02:d7:39:95:87:5c:4b:1c:
         04:8f:ad:f2:55:1a:60:71:56:02:e7:cb:dc:ee:e9:f1:62:0b:
         26:55:c3:25:f9:fc:28:75:cf:00:b1:c6:aa:52:ec:8d:64:70:
         1c:45:e6:fa:03:89:eb:15:dc:5e:9e:c8:1b:ca:3f:06:4a:e2:
         e5:a3:10:92:76:dd:c8:aa:fd:97:82:9d:e1:cd:23:a7:e6:4e:
         5c:3a:27:5e:35:ae:c7:7d:fe:57:68:22:70:22:98:19:ad:68:
         b7:9c:28:a6:f6:1b:45:04:de:0a:58:dc:49:12:1a:f4:47:52:
         e1:50:3b:30:3f:fa:d0:4e:5f:9b:2c:d9:01:1f:74:16:82:bd:
         82:5d:1e:23:a9:1d:c7:14:c9:76:fd:b5:8c:b2:a6:bb:69:9e:
         30:95:10:cb:7a:ca:80:46:ac:e0:58:dc:f3:76:2c:46:2d:fd:
         98:5a:2e:a0:71:31:b0:ec:14:3b:22:0f:60:89:0b:78:4d:60:
         57:14:6c:14:98:03:1d:a7:eb:91:9b:55:39:0a:93:9f:64:fd:
         39:ab:e4:80:d8:c3:c8:cb:c6:8a:25:3b:b7:97:8d:61:a7:19:
         62:46:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:04:50 2026 by rpki-client