Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File:                     9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier:          r/UNhRgk1X+k9NXu9bbRSIVwLKLIU1LgHJl8Pv2QYTA=
Subject key identifier:   F2:7F:A9:04:24:02:7D:CE:2C:2D:54:9D:85:EF:45:07:73:5D:8A:EF
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer:       /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial:       01A00093D034518DF03F9DD72CD84D573E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number:          0E75
Signing time:             Fri 14 Aug 2026 14:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:22 +0000
Files and hashes:         1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: pFzzx0bb/DEepk6vC5UysS/NdfKYz9/JKzTQth+Y+kw=)
                          2: TujVxWk7elywpyXmIMnDKFw3mNo.roa (hash: Zvi/MCY8l+89SlTxrMXMYRwO5dgOTj98ivE3+1BLbBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:d0:34:51:8d:f0:3f:9d:d7:2c:d8:4d:57:3e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
        Validity
            Not Before: Aug 14 14:01:22 2026 GMT
            Not After : Aug 15 14:01:22 2026 GMT
        Subject: CN=f27fa90424027dce2c2d549d85ef4507735d8aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:89:47:bd:93:3e:18:09:6d:28:0e:ec:29:
                    96:5c:c4:f5:95:13:22:77:bc:28:eb:be:6b:bb:f8:
                    64:86:ca:2f:61:54:d3:e2:17:79:08:9a:57:27:48:
                    9f:6c:e1:d7:74:bd:73:95:47:1b:37:89:b7:f8:db:
                    8c:b7:30:18:07:5f:3c:f5:d7:5d:ae:e2:1c:fc:24:
                    de:4a:2c:93:49:29:35:a1:34:52:89:85:7b:c3:68:
                    e6:03:80:8e:49:08:25:81:c0:73:ab:d0:86:3f:36:
                    3c:41:9c:05:29:5a:44:9e:20:82:90:38:53:e1:02:
                    74:55:91:4a:fa:62:b5:90:a4:17:1d:d9:33:17:4c:
                    34:96:ab:a8:9c:fb:8d:a8:26:3e:63:21:96:90:88:
                    3e:8d:fe:b6:24:56:54:48:3a:4d:90:64:e5:9f:6c:
                    93:cc:f4:4e:ba:ff:a0:a7:62:77:88:f6:df:b2:c9:
                    b9:80:09:99:ec:cc:32:90:24:fb:19:f6:6a:56:74:
                    99:e2:1d:e0:ce:bc:33:98:e6:cd:d2:c2:d5:20:27:
                    44:fd:6b:f1:c6:0d:5f:3d:86:11:b0:1b:1c:d7:c0:
                    06:1a:0e:99:f4:be:2e:a4:29:3d:30:c2:1e:aa:c4:
                    16:a7:14:11:f8:94:9b:97:d9:21:28:69:12:9a:5c:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7F:A9:04:24:02:7D:CE:2C:2D:54:9D:85:EF:45:07:73:5D:8A:EF
            X509v3 Authority Key Identifier:
                keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:9a:06:a8:64:eb:96:04:31:0c:62:93:56:af:2f:22:0d:a7:
         13:08:7b:06:f9:ac:6d:f4:e0:96:5c:d5:28:49:84:a1:92:0b:
         76:02:09:85:ed:4a:4b:06:3a:20:a4:e1:5a:94:ef:72:04:37:
         3b:2d:9c:15:00:30:2f:0b:e1:17:28:21:9f:fe:4f:22:02:b3:
         fe:81:cc:b2:5e:29:84:7b:d6:1e:89:32:e3:d9:15:a4:72:9f:
         0c:76:7a:03:a8:86:a4:a6:47:74:8a:14:0f:d7:bf:43:ae:64:
         d3:ee:d0:cf:bf:63:a6:16:1b:7e:08:94:8c:36:28:f6:3f:6c:
         77:45:46:5c:03:6e:c6:fb:23:41:d5:ff:26:5c:a9:d6:54:5e:
         de:e1:2b:cc:fb:e7:6f:50:1e:0f:19:3b:19:de:47:45:0e:45:
         0f:b6:d8:64:5a:19:94:9d:09:b1:60:f7:cf:c3:66:52:a6:17:
         1f:ba:22:29:10:c5:57:8e:1a:d1:2c:ce:06:c0:e7:7c:77:71:
         77:fb:6e:4b:84:2c:ff:84:27:01:57:2c:28:55:d4:b8:a3:f1:
         7a:5a:a4:5a:b8:b4:41:0a:ea:f7:bc:85:f2:bb:5d:d8:bf:24:
         68:a0:09:df:1b:49:95:fb:ac:a1:a6:38:36:d0:55:41:e9:99:
         4c:b0:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:48 2026 by rpki-client