Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File:                     9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier:          EWWHnXFlQE/NFprG9ylSbudNNlQKUvhChA1/3nqWkZs=
Subject key identifier:   FA:92:9B:05:BF:36:AD:CF:3D:8C:8D:D7:B9:A8:34:76:8E:44:7C:FC
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer:       /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial:       01A13ECBB494E5AC1FF03C13317F2591DF4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number:          17E9
Signing time:             Thu 15 Oct 2026 09:01:39 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:39 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:39 +0000
Files and hashes:         1: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: vQsIogyKZ2zgvYgoMeF4N1QDAaKfO9qgXpuK4BGFjtk=)
                          2: epgbRZ451e-4FNMtDUxjsoEsQts.roa (hash: 1bTVs1WZkQ0C5Jeug5kRDuRS7N5Tu6N+va1M7r7izGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:b4:94:e5:ac:1f:f0:3c:13:31:7f:25:91:df:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
        Validity
            Not Before: Oct 15 09:01:39 2026 GMT
            Not After : Oct 16 09:01:39 2026 GMT
        Subject: CN=fa929b05bf36adcf3d8c8dd7b9a834768e447cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:a4:6b:b0:21:78:5a:35:19:1a:58:a4:27:
                    37:44:60:98:07:b4:74:45:9d:f0:20:95:b3:5a:7e:
                    2b:a8:a7:84:79:ac:43:d3:85:17:29:03:ff:ee:1e:
                    3a:d9:5a:06:e1:e5:f9:27:da:ff:49:ec:21:1d:61:
                    71:ef:b2:82:6d:2f:58:26:a7:2d:85:66:02:47:38:
                    22:ae:f2:2d:c6:a9:39:64:4f:ed:91:b3:53:27:16:
                    4e:e2:36:29:35:db:2f:8e:00:8c:12:8a:51:d9:67:
                    98:b0:02:5a:b5:d1:5a:0d:cf:22:85:60:c1:fd:28:
                    eb:d5:2e:3f:e7:69:e1:7b:ae:b3:f6:2c:b8:9c:73:
                    34:18:4b:89:db:fb:9c:65:d5:ad:23:82:0e:38:20:
                    96:33:94:1d:8b:4f:90:00:ed:5f:2d:7d:c2:75:6c:
                    48:56:65:30:7b:ce:35:8e:27:74:e6:4a:d6:cc:bc:
                    02:9e:6e:0d:3b:f9:cc:d2:4e:78:b3:9a:ae:43:c1:
                    63:ee:fa:5e:58:a0:f4:02:c5:79:8c:8c:2b:14:e5:
                    4f:52:a8:2f:27:22:86:3a:c1:d8:b4:c9:50:79:23:
                    f4:6b:28:fd:8b:46:40:a4:ac:36:17:9a:02:70:e1:
                    a6:9f:8d:f8:2a:59:b7:4b:73:04:67:55:23:f9:7c:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:9B:05:BF:36:AD:CF:3D:8C:8D:D7:B9:A8:34:76:8E:44:7C:FC
            X509v3 Authority Key Identifier:
                keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7a:d8:3b:b6:5d:28:46:e5:97:a4:71:1c:61:48:34:18:8c:
         84:49:f1:9d:6e:00:e9:18:7e:91:12:25:fd:64:fd:50:30:96:
         31:d9:0f:82:be:b1:59:30:ed:68:79:bf:39:cb:f1:27:fc:60:
         7d:ef:f4:0f:5d:40:c7:46:25:fb:ac:db:af:71:55:7d:48:a4:
         c9:e6:a2:fe:ea:a1:b6:02:b1:69:80:55:13:2d:20:2c:db:d2:
         49:b2:59:61:fc:14:f2:a1:8f:fd:2d:c8:af:66:fd:da:9f:b1:
         cd:44:76:d7:d8:1c:7d:a6:13:fb:06:8b:9e:c1:54:0d:e8:aa:
         74:59:6b:8f:6a:eb:13:93:5d:5d:42:52:a0:49:bd:6a:c0:b3:
         51:fc:32:5f:75:0e:23:db:82:23:05:bb:7d:04:cf:8f:9d:5f:
         ed:5f:09:a2:49:74:51:18:ca:cb:d7:4d:d2:61:ad:19:4f:bf:
         47:df:37:59:0f:3a:99:33:03:52:18:cd:a5:9e:27:bf:d3:09:
         6c:7d:09:34:07:1e:7c:aa:75:e5:8e:e7:b9:57:15:94:24:90:
         90:a6:b8:9f:60:b9:b0:ce:71:d1:05:6c:94:d6:71:8d:f8:fb:
         e7:16:3c:55:23:15:60:ca:0c:d4:bb:d1:67:43:53:07:fd:85:
         30:f4:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:19 2026 by rpki-client