Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
File:                     9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft (raw, json)
Hash identifier:          EzKSLoU4NAgonZFlOQJ/lf6nQlXOJX6J+voxvv3jvT8=
Subject key identifier:   93:78:80:9A:9F:67:7E:F6:92:A5:CA:A3:03:99:2B:2D:E8:F8:39:61
Authority key identifier: F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6
Certificate issuer:       /CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
Certificate serial:       01A147CE382818C06D18FB33286089BF1CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
Manifest number:          1160
Signing time:             Sat 17 Oct 2026 03:00:59 +0000
Manifest this update:     Sat 17 Oct 2026 03:00:59 +0000
Manifest next update:     Sun 18 Oct 2026 03:00:59 +0000
Files and hashes:         1: 9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl (hash: lQ9rzNaYDcGyE81x8MXGeimB5EuQ5boPdJGLZ3tZKyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:ce:38:28:18:c0:6d:18:fb:33:28:60:89:bf:1c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
        Validity
            Not Before: Oct 17 03:00:59 2026 GMT
            Not After : Oct 18 03:00:59 2026 GMT
        Subject: CN=9378809a9f677ef692a5caa303992b2de8f83961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:90:12:bb:7e:ee:21:06:14:b9:d4:fe:e2:
                    9f:b3:78:c4:d6:3f:89:04:89:b5:fe:94:e2:af:6a:
                    a4:db:83:22:d1:ff:8e:2f:d9:a4:da:b2:87:9a:ad:
                    e3:50:07:79:b3:36:d5:33:93:00:88:bd:a5:47:8b:
                    ca:7f:f5:bb:17:99:c5:7b:36:47:12:bc:c7:0d:9a:
                    9a:de:f9:df:08:25:27:75:b9:f2:1c:31:c3:59:cf:
                    09:5d:a4:14:7d:d2:9c:7e:b6:32:ed:2c:14:44:d7:
                    86:54:81:68:27:52:60:ea:e9:98:f1:13:fe:2d:fd:
                    e5:81:95:18:e2:2a:6a:62:93:10:9b:b4:4a:74:46:
                    90:c6:47:b8:07:23:ba:9a:de:5a:cc:28:e8:e7:02:
                    ca:c9:f1:da:8a:4c:dd:5b:8a:f6:60:4a:20:fa:ae:
                    ce:71:7e:d7:07:54:48:5b:3c:c6:03:40:73:3f:2a:
                    fb:96:1e:48:fa:ad:1b:c2:21:bf:7a:10:ed:75:f4:
                    84:55:91:87:65:c8:0e:0b:50:59:14:e2:e9:03:e1:
                    da:59:55:8d:00:b1:9a:d3:95:4b:d1:d0:74:2c:d1:
                    2f:37:27:68:b3:13:55:50:29:7b:fe:01:e8:12:c8:
                    9b:55:b9:9b:a1:18:f4:a9:af:73:cf:f7:03:94:82:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:78:80:9A:9F:67:7E:F6:92:A5:CA:A3:03:99:2B:2D:E8:F8:39:61
            X509v3 Authority Key Identifier:
                keyid:F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:62:17:d0:ea:22:6d:f1:a1:1f:25:78:4e:e1:d6:9e:ec:15:
         bd:d3:58:ce:92:89:2f:23:5f:a5:30:95:0b:6a:11:51:42:a3:
         9c:88:f6:4b:07:a4:77:65:48:54:64:c0:9f:92:86:2e:5d:1d:
         47:4d:86:b7:08:1d:06:be:65:4b:c6:0d:e0:fc:3c:ac:e1:cd:
         53:46:01:e2:8f:8e:a7:1f:54:e9:25:b4:8b:f9:34:f0:02:ba:
         0f:67:45:62:13:9a:8d:04:a7:27:57:44:4d:fa:1b:5f:99:77:
         e8:e2:71:04:4b:d7:87:df:10:70:12:5d:88:95:ec:01:77:e0:
         78:84:06:9a:07:c5:c6:98:b1:ca:8c:ad:67:d2:d5:ad:35:f2:
         eb:2b:ee:76:27:51:39:4b:b1:c7:26:eb:1b:65:78:38:d2:f5:
         0d:03:fb:7c:02:15:f9:f5:f5:1a:06:cb:d3:09:43:41:18:83:
         5c:3d:e6:39:14:f6:df:96:2c:a4:e4:f8:08:c3:7e:32:91:1a:
         3b:5d:62:ad:62:34:86:29:cb:1b:3b:69:51:02:37:56:1d:db:
         e8:3d:7c:1a:58:7e:7e:fd:be:e0:24:d3:c9:b6:4f:ec:f2:3f:
         70:4c:54:f4:98:c1:b1:24:85:da:2e:a1:06:bf:e3:bf:3b:63:
         61:a6:8f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:45 2026 by rpki-client