Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File:                     m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier:          QnxlBNbrdNqsPEWj7tJMzX0q1OvKv2eFkYNH2DhMMVc=
Subject key identifier:   1A:2A:E3:E0:9C:FB:5C:CD:84:9A:70:42:98:CE:1D:78:1F:4E:0C:C8
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer:       /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial:       01A11CE386B742A750D42408D15A6D930027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number:          0ED8
Signing time:             Thu 08 Oct 2026 19:00:35 +0000
Manifest this update:     Thu 08 Oct 2026 19:00:35 +0000
Manifest next update:     Fri 09 Oct 2026 19:00:35 +0000
Files and hashes:         1: YNGfrZvagg4O4FGkVhnBiiruLx0.roa (hash: /ltwcx7I+h2VdXqUCtGZD3WsmcEgqxtyYnfei2/3ZlQ=)
                          2: kVcl-lsZR6xyXsxO8aWh944dJv8.roa (hash: wO+8xB9lCvBU2gIRiYR9ejf9p/0a0RGT/tmuLIRs2LY=)
                          3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: /8uTy5E4DHzB43MJ3J6hNRzbHsyBe8VNja6ltuOOcQ8=)
                          4: oK8DgClRz_oA4VjYTOJycO25RE8.roa (hash: HL0prlO8v1UmrZWNdBDiYE7Jz5klWeZulY7cNTFYDKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:e3:86:b7:42:a7:50:d4:24:08:d1:5a:6d:93:00:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
        Validity
            Not Before: Oct  8 19:00:35 2026 GMT
            Not After : Oct  9 19:00:35 2026 GMT
        Subject: CN=1a2ae3e09cfb5ccd849a704298ce1d781f4e0cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:ff:7a:d2:aa:b9:19:a3:f5:88:6e:5a:e5:
                    81:60:c0:ad:85:99:8e:15:06:5b:49:aa:78:00:79:
                    7d:2d:ec:bb:ff:39:cf:94:2f:f1:91:d1:ca:50:33:
                    ee:8c:46:c5:20:43:6a:a4:50:f3:5e:48:d0:d1:3e:
                    26:3f:d0:12:cf:08:ab:a6:21:9a:46:6c:2b:ba:97:
                    a7:77:f8:61:0f:de:81:4d:c2:6b:5c:02:33:32:b9:
                    b3:10:88:01:96:29:61:f6:e9:ab:cd:36:ab:8c:ce:
                    01:78:32:06:6a:53:91:9e:5e:50:4a:0d:cf:37:33:
                    8a:22:ff:b8:68:53:8d:a8:43:0a:cc:6e:0e:fd:e1:
                    24:29:51:27:ca:71:34:21:09:b8:7f:aa:a8:6d:0c:
                    23:68:4b:c2:dd:0c:f8:17:c8:19:06:3a:36:89:ff:
                    00:ed:9a:da:89:74:60:ea:8e:9b:8f:71:36:1b:16:
                    07:e7:6a:10:7c:76:e5:72:81:a9:12:e8:e9:1a:88:
                    d4:4f:11:62:a0:51:83:c1:e8:5a:b8:e9:02:9d:16:
                    85:d5:38:57:94:bf:b5:b8:a3:b7:f4:3b:93:76:e2:
                    60:0b:ca:36:81:08:fd:31:16:b5:cd:3d:cc:c6:f5:
                    78:20:6a:d7:dd:ce:3a:55:56:68:54:e0:ea:28:56:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2A:E3:E0:9C:FB:5C:CD:84:9A:70:42:98:CE:1D:78:1F:4E:0C:C8
            X509v3 Authority Key Identifier:
                keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:03:ab:c2:66:b3:08:82:b8:f3:2b:52:99:d1:ea:cd:0c:
         c7:74:3d:ab:20:9a:15:15:73:7c:a3:ac:77:03:f1:9c:38:40:
         82:5a:6e:27:c8:e1:3a:6f:b8:ef:6a:5b:44:bb:35:59:04:16:
         48:63:68:0f:5f:ad:d6:3a:7e:bb:0f:a7:8f:f8:6d:91:1a:10:
         12:2b:85:72:22:3d:07:0a:0c:ed:d3:2f:66:4f:1a:2a:59:e8:
         f2:ac:c0:9d:a2:43:03:f3:51:d1:d5:e3:df:ad:97:df:5c:23:
         4a:1a:39:29:7a:1c:65:ce:0b:7f:ed:50:d7:3d:b4:a2:91:85:
         b4:43:86:81:bd:b0:6c:3b:27:08:14:a1:25:e5:bc:d9:a3:80:
         0f:ae:f0:d3:cb:a0:6f:9f:8b:fe:3b:1f:27:16:b8:db:b7:8f:
         e2:bb:96:3c:aa:31:ff:b5:4e:b1:b9:c4:35:e6:14:9d:ee:dd:
         fc:80:2c:ff:58:b1:96:47:76:87:d8:f9:35:f0:02:46:0c:6a:
         a1:80:d8:e4:42:b9:0a:64:df:e4:b8:d3:19:d1:a3:2c:fd:16:
         76:af:3c:1c:93:fa:98:d1:ca:8b:67:91:f9:d4:5e:b3:85:bb:
         cc:3a:65:bf:96:ac:ca:52:0d:40:83:58:bc:95:79:2d:51:d6:
         34:c7:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:26:48 2026 by rpki-client