Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File:                     9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier:          UAENp2Gq34MgxZT0FJFLU7R8syi5VjpzC3ll/wwul9U=
Subject key identifier:   3B:ED:55:35:58:CF:D4:A2:8A:4C:13:E6:68:EB:2F:B9:7C:7D:54:58
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer:       /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial:       01A13F704C8FAD27923FAA5B850DC9105808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number:          0BC5
Signing time:             Thu 15 Oct 2026 12:01:26 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:26 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:26 +0000
Files and hashes:         1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: nUNjrerCq7E43qI27jWa72xcx+PuF8ZgDbGQR3CmFRU=)
                          2: DYss90R4HIuww1mW6-7xbEjXb4M.roa (hash: UMw2Vyr1TU50SIq5R3Ka5Y9X/0d1jW9A+sz46TwWuew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:4c:8f:ad:27:92:3f:aa:5b:85:0d:c9:10:58:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
        Validity
            Not Before: Oct 15 12:01:26 2026 GMT
            Not After : Oct 16 12:01:26 2026 GMT
        Subject: CN=3bed553558cfd4a28a4c13e668eb2fb97c7d5458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:ba:d5:7a:63:41:56:14:86:6e:f4:d5:f0:
                    bf:6b:87:dc:b4:d1:6e:f6:f4:f7:6a:17:df:73:53:
                    99:a2:01:26:c9:c7:78:76:68:db:af:16:d8:07:ac:
                    e3:1f:75:6b:94:78:0b:f4:15:f6:b4:2c:d7:84:84:
                    d3:8d:f5:16:7a:a4:64:46:1e:9f:73:2e:ed:db:f6:
                    1d:cd:ed:76:72:e1:7c:cc:7e:29:d3:b0:cc:f3:bf:
                    16:6a:89:3f:e6:5b:8f:c3:c7:84:86:02:76:66:98:
                    cf:d6:7a:71:6e:1f:3b:55:1e:29:ab:8e:19:6f:c8:
                    ca:05:d4:32:f6:02:6e:ba:54:1e:e6:b9:1d:57:c1:
                    dc:fe:68:f0:11:64:88:4c:70:dc:32:7b:03:6a:6d:
                    8b:a1:5a:16:c3:45:5f:c9:b6:a0:7d:06:e9:53:de:
                    05:49:9d:c4:ce:a0:76:c1:73:4b:17:71:36:6f:09:
                    6b:91:e8:07:01:7b:95:62:2f:fb:7d:23:ef:39:ff:
                    e9:4e:2d:74:6e:94:ae:8e:da:76:3c:66:14:d5:66:
                    8b:13:aa:56:8c:12:26:05:83:66:22:d7:6d:b0:91:
                    42:89:a6:b3:2e:2b:9c:99:f9:e9:e1:70:73:be:10:
                    6e:5c:b7:f5:21:f7:8a:db:de:b9:f0:5e:2c:5c:a3:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:ED:55:35:58:CF:D4:A2:8A:4C:13:E6:68:EB:2F:B9:7C:7D:54:58
            X509v3 Authority Key Identifier:
                keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:59:74:e0:39:c1:da:3f:52:c3:cc:06:17:da:69:3a:cf:49:
         17:89:d7:cc:c6:33:9e:b1:22:32:77:f1:3c:26:4c:6e:0c:e8:
         32:fb:01:c6:d0:2b:01:36:a1:8a:96:02:fb:24:cb:3e:11:0c:
         d5:37:d2:5a:17:30:4d:bf:42:ba:cc:d5:16:e5:98:a0:10:db:
         df:c3:46:6b:d0:28:13:9b:e6:d0:be:29:ea:f8:14:cb:54:3e:
         33:77:66:2e:c2:ca:4f:37:9a:e6:6d:79:e0:64:d7:a6:74:4d:
         31:0f:95:03:b5:be:88:59:0c:0f:b8:af:67:5a:4d:89:af:73:
         71:13:e8:02:88:5b:27:8b:a0:92:40:48:75:70:5a:5c:40:61:
         f4:24:28:cd:5e:35:db:de:69:91:79:9e:f7:6f:40:50:b6:6f:
         e8:45:ed:76:f0:7d:74:28:d2:69:9f:5a:61:3a:33:23:37:8a:
         ba:ec:a0:83:92:f1:27:ba:12:21:e1:f5:cd:a7:e2:8b:d6:96:
         3f:eb:65:65:df:be:b0:f9:ac:22:a2:f1:b3:67:4d:47:19:a7:
         16:8e:e7:94:86:39:35:31:8e:c2:a8:18:a5:1f:6d:9f:94:42:
         39:57:c3:19:99:a6:ef:01:29:0a:4e:98:05:0d:46:84:d5:d4:
         6f:ed:39:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:12 2026 by rpki-client