Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          QJBI7pPl7uglconQ+Vc+lfKEXkg3ubfQvzJLvC2CO2s=
Subject key identifier:   B5:48:C2:4F:40:8D:58:D8:3D:30:44:E8:DE:5E:13:87:A4:01:E5:74
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       01A001DD6E829AAD51D985614107920916BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          0EE3
Signing time:             Fri 14 Aug 2026 20:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:24 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: 8C3+yCN5Gx7YRuwDHESdY3fLM0TaT38+0eQ7eUZL4GU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:6e:82:9a:ad:51:d9:85:61:41:07:92:09:16:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: Aug 14 20:01:24 2026 GMT
            Not After : Aug 15 20:01:24 2026 GMT
        Subject: CN=b548c24f408d58d83d3044e8de5e1387a401e574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:8b:92:45:59:45:ab:a2:a2:79:19:c4:39:
                    f7:46:b9:af:ca:8c:61:da:f3:99:40:75:29:b5:e1:
                    15:65:4f:5d:97:75:55:47:45:97:80:98:e4:5f:29:
                    66:69:37:90:8c:97:88:7a:0d:16:e7:86:e0:c0:6c:
                    fc:c2:e6:74:97:92:d9:e7:c8:79:f9:d2:4d:a3:a7:
                    48:31:86:0d:3f:1a:04:68:b5:4e:4f:51:63:94:63:
                    fb:5a:1b:25:2a:44:d5:93:ff:b2:26:4d:c9:88:b8:
                    0d:f2:52:2d:c3:73:bf:35:37:8f:13:43:71:2d:aa:
                    12:54:87:00:98:be:77:08:b5:b9:e3:fa:f5:2f:32:
                    96:78:a8:93:f8:d3:52:b1:d5:0d:8d:0c:d1:b8:c4:
                    be:23:14:10:95:39:27:1b:b3:9a:8f:6c:8f:4d:8c:
                    01:a6:09:1b:c4:b0:c1:eb:e7:c9:99:55:77:c1:35:
                    3e:06:e1:cf:ad:4f:df:bc:be:1d:b2:a3:e8:9e:ab:
                    e7:48:b8:90:fa:8a:46:8d:61:8c:29:62:1a:b0:d1:
                    44:07:39:14:68:91:37:ae:f0:9c:17:bd:11:23:f9:
                    7d:a5:8d:c4:15:85:09:f2:56:5d:c0:de:e0:eb:ea:
                    56:16:d1:5a:5a:f7:12:6e:b7:20:98:b7:8f:bc:6d:
                    75:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:48:C2:4F:40:8D:58:D8:3D:30:44:E8:DE:5E:13:87:A4:01:E5:74
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:31:f5:61:93:a4:13:e7:28:af:58:0c:bb:ff:22:b5:5a:26:
         98:be:c6:75:23:30:7d:3a:d7:1e:43:72:b9:2b:2d:d8:36:7d:
         27:72:a7:b0:b6:99:5e:1d:32:db:ac:98:57:d1:87:27:01:f2:
         14:8a:04:bc:54:68:09:c6:04:c1:f1:ce:ee:bf:d6:17:9b:b3:
         a0:d7:46:30:0d:c2:6b:e2:e8:c9:56:68:20:f9:6f:d9:30:04:
         40:9a:c8:cb:fd:2f:65:a8:1b:b4:92:9c:80:5b:6f:21:2b:1e:
         fa:3e:80:83:c9:da:07:e1:3e:ad:36:f8:3f:c0:0f:69:c3:45:
         19:0f:81:9f:51:e2:24:1b:ed:28:c2:e5:1d:07:e0:5f:40:af:
         bd:87:60:93:3a:76:cd:72:d5:11:60:49:47:05:5f:37:cb:28:
         e0:eb:7c:c4:85:5d:e5:84:0e:db:37:53:5e:6b:c5:12:ac:68:
         f3:83:ac:17:cd:b1:b2:93:ed:2f:10:5f:02:cc:fa:a9:42:a8:
         5e:63:12:00:3b:41:5c:4b:3f:c9:46:f1:7b:d0:05:49:6a:55:
         1f:76:54:bd:81:76:18:46:72:a2:04:51:50:9b:d9:e3:86:ab:
         b7:5a:2e:d4:11:c1:2a:9c:41:8e:a9:c1:fa:bd:5d:b8:6e:20:
         8b:02:8b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:01 2026 by rpki-client