Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File:                     f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier:          BtX43KiyIZHghJo6bslaMsRd09W6EcfTFM/dxVglmr0=
Subject key identifier:   C9:95:21:93:90:12:8A:A0:10:C3:DD:18:12:C1:B7:A7:2C:21:3B:38
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer:       /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial:       01A06E7096F2EEC4AF4E11D4A62D7BF2EFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number:          11D6
Signing time:             Fri 04 Sep 2026 22:01:07 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:07 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:07 +0000
Files and hashes:         1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: yPsqEvGgqcmnSzXqQET3WaXdfbx/Hrl2BazBwUSuIiw=)
                          2: tauHtMalszupNYYuBs8Guj0KLFg.roa (hash: gc2v8u+MqnwJxcknut+JafkulUVpld8Kb67/cVdhhLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:96:f2:ee:c4:af:4e:11:d4:a6:2d:7b:f2:ef:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
        Validity
            Not Before: Sep  4 22:01:07 2026 GMT
            Not After : Sep  5 22:01:07 2026 GMT
        Subject: CN=c995219390128aa010c3dd1812c1b7a72c213b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:b0:0b:99:29:b5:2f:2f:7b:c0:91:f2:37:
                    c8:d5:97:60:67:98:a1:9a:a6:f3:a2:0b:1d:ca:f7:
                    b0:d9:fb:f7:e4:14:c7:5d:b5:b3:08:c0:5b:9d:6d:
                    e5:73:69:f0:3c:13:03:4b:9d:74:a6:83:d9:98:2d:
                    e8:7b:84:3a:1b:bc:0c:44:bc:ba:26:91:58:3c:9b:
                    a2:b6:fe:ff:e2:cb:33:7c:01:bc:98:b1:da:92:76:
                    6d:4b:fd:ae:cf:84:f9:c7:09:6d:af:94:90:9c:41:
                    6b:bb:ed:83:d0:da:ef:da:26:b9:58:bf:9d:dc:de:
                    b9:58:54:b8:f8:e6:d2:61:5a:5f:dc:cf:44:7d:51:
                    1b:45:3d:66:f2:29:96:4c:02:b0:dc:60:63:c1:f8:
                    2b:b6:2c:11:cd:f4:09:10:4c:2c:5c:4b:99:b8:0c:
                    e3:15:fc:9c:ed:c3:86:19:93:27:ac:e2:50:90:33:
                    4b:0e:5d:18:b9:46:8e:0c:14:bf:dc:16:44:8e:fa:
                    dc:45:fc:2f:78:10:e7:8c:f7:3b:7a:e8:bf:bd:39:
                    88:76:3e:0c:05:04:96:3a:89:77:ff:3b:20:8e:b8:
                    27:7b:d7:84:33:59:0e:bf:74:db:d7:31:1b:db:46:
                    8b:c4:aa:91:21:35:3c:7c:bb:2b:40:76:4f:5e:39:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:21:93:90:12:8A:A0:10:C3:DD:18:12:C1:B7:A7:2C:21:3B:38
            X509v3 Authority Key Identifier:
                keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:38:e9:9e:98:16:b5:73:0e:6c:c6:5f:53:a2:94:dd:e9:0e:
         1b:ea:a3:6c:a2:62:f6:b8:67:13:c9:e2:ef:11:a8:1d:f4:28:
         3d:7e:5e:78:45:ab:b1:f5:86:35:a2:2e:7a:5d:b3:52:ef:c9:
         34:d9:ae:f6:37:b7:e5:c1:28:32:32:56:00:05:cd:19:7e:01:
         09:e2:57:06:7d:af:05:14:9d:97:b7:94:1b:3c:e2:00:bc:25:
         a5:e1:d7:67:29:18:05:93:17:f4:8f:8c:4b:72:a8:f2:3a:d7:
         c2:07:21:b8:9b:5f:7f:5a:dd:79:cb:e1:12:57:de:f8:ac:19:
         36:75:0d:dd:23:4d:f9:bd:e0:43:64:0f:64:23:8b:0c:47:8a:
         62:ed:92:86:18:eb:07:37:32:fd:af:3a:20:ef:05:a5:4e:5f:
         88:1f:87:ce:13:69:38:1c:98:9f:d1:9e:a3:f6:78:47:9b:ab:
         2a:ea:a2:0a:ac:ef:4a:92:d1:68:9f:09:e6:8d:fc:26:70:b8:
         b9:7f:eb:53:b5:b0:8c:e1:1b:98:fe:dd:6c:d1:27:23:84:0e:
         ea:ea:c3:8e:50:92:d8:86:93:83:a3:26:32:f5:e9:5a:ee:cd:
         ba:8a:66:8e:bf:be:de:c8:f5:39:cb:2b:08:d8:95:e6:ba:5e:
         bf:c6:4e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:26:05 2026 by rpki-client