Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
File:                     9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json)
Hash identifier:          mPN09QtrtuJfbuj7oEdgHtlDOF8R46EjSsK/QvM/+dE=
Subject key identifier:   11:7F:E3:F0:CE:3E:1E:B2:E4:47:2D:CD:59:0B:ED:89:61:56:49:E2
Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Certificate issuer:       /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Certificate serial:       01A03E602FFA6326620B63A5E5A4C1B9BA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
Manifest number:          0413
Signing time:             Wed 26 Aug 2026 14:01:26 +0000
Manifest this update:     Wed 26 Aug 2026 14:01:26 +0000
Manifest next update:     Thu 27 Aug 2026 14:01:26 +0000
Files and hashes:         1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: FIQt2DL9XKRVS8ATKsmGKlh30Q/+weeNEmIleN/5YEU=)
                          2: wpr47QW5yPt3pCsYurF1J3o7Rg4.roa (hash: 0bSRAwMu0O91Emdt4EmzLACfG7UlbU7GDgVzgrcUSBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3e:60:2f:fa:63:26:62:0b:63:a5:e5:a4:c1:b9:ba:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
        Validity
            Not Before: Aug 26 14:01:26 2026 GMT
            Not After : Aug 27 14:01:26 2026 GMT
        Subject: CN=117fe3f0ce3e1eb2e4472dcd590bed89615649e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:b0:ca:03:02:01:18:c4:98:fe:5a:c7:99:
                    0d:79:49:99:24:8c:fd:a5:08:fb:73:1e:8f:6c:bd:
                    6e:4d:2f:33:d3:07:25:c7:38:87:a5:5e:1c:83:e8:
                    a6:52:df:9c:1f:9d:8d:2b:3f:e6:5d:0f:84:42:59:
                    f9:97:c0:ec:ea:5e:e3:87:71:04:d2:0a:30:f0:92:
                    35:47:98:8f:58:a2:a9:69:16:e7:93:8f:e7:59:54:
                    28:6c:74:02:98:cb:9f:44:9c:fb:77:f6:d0:2e:72:
                    2e:0d:d9:ba:e3:9d:0d:7e:c9:93:78:f3:40:7f:e1:
                    cb:fa:b4:0f:b9:29:e6:22:7b:b8:ed:dd:e7:40:c3:
                    31:1a:86:f4:d7:32:31:97:0b:62:4e:51:5c:9f:b1:
                    41:f5:24:9d:fe:3c:14:f8:86:dd:48:d1:13:ac:ad:
                    e8:2d:4a:bf:aa:db:06:67:e1:03:45:b2:b2:cd:1a:
                    da:2e:5c:32:58:7b:7a:6a:9d:67:b5:fa:83:a0:d7:
                    c2:d4:11:9e:b0:b5:e6:4d:de:91:2c:90:61:11:d8:
                    78:97:f8:8a:b0:ae:11:59:8b:85:2c:b4:69:1e:5b:
                    65:e6:90:d3:f6:c2:b0:b4:fc:01:9a:da:cb:59:a2:
                    80:19:21:1a:a3:bc:ce:1f:23:f5:0c:ad:66:06:15:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7F:E3:F0:CE:3E:1E:B2:E4:47:2D:CD:59:0B:ED:89:61:56:49:E2
            X509v3 Authority Key Identifier:
                keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fc:ff:46:a9:3b:da:f1:a0:10:26:37:99:40:0d:2a:7f:c6:
         87:bb:72:20:86:f7:0c:b3:75:6c:89:39:5b:6b:ad:b4:72:c8:
         6f:98:ba:d7:9b:92:81:9c:60:fb:dc:b0:dd:a8:df:0c:d9:bb:
         bf:05:5b:6d:c6:6b:ac:4a:d1:0c:d3:84:93:92:e3:ec:e4:df:
         05:b2:ce:02:94:a3:44:23:d4:ec:53:4d:fc:a7:50:08:02:0c:
         5b:8d:30:fd:cd:05:e0:e9:36:31:ce:87:c2:10:ee:47:da:7f:
         c6:47:b5:0a:8d:9e:88:70:ba:01:11:af:92:60:6e:36:a9:50:
         d9:52:7e:d5:26:e0:b5:f9:3d:e3:ec:c3:65:d1:1e:fa:e4:0b:
         08:72:d0:a5:40:31:10:c7:3a:68:18:1d:bc:a1:24:e8:69:f0:
         25:a2:46:14:c7:b6:08:69:54:49:3c:fa:25:35:22:f7:e4:78:
         32:e3:13:15:c6:1f:ee:5e:4a:24:09:38:46:11:da:91:fd:31:
         e1:e0:25:a0:dd:30:b1:75:28:89:ff:c1:db:80:70:f2:a2:67:
         81:ca:82:5a:d9:35:f4:8c:e3:55:19:e8:ff:e1:39:79:9d:61:
         08:63:86:57:72:08:09:b8:12:9e:36:5c:f2:89:c3:7b:5b:32:
         43:f4:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:35:23 2026 by rpki-client