Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File:                     9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier:          qodUHUF0xJ90qb1T1ehPtBc6TX3uujE00x1NeDh/LNA=
Subject key identifier:   62:72:0A:C2:5E:D0:1C:87:59:DC:28:E3:69:BC:60:51:72:B5:71:A4
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer:       /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial:       01A0024AF816C8E57D11CDD14F64FB373B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number:          10DE
Signing time:             Fri 14 Aug 2026 22:01:02 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:02 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:02 +0000
Files and hashes:         1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: 0RHrktlOjGCrjq+Wvc0joYF0UdR5oBqQBM3reHid1tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:f8:16:c8:e5:7d:11:cd:d1:4f:64:fb:37:3b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
        Validity
            Not Before: Aug 14 22:01:02 2026 GMT
            Not After : Aug 15 22:01:02 2026 GMT
        Subject: CN=62720ac25ed01c8759dc28e369bc605172b571a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:46:2b:ad:8c:a8:38:ff:02:dd:7a:b0:e1:
                    98:05:b4:89:95:f1:34:18:1c:7d:10:1a:bd:b8:74:
                    73:93:cd:71:78:5d:a5:6e:cd:53:63:80:4f:17:e6:
                    1b:4b:04:05:cb:6b:11:25:62:5b:7a:3e:f2:84:87:
                    01:49:cf:ae:81:a7:61:cb:34:6f:50:ed:f9:94:3b:
                    35:87:56:7a:78:32:51:e2:ba:54:9d:53:05:54:d5:
                    da:92:26:b9:84:66:e9:d0:73:25:d9:24:8a:e5:52:
                    cb:21:0f:7a:31:31:14:22:e7:d0:06:d5:b2:d2:ed:
                    40:b3:4d:56:ea:b8:0c:1d:fe:05:99:a3:dc:43:ab:
                    9e:bd:65:2e:e0:ed:73:3b:91:31:3d:22:7c:fe:a6:
                    6f:2e:51:28:fc:1b:6d:ed:45:ca:e1:f1:4f:79:66:
                    36:f6:9f:ab:60:78:86:9d:23:98:43:58:46:35:1a:
                    ad:3d:22:0f:e2:c7:df:35:1b:d7:63:eb:7f:27:a5:
                    76:de:c6:d4:40:15:cb:f2:f0:85:25:1d:78:d7:57:
                    56:cf:8b:f6:be:c3:25:67:c1:7b:a8:1a:62:ad:1f:
                    80:fb:72:f0:54:4e:9e:5c:0d:41:ac:25:8e:7a:f9:
                    10:bd:94:e3:e6:f6:ce:ee:cc:40:ae:c2:6f:ee:66:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:72:0A:C2:5E:D0:1C:87:59:DC:28:E3:69:BC:60:51:72:B5:71:A4
            X509v3 Authority Key Identifier:
                keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5a:b7:be:99:4f:b9:8d:5c:5d:cc:0c:05:40:86:85:8c:8c:
         c4:f5:f9:ff:d2:3b:ab:d1:e5:44:7c:47:f7:9a:b4:2d:63:a1:
         8a:be:64:4c:c3:ab:71:44:82:8e:fa:35:a8:f7:65:9c:77:3c:
         b7:d5:22:02:e0:3c:8d:d8:ec:b1:21:7a:8a:0a:55:6f:08:5e:
         60:79:85:ea:3e:4e:f9:96:85:4f:ca:86:f7:67:14:3b:ee:67:
         2e:c8:27:65:a1:ee:cd:90:aa:96:db:28:08:4c:e9:93:07:ec:
         73:e0:3b:33:82:ae:3b:8b:7a:18:08:d6:87:99:c7:37:ea:a8:
         e9:f9:26:56:b6:d0:16:de:43:81:d6:51:6d:03:54:41:73:be:
         e5:fd:33:b1:ff:2b:63:c2:e6:ed:3f:8b:58:35:ae:68:6a:5f:
         c1:33:6d:d3:4a:92:3b:06:fc:53:32:c1:f0:67:40:91:0b:9a:
         5b:52:21:bc:5e:51:15:4c:8b:ba:99:25:da:62:61:c1:d3:e6:
         d9:8b:c7:a9:78:b1:08:2d:af:79:23:4a:0a:f2:e6:11:dd:2c:
         ce:0f:28:66:70:29:70:67:9e:af:57:47:34:27:1f:b7:be:be:
         eb:db:f0:09:69:54:30:b2:80:fc:5b:2f:4c:7a:1e:53:7a:ca:
         02:ab:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:50 2026 by rpki-client