Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
File:                     9lWaWOLE8UoftjRDGQgK88xWRGs.mft (raw, json)
Hash identifier:          e3B/Ou7uDTDKrErm0hDH5NLvMIYX0zGaAu1r/ENp7bc=
Subject key identifier:   69:F6:1C:98:A3:3A:0E:68:1B:BA:A5:48:E2:DF:9A:F6:8D:05:67:B2
Authority key identifier: F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
Certificate issuer:       /CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Certificate serial:       01A06EDEAD195A29FC86FF42514C5F838881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
Manifest number:          0128
Signing time:             Sat 05 Sep 2026 00:01:22 +0000
Manifest this update:     Sat 05 Sep 2026 00:01:22 +0000
Manifest next update:     Sun 06 Sep 2026 00:01:22 +0000
Files and hashes:         1: 9lWaWOLE8UoftjRDGQgK88xWRGs.crl (hash: AmDmv42ro0Fim+ZPNsRosmuQR/dHoyboxyDQaYmmoxw=)
                          2: _j_QYhrm9EtHVz55rfuJrPeU9ac.roa (hash: NUaMPNcwY1qDOrksQXA+36Saq/+PThu5xZNDt3TsgDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:de:ad:19:5a:29:fc:86:ff:42:51:4c:5f:83:88:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
        Validity
            Not Before: Sep  5 00:01:22 2026 GMT
            Not After : Sep  6 00:01:22 2026 GMT
        Subject: CN=69f61c98a33a0e681bbaa548e2df9af68d0567b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:c9:01:a8:29:79:32:f4:f0:c3:44:99:93:
                    69:63:14:81:d0:d7:10:61:aa:be:b6:f1:d0:03:06:
                    30:61:c2:ef:d5:c3:4b:21:4e:71:1a:54:96:ec:20:
                    b7:0c:2b:fb:19:39:71:66:29:e5:f5:28:27:b5:cc:
                    9f:4c:7e:cd:c9:94:35:2e:0b:bf:74:ab:ef:d2:8c:
                    98:a6:c2:21:cc:d4:1b:9f:58:9a:5f:85:df:af:ec:
                    95:00:56:1c:4d:cd:61:ff:f9:e0:2e:df:54:20:16:
                    38:e9:39:f2:19:48:df:11:06:7d:0c:c6:cf:e9:29:
                    99:77:bd:5c:97:11:03:52:ca:41:c5:d6:db:c4:c5:
                    07:d1:d2:30:9c:53:0c:28:5e:d7:9d:69:59:93:63:
                    5e:7c:6e:b8:ea:5d:28:8e:32:3f:ff:35:73:5b:3a:
                    7f:57:58:d4:10:1f:6c:7c:a7:06:c8:c0:e7:c8:3d:
                    b3:29:ef:1a:bc:5f:26:31:25:50:26:d4:9e:32:7d:
                    09:fd:05:2c:84:a5:18:d8:9a:1e:9e:5a:1e:27:33:
                    74:e0:07:a1:5e:e2:ea:8f:93:73:62:e0:46:d8:3d:
                    aa:48:58:c1:4d:bf:b4:d3:7f:2a:c5:ef:2a:57:9f:
                    69:0b:78:4d:26:d0:03:a7:1e:b4:20:4d:d4:2b:e7:
                    63:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F6:1C:98:A3:3A:0E:68:1B:BA:A5:48:E2:DF:9A:F6:8D:05:67:B2
            X509v3 Authority Key Identifier:
                keyid:F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:56:40:8f:31:41:5d:26:61:47:01:fd:31:64:7b:d4:15:
         2c:e8:dc:45:b8:0b:8f:bd:dc:53:ae:65:09:e6:14:9a:2d:67:
         dd:64:6f:2a:28:4b:df:b4:49:2b:cf:62:40:44:e6:8e:38:c5:
         c4:9e:7a:bf:b8:f2:2c:11:32:68:f2:5f:6e:22:34:05:bd:58:
         63:3b:9e:2e:99:ee:ab:70:19:2f:f7:2b:e3:78:31:3f:28:af:
         cd:d9:03:6e:e4:5f:44:b5:8f:c1:2b:c6:d0:40:43:a7:13:dc:
         e7:67:08:05:9d:07:af:0d:2e:3f:a3:f7:b0:61:f3:ae:fd:ac:
         16:df:97:47:04:43:c8:72:8b:43:3d:dd:8b:d7:60:d5:bd:fe:
         79:97:f6:5a:3c:21:a4:b1:ef:98:02:4a:28:d1:ba:73:e1:14:
         f5:b1:05:a0:f3:e7:90:c7:32:98:2b:cd:8f:92:1d:6e:3e:de:
         49:e9:e8:ae:0d:a7:00:64:9e:20:2d:67:52:26:9d:2a:7c:20:
         2f:7e:e7:82:22:b6:31:b7:a4:55:9b:e4:54:8f:f3:56:cb:01:
         01:4f:73:f7:4e:83:b9:93:13:d4:b4:8c:44:18:1d:68:63:51:
         64:11:b2:e6:17:69:a4:5f:43:01:9b:6b:65:f3:cf:bc:29:c5:
         9f:b3:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:09 2026 by rpki-client