Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
File:                     9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json)
Hash identifier:          ClcLESKT27NsEj+nJQacekmZeM6o8OBXtIItKuSq6gY=
Subject key identifier:   30:59:E4:72:FC:CF:F8:DE:F8:34:94:83:CF:87:F0:E5:3D:55:18:FD
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Certificate issuer:       /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial:       01A002817758798C4CD4420AA884D790A37F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
Manifest number:          12B0
Signing time:             Fri 14 Aug 2026 23:00:34 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:34 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:34 +0000
Files and hashes:         1: 1-NBpY510vqF2qMVY3oMXM3A9Gl8.asa (hash: z2xAwmjVjy4CnWbYBOYKee0sNevfcPGJCAb69p6hRWI=)
                          2: 4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (hash: xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=)
                          3: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: dCNwBwamEh4uCYrIoeZXN0chD+mc8Xf+vKZ4/TOl5Pc=)
                          4: XBmkVeuFRD2uueboTgIjRhoEQuE.roa (hash: v9V72yDsw7P8I61J+zB2Rok+f/g1fiD48qiwYR7onlg=)
                          5: i-wnSy29UuFpacFp4VCQ-x-lu-0.roa (hash: pem5rQOQgzEXO4+5YTlqIw87kHiUH5nmzJJWuRIIQh4=)
                          6: mhn7brM6t-mSQ1rxrVEfwhcGrGE.roa (hash: ZTw3J4y7h7NzBD9oruWOwkUWKJLWkMvF5dJCuygt9W8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:77:58:79:8c:4c:d4:42:0a:a8:84:d7:90:a3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
        Validity
            Not Before: Aug 14 23:00:34 2026 GMT
            Not After : Aug 15 23:00:34 2026 GMT
        Subject: CN=3059e472fccff8def8349483cf87f0e53d5518fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:6b:f6:23:8e:d6:c7:b4:60:cf:44:59:3b:
                    be:4f:24:d1:37:83:67:df:6e:05:a9:7e:c2:cb:3e:
                    dc:de:cc:8d:e7:61:53:4d:49:86:02:9b:42:19:1d:
                    7b:55:72:ba:86:80:25:b8:6b:7e:94:27:f0:d7:c7:
                    34:2b:7c:59:76:d1:32:5f:73:46:95:4b:f7:f0:61:
                    1e:1e:63:d7:43:94:2c:81:0a:2d:03:09:fc:f7:42:
                    65:fe:eb:18:07:95:d2:bd:0e:8d:64:ee:01:ac:ff:
                    74:c8:ab:aa:c3:aa:03:bc:2b:88:38:e2:4f:95:e4:
                    ea:10:8f:8e:b6:1d:47:6e:13:c9:e7:05:8a:de:a8:
                    46:43:69:ed:c9:53:55:ac:28:28:69:74:4c:5c:bc:
                    3a:9f:ec:35:10:96:53:2b:32:b0:c9:f5:d9:d7:72:
                    8d:99:8a:5b:c0:8d:25:8c:87:18:a6:c1:ee:7a:85:
                    64:83:f6:19:44:17:de:e4:d5:f3:93:1b:03:4e:0c:
                    2a:46:d1:21:35:d9:50:ed:a1:57:19:d9:24:9e:67:
                    da:5d:66:e8:a0:7a:fa:dc:35:da:fd:21:11:ce:91:
                    db:0a:16:92:b7:f0:f3:6c:d3:30:17:23:ad:45:65:
                    c7:e2:f9:f8:68:15:4e:d4:cc:e1:cf:c0:26:39:f3:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:59:E4:72:FC:CF:F8:DE:F8:34:94:83:CF:87:F0:E5:3D:55:18:FD
            X509v3 Authority Key Identifier:
                keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:fd:74:99:24:16:d8:e4:b7:40:10:3f:1e:27:d9:c4:57:
         1c:94:c6:d0:e2:6f:4d:ad:c5:ee:63:9e:7d:98:89:19:8a:3d:
         f2:99:b7:00:ff:fb:b5:1d:c2:30:4d:78:be:c0:5f:cc:f1:e7:
         2e:b6:a4:9b:87:a9:fb:da:4f:24:6d:df:19:0a:ae:5d:f7:fc:
         4c:6e:93:9b:d8:e7:b2:11:27:bb:94:92:a6:a1:dc:14:e7:e5:
         4f:23:24:06:c6:bc:c3:c2:08:46:30:b2:c8:6e:cd:cb:21:cb:
         0d:56:c4:df:b2:e6:28:e3:f6:9e:cb:c4:af:4f:7a:4e:a9:75:
         b1:84:81:57:8d:3e:cf:20:2d:c8:67:0e:39:bb:d6:67:8c:5e:
         33:97:25:2e:90:5e:77:8b:ac:ec:1a:af:d2:f5:ad:64:2b:30:
         41:06:83:ec:8a:5f:b0:a9:82:b5:fa:0e:35:42:27:30:f5:f8:
         1a:c0:0e:b2:ec:45:23:ca:70:42:46:e9:7b:ad:65:9f:e4:8c:
         ba:a0:b7:6d:ce:88:96:eb:fa:04:79:ec:7b:08:a1:54:5e:54:
         cd:5c:3b:f2:a8:e9:fb:52:d1:b9:cc:ed:73:1b:91:d2:16:a3:
         0b:d0:11:f4:4e:58:3e:24:dc:d4:95:29:65:8d:9e:4c:d0:dd:
         db:b8:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:52 2026 by rpki-client