Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          VJwOWQ2/Hx+AXJyk+Yt+fkwlAzemcE5n39LO6UZFs18=
Subject key identifier:   15:9F:C5:D6:B4:16:F1:41:6F:80:AB:29:60:41:53:03:C5:02:1B:3F
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       01A13F70B019B2D8432BE51D50EB35BE88EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          1AAD
Signing time:             Thu 15 Oct 2026 12:01:52 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:52 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:52 +0000
Files and hashes:         1: 8ki6p7N4UmEmV-0NazqEv7cAQKc.roa (hash: Q0BUMMV+0mfUnsBWl6XxVsO5hGuTsx5iHlZ2d9i6cbo=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: 7jske740vy2g/IVtdsUxO3Vgkdm4/jej2yhHd7ajWKo=)
                          3: Njus34_tWTQbMZlE1tRpeQUdH2I.roa (hash: 87ImyGsbG7v1MN92b3+FnhDyYHAWQQrZK7ULWDILgcQ=)
                          4: _DgxgPBMn4GEtr1HFV4lxED-jk0.roa (hash: 7MO54lxduq+XFWhLRW9Dq64qSqZFXeJN+DNM88s/Oz4=)
                          5: jI_ogoD6SCROAfC2uF5kFRHPxqA.roa (hash: sveu3znN5dPwYIjmbfsqGbK76GO+Tvbu31qn7+7Nv0Y=)
                          6: jvsxNshZlNTMsfGWs2Sh1xRbS4o.roa (hash: qSVicAoSlx92lOm4hijWey1zcFGYeV01I7K4wDaTK40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:b0:19:b2:d8:43:2b:e5:1d:50:eb:35:be:88:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Oct 15 12:01:52 2026 GMT
            Not After : Oct 16 12:01:52 2026 GMT
        Subject: CN=159fc5d6b416f1416f80ab2960415303c5021b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:51:46:7f:55:13:e5:59:be:09:80:48:e7:0e:
                    bb:9b:84:41:cd:69:8e:53:c3:37:31:77:d2:7f:63:
                    7a:55:db:75:63:41:de:bd:23:f9:3d:5c:c8:aa:65:
                    6f:0a:fd:78:95:79:d0:62:15:31:0d:ad:3d:86:84:
                    bd:82:b8:1f:c2:e2:5c:0e:98:b6:3d:a5:c6:30:2e:
                    a2:5b:61:54:c7:b7:0f:16:d4:0d:89:6f:4c:61:97:
                    60:d8:7f:e8:26:21:7e:1c:ee:13:b0:32:6f:d1:00:
                    58:32:ee:a6:fe:1e:90:3a:d8:9c:1a:43:ee:0d:3d:
                    7a:b3:ba:1b:e8:c0:c0:cc:c5:ad:92:cd:86:79:b5:
                    cc:a8:8e:0b:d1:a4:00:20:59:98:9f:96:2a:73:97:
                    e8:be:f9:2c:7c:6e:42:7d:f3:17:d7:bd:4a:3b:06:
                    27:ea:05:7f:e6:26:f5:9e:de:54:41:c0:39:16:b6:
                    fe:40:81:31:c8:a3:70:db:a7:40:4d:7a:b2:24:83:
                    5a:fc:cd:88:4a:d2:4b:b4:d4:be:c0:c9:92:6a:69:
                    25:5a:23:fd:94:e6:25:9d:d3:68:61:85:3e:a0:8d:
                    56:6f:ba:9a:77:02:1b:a7:d6:73:5f:02:bb:bb:07:
                    db:ef:6f:44:6e:95:a7:de:4f:5c:61:28:7f:c3:2e:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9F:C5:D6:B4:16:F1:41:6F:80:AB:29:60:41:53:03:C5:02:1B:3F
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:c3:d4:d7:42:d2:66:25:c9:90:4d:be:19:b1:7d:a7:89:
         5f:42:b9:95:2b:cb:0a:d3:01:ca:69:6b:1e:ec:f1:86:1e:4a:
         8a:6e:29:a9:70:8d:18:b8:a5:8b:f4:b8:63:cb:97:3d:5c:34:
         7f:b5:5e:68:79:1d:e8:6c:6e:c8:c3:34:12:4f:d2:f5:70:fa:
         2d:6d:92:51:d4:70:4f:94:a2:81:6c:33:b0:99:12:d9:1d:27:
         6e:e3:c2:81:27:e2:7a:f5:f8:07:26:31:6f:b8:93:d6:44:60:
         95:92:b3:d3:62:6c:ab:cf:07:93:f1:8c:c0:d5:54:be:db:df:
         97:4d:e7:24:6b:13:03:5a:2f:8c:11:94:fc:c8:74:af:12:72:
         60:df:d2:2c:c1:aa:45:90:33:7b:4b:ca:73:e4:fc:b6:49:81:
         a0:39:b5:e2:9a:d0:14:63:49:ae:a9:79:ea:20:06:98:a3:85:
         bb:3e:31:80:f7:a2:4a:a8:79:d8:fe:77:1c:8f:94:a6:ce:3c:
         ad:43:c0:aa:3a:94:ea:27:67:f1:03:90:4e:76:c3:67:33:b0:
         33:7b:43:1f:1a:c7:78:7e:c9:60:44:7d:6b:4e:c0:8f:2f:f5:
         f7:58:34:60:70:db:96:91:e8:30:67:bf:44:51:19:89:c1:54:
         82:f4:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:04 2026 by rpki-client