Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File:                     9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier:          n/34T1EXzFHIJrgsNOblORqYMe4PMfvt9Ocqi/WYNw8=
Subject key identifier:   9B:04:F0:8F:EC:28:A1:06:AA:ED:8C:C9:45:6E:AB:93:51:76:AE:EA
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer:       /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial:       01A13E95248CCB2853B0FBFAD7E142FF27CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 08:02:03 +0000
Manifest this update:     Thu 15 Oct 2026 08:02:03 +0000
Manifest next update:     Fri 16 Oct 2026 08:02:03 +0000
Files and hashes:         1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: U0LWDC82rWMlrApjbRYCPLaVYjNZFF0I8dwOGQ7bCYk=)
                          2: pY5anUcF6nGQjRStvwUsfXfpPT4.roa (hash: ikRAmfOVAxrB8DLsnpaLa+mv7owmfzH47WnehifEhhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:95:24:8c:cb:28:53:b0:fb:fa:d7:e1:42:ff:27:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
        Validity
            Not Before: Oct 15 08:02:03 2026 GMT
            Not After : Oct 16 08:02:03 2026 GMT
        Subject: CN=9b04f08fec28a106aaed8cc9456eab935176aeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:9b:22:57:07:13:1b:bd:32:ad:87:34:61:
                    08:9d:d9:40:05:f9:48:e3:43:11:85:8c:fe:9c:d0:
                    1e:cc:af:6c:d0:64:01:4d:6e:84:24:e1:d1:05:b7:
                    19:bf:e0:b5:e2:62:e0:09:5b:99:f4:53:a6:a3:87:
                    f5:c4:2e:6a:6a:78:e7:8e:8d:9a:ab:02:97:84:ec:
                    fb:4c:09:5e:5d:d5:7c:db:57:ae:db:08:21:9a:3a:
                    66:5b:5e:4e:11:4d:21:ae:72:1f:19:2c:29:2a:62:
                    92:7e:11:ab:25:2e:31:2e:54:aa:94:02:db:2d:98:
                    83:56:8b:34:e1:72:06:58:2b:69:a8:5b:40:da:22:
                    9b:5b:94:c4:05:58:9a:03:fd:e9:8b:4b:e8:aa:f7:
                    0e:d2:2f:ae:c7:94:ed:2f:3b:20:3b:92:e6:4a:70:
                    df:c7:a9:d7:9c:30:d6:cb:c2:08:fe:6b:56:26:f5:
                    f0:6d:a2:bf:9f:27:e6:1e:0b:40:cc:e1:c5:ab:bc:
                    bc:79:4e:c6:49:16:64:5d:48:8e:1d:d6:bb:e9:34:
                    0c:5b:9e:5c:bf:b9:56:27:a6:51:36:0c:41:68:1d:
                    9e:af:a4:9a:92:d0:5b:03:60:34:0f:ef:79:c9:71:
                    af:ad:03:b9:74:05:f3:5f:9f:ed:92:3c:b7:2e:e3:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:F0:8F:EC:28:A1:06:AA:ED:8C:C9:45:6E:AB:93:51:76:AE:EA
            X509v3 Authority Key Identifier:
                keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:8a:c9:3b:f9:89:e6:b4:9e:b0:16:5d:d2:0d:6d:d2:b9:
         05:d5:d5:6c:7c:6e:fd:1f:22:f0:a9:75:62:e4:6d:7c:4c:c8:
         6a:84:84:8e:26:b7:57:7e:c9:ca:8a:c5:7e:15:48:36:5d:d2:
         ba:c0:ba:95:71:17:98:44:cd:2f:cc:63:94:6c:ff:7c:1f:35:
         bb:36:75:1f:45:0b:f8:e5:1b:90:e5:44:ed:92:24:c9:58:b6:
         47:7b:9f:36:d3:c4:af:dc:0b:1f:05:ac:6c:ce:7e:34:6d:dc:
         7f:80:cd:c5:f7:4c:72:9d:9d:a2:98:d0:88:f7:b9:d5:ec:74:
         b4:25:42:f8:f2:1c:65:6b:18:bc:07:7e:29:d6:ec:36:fd:d6:
         69:99:da:cd:86:4c:bf:7d:79:9b:38:4b:84:1c:06:44:b2:5a:
         a0:df:3b:4a:55:aa:b3:cd:4d:2a:2f:18:cf:1a:12:17:78:4e:
         6e:6d:52:85:97:6c:8e:0a:0c:31:8d:eb:a8:24:c1:77:5e:89:
         f5:06:ab:3f:b3:12:b2:94:0e:51:ab:8c:3d:6a:b4:92:16:3e:
         e8:c0:ec:62:db:0c:56:eb:39:2d:d6:aa:4f:ba:ce:62:23:ae:
         5d:04:63:f1:54:67:92:04:c0:b5:b6:4b:07:c2:36:85:18:c0:
         4b:8b:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:38:36 2026 by rpki-client