Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File:                     ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier:          lzt8/b6KGFJnHuqb31uG9yO9YbHIc/Le5zK0ot6OTLE=
Subject key identifier:   07:6D:6E:B8:68:4F:CA:3A:CE:77:82:CF:EA:21:04:10:D2:2C:7A:8E
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer:       /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial:       01A08CB1A28432514BC7B1966507AA91D1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number:          0581
Signing time:             Thu 10 Sep 2026 19:00:46 +0000
Manifest this update:     Thu 10 Sep 2026 19:00:46 +0000
Manifest next update:     Fri 11 Sep 2026 19:00:46 +0000
Files and hashes:         1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
                          2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: DTcwkq9eEMpy7zIDSgcQHulOaFAvH7SfdZDAusSIqtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b1:a2:84:32:51:4b:c7:b1:96:65:07:aa:91:d1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
        Validity
            Not Before: Sep 10 19:00:46 2026 GMT
            Not After : Sep 11 19:00:46 2026 GMT
        Subject: CN=076d6eb8684fca3ace7782cfea210410d22c7a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:67:3d:d6:0d:9a:4a:08:31:ec:40:2c:4d:
                    0b:05:b1:4c:7d:32:67:a4:80:c7:97:7e:6e:d0:30:
                    a5:e2:11:c3:87:53:fa:0f:02:7f:de:05:8b:61:11:
                    ad:9b:88:57:47:24:1c:57:8c:74:35:94:96:6b:ca:
                    90:c7:a6:50:79:fd:9b:ea:af:ef:f9:87:07:b4:a2:
                    93:be:e0:34:7d:4e:90:4a:82:c5:22:a8:94:3d:e2:
                    da:29:04:b9:8b:a7:80:2b:2b:7c:b8:2f:35:bb:a8:
                    c5:5a:ac:12:43:28:24:f5:5a:f6:bb:66:35:77:2a:
                    f1:1d:f3:70:46:ff:7e:64:b6:43:f1:bb:6f:a4:61:
                    43:9e:34:f0:38:ad:c0:8f:33:11:e0:b4:56:be:2a:
                    9d:cb:7f:73:54:1a:d7:53:36:18:c7:99:b9:cb:e5:
                    c0:e6:bc:b2:79:c5:ea:cf:c2:dd:87:4f:eb:6d:8b:
                    2d:8d:c7:eb:cb:3e:1d:88:d0:e6:07:83:3f:51:f1:
                    59:3f:50:e0:1b:b1:c3:dd:09:ae:ff:6e:fe:dc:a2:
                    f5:df:e2:e6:8f:49:85:5c:3f:8f:d3:09:ee:d2:e5:
                    bf:d8:7e:10:b7:e6:56:06:23:9b:f3:9f:55:3d:66:
                    64:37:a0:66:c3:c3:74:93:3e:78:f2:b8:a8:3d:8d:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6D:6E:B8:68:4F:CA:3A:CE:77:82:CF:EA:21:04:10:D2:2C:7A:8E
            X509v3 Authority Key Identifier:
                keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b9:eb:ae:92:e4:24:b5:0e:b2:f9:31:00:7c:27:c0:a5:1f:
         50:3a:c0:5f:6e:d4:46:6a:0b:ad:19:63:20:fc:cb:27:07:bc:
         80:20:cf:93:85:95:d4:dd:04:2b:42:43:63:bb:82:e3:0f:4b:
         d1:c5:3c:65:53:66:5f:60:97:3c:b3:b6:a7:52:a9:ba:ff:13:
         c2:ec:3e:ba:77:33:ea:82:1d:f1:52:ae:77:b7:a6:43:7a:30:
         64:2b:62:6e:3e:58:0b:86:d5:9e:72:7b:28:3d:c3:da:6f:5e:
         53:44:6e:87:d1:95:15:00:4f:07:89:8f:f2:50:b4:cf:b5:53:
         77:88:58:d6:a0:b7:e8:17:2b:18:75:dc:11:fa:4f:64:0a:2e:
         c0:85:f9:7c:f1:cb:5c:bc:54:ed:b7:af:cf:72:58:90:df:9f:
         53:92:54:87:1b:a0:e6:25:1d:1a:95:34:40:4a:83:14:08:96:
         7a:2e:7c:67:bd:14:47:15:d3:b0:fe:43:3d:ec:3a:48:57:d9:
         fe:88:38:18:b5:ba:9c:42:2e:62:40:f3:1a:84:cb:cf:17:54:
         bc:e8:ed:83:f8:ef:7c:53:8f:c8:6c:7d:6d:2f:f3:37:07:5c:
         57:f0:7b:20:46:71:d3:6a:cf:13:49:d0:83:ed:c2:6c:cd:db:
         b9:b1:51:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:43:20 2026 by rpki-client