Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier:          OYdTwgUXcNGU4xVhWN7IGdzoT2oDXj5Q5smEsNdqMoM=
Subject key identifier:   99:B0:18:3E:BA:45:0B:E7:D1:D2:B5:D2:64:E5:E8:25:4A:E1:E8:B5
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer:       /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial:       01A08CB1B053758F06450AD53F49C2A5DED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number:          0C8C
Signing time:             Thu 10 Sep 2026 19:00:50 +0000
Manifest this update:     Thu 10 Sep 2026 19:00:50 +0000
Manifest next update:     Fri 11 Sep 2026 19:00:50 +0000
Files and hashes:         1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=)
                          2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: SnjKqTOlfFRcL4UC+mKgdvNRGF7JyCKrqs00jAVCV+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b1:b0:53:75:8f:06:45:0a:d5:3f:49:c2:a5:de:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Validity
            Not Before: Sep 10 19:00:50 2026 GMT
            Not After : Sep 11 19:00:50 2026 GMT
        Subject: CN=99b0183eba450be7d1d2b5d264e5e8254ae1e8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4b:72:c8:26:50:22:ab:10:98:5c:f8:90:76:
                    ff:48:0a:b3:6b:3a:e9:30:d8:51:9c:1e:74:58:ad:
                    b9:b8:12:1c:b8:3d:ff:92:62:fd:87:f1:45:d0:b9:
                    d9:5d:c7:ea:1f:c2:2e:56:31:ec:75:8e:21:49:d2:
                    f8:89:9a:d1:f7:e6:6d:12:d6:95:72:76:05:e1:e1:
                    2b:82:fe:dc:e4:ad:cb:48:32:a9:98:ac:80:a2:0d:
                    17:3b:cc:ca:b9:c6:d7:d9:9f:8a:24:3f:63:08:36:
                    94:68:f7:73:10:ba:8e:91:3c:48:87:25:5b:f8:1b:
                    1a:66:02:67:45:a9:52:8d:3b:80:0a:3e:d6:18:d2:
                    b7:c8:00:98:07:b4:09:76:c7:73:8b:b8:bc:af:e1:
                    a4:57:04:fb:83:a8:25:4b:6d:e1:20:b4:b8:e1:ba:
                    a2:d6:48:d3:80:f1:ac:06:6d:90:a9:b2:6e:3c:4f:
                    46:9d:d7:09:c7:a0:d7:d5:69:cc:11:5a:7a:6c:f5:
                    77:4f:aa:50:0e:65:50:d5:89:50:20:9e:d7:20:91:
                    eb:79:01:02:cb:8a:86:2b:6c:d0:c3:66:f5:c3:6d:
                    7e:66:8a:a4:b4:6e:e2:d6:71:cc:ea:0c:8a:00:5c:
                    fa:42:59:be:db:62:cb:75:71:c0:83:fe:95:6f:89:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B0:18:3E:BA:45:0B:E7:D1:D2:B5:D2:64:E5:E8:25:4A:E1:E8:B5
            X509v3 Authority Key Identifier:
                keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cf:c5:b0:b8:b1:6c:18:92:93:c1:eb:fb:ca:49:ed:08:e2:
         f5:5f:21:9c:ba:d5:e5:b3:68:5a:9c:63:81:e1:b9:f6:49:9e:
         51:28:00:19:26:6b:f6:b7:d9:9c:6e:6b:26:15:35:da:08:6c:
         b1:f8:d9:a7:72:11:4c:5d:8c:4f:a7:ee:ca:f2:44:86:c8:c2:
         6c:c4:98:57:39:8a:7d:8a:7a:99:6a:34:99:fc:86:37:f6:cc:
         ff:ac:76:23:0b:bf:7c:90:1e:87:f1:f4:b1:39:b2:3a:e6:1a:
         f2:01:5a:73:5a:ed:09:f0:0c:f3:6f:d2:fa:b2:7c:63:84:44:
         9d:76:c7:b4:42:43:2e:b5:16:ec:5d:b1:6e:2d:26:f8:c4:03:
         2b:69:8f:d9:06:53:f6:3d:39:ed:6c:c8:a4:4d:22:6c:51:1d:
         49:2d:fe:6c:76:57:f4:40:f9:31:40:2f:00:00:03:94:e7:65:
         1a:6c:38:e0:57:98:17:6f:34:b5:11:17:fc:94:ea:fd:d0:24:
         a0:b5:65:dd:e6:72:58:dc:b4:0c:86:1e:36:8f:8d:ae:ae:54:
         5f:97:56:0f:6a:ba:5b:16:0c:cf:d6:53:fe:e0:15:cf:ad:68:
         03:51:d8:60:29:26:9a:f2:5d:18:1b:96:a6:1a:91:54:d0:16:
         a1:f3:9d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:29:24 2026 by rpki-client