Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
File:                     D57Y1txc8s3y4BOfJw7RJLRpFPU.mft (raw, json)
Hash identifier:          cIS+LDb6H1p3TLcNWZFbV/alEqUme/aQnk2YSZCBjMU=
Subject key identifier:   05:1A:3D:6F:31:24:1B:B2:08:6F:B2:65:E7:F5:66:05:F1:80:BF:B0
Authority key identifier: 0F:9E:D8:D6:DC:5C:F2:CD:F2:E0:13:9F:27:0E:D1:24:B4:69:14:F5
Certificate issuer:       /CN=0f9ed8d6dc5cf2cdf2e0139f270ed124b46914f5
Certificate serial:       01A0412A69C26196F239F174A4BCF8188C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:01:33 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:33 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:33 +0000
Files and hashes:         1: D57Y1txc8s3y4BOfJw7RJLRpFPU.crl (hash: kTLK9zMMfXtMLyvJ5RBtIvTKW5HNqUvq8GQHW/isOfw=)
                          2: uOBm2HHtiL1ygzBZkyEvZ-yYHSQ.roa (hash: ZLfbp4P8xVbyALUzm93DM46ieUzkAqS9Mn1Fvu7mqJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:69:c2:61:96:f2:39:f1:74:a4:bc:f8:18:8c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ed8d6dc5cf2cdf2e0139f270ed124b46914f5
        Validity
            Not Before: Aug 27 03:01:33 2026 GMT
            Not After : Aug 28 03:01:33 2026 GMT
        Subject: CN=051a3d6f31241bb2086fb265e7f56605f180bfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:a4:a5:d5:c8:90:35:ed:cf:2f:06:dc:f0:
                    93:63:df:4b:4c:a1:97:96:08:95:89:cc:c7:08:94:
                    63:2b:94:9c:3e:21:2f:33:52:84:7c:9f:43:bf:db:
                    98:f7:c8:fb:e4:be:90:a0:66:74:37:58:3d:2c:40:
                    2b:c3:1a:bd:38:da:62:70:6e:c3:7f:e8:8e:bd:a2:
                    e2:c6:f0:96:91:75:53:93:ef:45:5f:8a:b1:fa:f6:
                    3f:ad:da:5c:ff:2b:dd:c7:07:1f:36:78:9e:bd:bf:
                    ba:dc:77:6c:d0:4b:0a:a7:d7:30:b3:d1:8c:d2:da:
                    3a:1a:d3:a1:61:bd:2a:bf:db:0f:07:62:a7:ed:24:
                    a4:37:92:b5:0a:9d:19:86:01:97:59:0e:fe:eb:9c:
                    e3:85:12:cd:3c:8b:af:b3:cb:e5:15:b5:bb:0e:3c:
                    fd:8b:10:7c:9c:95:e9:c1:43:80:10:85:c3:e8:3a:
                    49:9f:96:84:90:74:48:96:24:89:a4:7a:19:ed:bf:
                    c0:42:ff:57:e9:60:1e:f6:d8:02:32:49:6f:e3:11:
                    d2:14:57:89:4a:68:d7:20:62:44:a9:33:12:2a:8c:
                    27:db:53:d0:ea:f6:fa:62:34:50:c9:38:ea:c4:6c:
                    44:c2:c3:d1:6c:d4:49:fb:7f:05:2e:d5:08:96:a0:
                    3c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:3D:6F:31:24:1B:B2:08:6F:B2:65:E7:F5:66:05:F1:80:BF:B0
            X509v3 Authority Key Identifier:
                keyid:0F:9E:D8:D6:DC:5C:F2:CD:F2:E0:13:9F:27:0E:D1:24:B4:69:14:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:86:b9:97:4b:8b:06:0b:2b:2d:85:48:29:0e:69:15:c8:97:
         5e:62:56:be:de:b8:41:4c:54:b4:0f:b0:5c:30:35:12:2a:a9:
         c1:65:80:61:6e:ec:6b:90:bc:77:e7:75:8e:47:ef:c3:10:b3:
         ea:ad:5d:6e:b1:0f:19:3d:81:77:30:ec:6d:1a:a3:d8:71:c3:
         f8:ff:3d:01:34:c0:4c:67:bf:25:b5:8e:f6:d3:90:5c:f4:d5:
         d2:6d:e6:1e:33:46:89:f5:8a:fc:46:54:42:07:79:a9:0f:72:
         33:69:61:94:d3:a0:ce:a6:c7:08:ae:a2:3f:5f:2b:c7:d1:84:
         1d:3e:21:1e:1e:34:90:6a:09:f6:32:be:24:dd:47:fa:07:a9:
         0a:9e:dd:83:e5:91:58:bf:24:47:c4:95:c0:a6:8e:3a:fe:bd:
         40:84:12:b8:88:71:12:88:bb:a2:43:4f:57:2d:6d:11:26:53:
         50:92:20:f9:6e:86:98:62:8a:95:53:7e:28:35:bc:b8:11:10:
         fe:d3:46:16:d9:74:c1:99:e9:e0:25:10:e9:66:5d:51:d9:e6:
         4c:b6:a2:65:f3:7e:00:bc:2b:2b:cd:a1:d0:9a:cc:86:71:b3:
         d1:51:a3:05:ea:ba:67:41:b0:ca:df:55:5a:60:63:82:b8:81:
         a1:a9:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:37 2026 by rpki-client