Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File:                     9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier:          YzDxDMk4gciGoWZsG0BedRD7nT04k83POifvAV1oqTw=
Subject key identifier:   0C:75:D6:28:F3:BE:2A:FC:0A:CF:78:0F:FD:FD:CF:47:BF:14:C5:78
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer:       /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial:       01A000CA849F333265C0C16A5BC1489218B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number:          12F1
Signing time:             Fri 14 Aug 2026 15:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:07 +0000
Files and hashes:         1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: em84d0F4VHsYnTjsg7GyWb6IWL3ydid3m2OfycONYMw=)
                          2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:84:9f:33:32:65:c0:c1:6a:5b:c1:48:92:18:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
        Validity
            Not Before: Aug 14 15:01:07 2026 GMT
            Not After : Aug 15 15:01:07 2026 GMT
        Subject: CN=0c75d628f3be2afc0acf780ffdfdcf47bf14c578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:78:06:23:21:d8:39:3a:63:bd:01:22:35:
                    b5:d7:0e:30:73:53:29:94:35:bf:e9:6e:59:da:81:
                    31:a8:f2:95:e3:88:ad:f8:40:3b:4d:9e:88:fe:d7:
                    08:b8:da:fc:aa:07:fe:fb:fd:54:d3:6c:ba:4e:f2:
                    b3:09:58:25:92:63:59:be:3d:e7:cc:4d:bd:fb:24:
                    48:80:b3:62:db:9a:9e:97:ed:64:cf:a3:85:68:05:
                    dd:2e:49:60:74:cf:f3:da:95:a9:82:a7:52:7d:56:
                    90:c9:bd:6d:93:a5:62:7b:89:ea:58:62:3d:5f:51:
                    4c:b8:05:4e:43:1d:02:2a:4e:6c:b6:ef:0b:7d:e7:
                    64:80:62:e6:43:6d:98:bd:25:cb:e1:29:ea:23:3d:
                    bd:ff:a3:21:a1:a4:4e:ea:89:3f:30:fe:78:1e:b8:
                    d9:e3:1a:53:6c:b8:4f:d7:02:9a:59:47:f8:41:de:
                    f3:25:1d:00:c1:3e:ae:dc:a1:f3:22:73:c3:8f:8e:
                    a1:2b:ae:a6:7b:ea:96:6c:f8:7a:7c:28:62:27:e0:
                    9c:a8:a7:b3:19:a3:6a:6d:fe:96:b3:b4:ce:20:4e:
                    93:77:02:29:c2:3b:52:11:16:56:8c:f5:12:02:82:
                    0b:ba:e3:a7:3c:2c:fe:3f:70:1d:e0:ac:a9:9d:18:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:75:D6:28:F3:BE:2A:FC:0A:CF:78:0F:FD:FD:CF:47:BF:14:C5:78
            X509v3 Authority Key Identifier:
                keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ae:b8:27:d0:f9:bb:95:10:2a:f1:eb:04:72:41:fa:01:14:
         ca:86:5b:4c:2c:64:59:cb:b9:69:92:da:a5:21:55:6f:d6:26:
         58:dd:39:12:87:55:3c:4f:6f:b4:81:81:9a:3f:8f:ba:8e:0a:
         48:27:18:35:d6:a8:59:cc:9e:87:35:da:e2:88:07:64:53:cf:
         4c:47:0a:c1:6d:bf:7d:3c:4b:7d:5a:35:8b:ec:d4:7c:74:d3:
         95:85:a9:7d:e2:e5:c0:67:02:f8:e8:48:3c:a1:85:5f:82:3e:
         f5:c5:67:40:61:d7:c7:05:0f:ff:e4:4b:78:23:7c:d6:71:4f:
         50:e1:d2:9c:aa:3a:d2:6a:22:fd:ac:76:6e:35:ec:2a:7a:b9:
         e7:fb:e1:5a:dc:79:63:73:45:f8:f6:02:6b:c4:fa:5f:e7:25:
         57:48:bf:32:d0:81:20:01:33:6f:87:27:9e:68:11:1d:50:b3:
         de:4f:68:6e:da:52:cd:dd:71:8b:1d:fd:3b:c7:4e:ac:63:b2:
         35:08:2c:e8:ee:20:59:ec:76:d0:ea:fa:7f:53:e4:cd:b0:63:
         44:7b:07:88:38:cf:d0:3d:a8:f1:a6:33:a4:0c:72:b2:64:1c:
         c5:77:04:83:95:de:28:35:97:6d:a9:a6:d1:ec:6a:3c:99:e5:
         6e:79:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:11 2026 by rpki-client