Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File:                     v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier:          zXr70mr0djT5S+3j9RiM4/RxAyl8Bv2aCp8mhjRWqfw=
Subject key identifier:   50:6E:36:94:33:B7:EA:26:E3:7A:10:7D:D9:44:3C:B7:E9:47:0B:14
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer:       /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial:       01A0889E57AD5D6B59F84F961C2005F010B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number:          1A45
Signing time:             Thu 10 Sep 2026 00:01:13 +0000
Manifest this update:     Thu 10 Sep 2026 00:01:13 +0000
Manifest next update:     Fri 11 Sep 2026 00:01:13 +0000
Files and hashes:         1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
                          2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
                          3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
                          4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
                          5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: EGnRcmEHR0VqP0S4t4kwBwwoHQZU4BITqT8qQgsbSYw=)
                          6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:9e:57:ad:5d:6b:59:f8:4f:96:1c:20:05:f0:10:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
        Validity
            Not Before: Sep 10 00:01:13 2026 GMT
            Not After : Sep 11 00:01:13 2026 GMT
        Subject: CN=506e369433b7ea26e37a107dd9443cb7e9470b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:a5:cd:26:f4:7a:07:ed:55:dd:d3:82:45:
                    70:ee:e4:02:d3:21:9e:3e:fa:1b:e5:0d:47:2a:67:
                    14:61:73:e5:0d:fa:68:7e:3c:02:e9:93:d0:af:c6:
                    81:0d:50:dc:34:61:58:b9:65:c3:f1:a8:45:d6:ab:
                    60:12:95:6b:79:f0:08:4a:7c:fd:87:db:da:b6:61:
                    83:0c:3a:de:15:43:fb:71:61:ee:fe:42:86:12:f8:
                    f5:0f:6b:d2:93:24:71:7d:d9:28:3c:f1:37:5b:de:
                    08:72:09:68:3d:59:dd:e0:ab:66:07:8d:1c:14:9e:
                    e7:33:15:92:98:23:15:e8:55:4e:a2:75:5f:db:ec:
                    e3:f3:64:fa:78:12:cc:ec:2f:22:ed:75:af:43:45:
                    9d:1a:15:c5:52:a5:6f:39:81:b8:ee:26:de:82:34:
                    8e:65:de:2c:7b:d7:cc:aa:65:1e:13:39:8a:18:ae:
                    91:82:38:32:46:3e:5f:b1:9f:c3:0c:59:b1:72:4e:
                    84:52:71:44:08:d4:3b:57:f1:df:af:62:dc:23:94:
                    30:2e:2f:cf:59:1c:04:4f:39:df:14:45:c3:45:1a:
                    3e:6b:9f:0c:06:e7:ec:61:a9:ad:91:59:63:44:16:
                    30:69:58:44:25:26:5d:7b:fb:e2:39:c8:71:d8:37:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6E:36:94:33:B7:EA:26:E3:7A:10:7D:D9:44:3C:B7:E9:47:0B:14
            X509v3 Authority Key Identifier:
                keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:07:d3:e1:5f:33:9f:af:01:d7:bc:e7:c2:61:3d:c6:6f:e0:
         72:a4:88:2e:5f:cc:c0:8d:8b:ce:c8:8a:19:50:dd:3b:7c:f8:
         bf:b0:2f:cd:c8:fb:4c:8e:a1:b8:9f:4a:81:d9:cf:5a:93:54:
         18:2a:29:17:2e:71:55:79:82:65:f6:9e:6c:12:0f:a4:a5:f2:
         41:31:c8:1e:42:d0:a7:7b:5f:2e:1d:f2:d3:38:fa:fd:8f:81:
         83:90:04:03:72:25:da:4b:ca:6e:fd:1a:d1:2f:4f:09:a8:7b:
         2b:15:ad:0a:9e:de:dd:06:c2:ef:07:86:2b:eb:48:cb:21:ea:
         9c:fd:ee:63:5d:07:56:c6:fe:96:47:69:86:95:29:60:b7:8d:
         d0:c6:6a:89:ca:a0:d2:88:ad:33:0b:fb:b8:b2:ee:9e:19:0b:
         57:e8:29:8a:62:69:ee:fb:30:f9:7d:c7:66:4e:37:12:19:4d:
         e7:23:3a:83:7f:25:47:90:cb:93:9d:24:09:d7:f3:a3:29:03:
         fd:c9:bc:53:85:44:3b:3a:05:06:07:ce:52:52:b0:d0:f4:5f:
         23:74:4c:7b:3b:2e:77:9d:52:f3:59:b1:56:48:93:8c:d2:c0:
         74:e5:bf:14:54:bd:9b:55:d6:ab:b7:e4:86:76:b3:e6:97:26:
         a6:a5:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:18:27 2026 by rpki-client