Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
File:                     9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft (raw, json)
Hash identifier:          C0V8BNfxR3+Po0nIG9FKQfXhVCt6svJB+IOH73WELyo=
Subject key identifier:   D0:D3:FC:8E:EA:64:FC:3C:08:F9:30:A9:23:52:56:08:33:71:BF:3B
Authority key identifier: F5:34:D5:C7:66:20:C0:E1:E5:F6:21:A2:46:86:98:F8:2B:95:40:BD
Certificate issuer:       /CN=f534d5c76620c0e1e5f621a2468698f82b9540bd
Certificate serial:       01A0401729C1A1514853A654439EAE0EC7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
Manifest number:          0109
Signing time:             Wed 26 Aug 2026 22:00:54 +0000
Manifest this update:     Wed 26 Aug 2026 22:00:54 +0000
Manifest next update:     Thu 27 Aug 2026 22:00:54 +0000
Files and hashes:         1: 9TTVx2YgwOHl9iGiRoaY-CuVQL0.crl (hash: xOZ4I24mhk4WBVFC/DMti9fxiNac/Pa7o1Zo7l19s/g=)
                          2: h29vQ2yuI6yLfEkgxb-spdNM9_w.roa (hash: p7uQCJb1royhyT7w9wDiqUydmZ9HdADqCZN1mAQcvqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:29:c1:a1:51:48:53:a6:54:43:9e:ae:0e:c7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f534d5c76620c0e1e5f621a2468698f82b9540bd
        Validity
            Not Before: Aug 26 22:00:54 2026 GMT
            Not After : Aug 27 22:00:54 2026 GMT
        Subject: CN=d0d3fc8eea64fc3c08f930a9235256083371bf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:60:08:1e:f7:de:f7:99:3c:61:c8:8d:a8:
                    2f:66:f7:93:64:96:65:0e:e7:88:33:57:91:b1:8b:
                    d1:8b:0e:53:38:5e:02:78:5e:bd:b5:72:ba:1d:d3:
                    5b:d0:c0:64:c3:82:6f:fb:6e:ea:47:94:be:9c:8f:
                    cb:90:2b:a2:12:29:92:19:97:f9:ff:c9:47:72:2d:
                    c4:ce:cd:65:12:43:47:70:2c:ad:9b:44:14:29:70:
                    f9:a3:57:c6:9f:6c:6b:53:c1:2c:62:8e:ef:bb:3f:
                    94:4d:5e:63:50:8a:60:e5:ec:9d:e6:ee:27:19:da:
                    7c:b8:d6:ae:0f:03:9a:f5:99:68:93:f2:d8:53:da:
                    27:84:52:6c:73:5e:ab:fc:0e:0f:91:14:db:61:3a:
                    3a:07:ae:26:ef:fb:aa:81:d2:c2:c9:be:62:5b:97:
                    f5:6f:2b:82:7f:75:2d:62:e5:eb:36:f2:ae:07:6e:
                    35:0e:3d:80:d4:d6:a0:04:2c:ba:1e:6f:c7:62:6a:
                    dd:13:bb:57:b0:29:94:62:df:bd:b5:48:e2:91:76:
                    74:da:33:a0:55:a0:f3:86:53:cd:86:d1:36:a8:93:
                    db:5b:35:05:5d:bd:b7:f4:e9:0e:18:86:f2:5e:90:
                    0d:be:f0:69:04:da:35:82:83:90:6e:87:76:b4:15:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D3:FC:8E:EA:64:FC:3C:08:F9:30:A9:23:52:56:08:33:71:BF:3B
            X509v3 Authority Key Identifier:
                keyid:F5:34:D5:C7:66:20:C0:E1:E5:F6:21:A2:46:86:98:F8:2B:95:40:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:66:c5:04:7c:9b:e9:7c:bc:13:02:5d:c7:56:e5:f4:a4:cb:
         72:21:67:c4:57:cd:d5:34:e1:a2:eb:d7:97:b3:4a:29:06:5b:
         4a:aa:9e:66:b4:75:fd:d5:06:c0:7e:be:1b:dd:e2:fa:ba:f2:
         8f:86:25:cd:d2:15:af:5e:9b:8d:12:da:ac:b6:8d:69:c4:bb:
         c2:6f:20:9a:29:d9:62:db:fd:4d:bb:b7:c8:ae:0e:95:f4:07:
         7e:c5:ce:f9:f9:e7:7f:3a:2f:15:c7:5e:3a:5b:ae:1d:56:31:
         ef:01:8b:4c:74:6b:85:69:ad:f6:f4:49:bb:ff:57:6c:aa:5a:
         fa:86:df:db:77:e6:44:4d:c2:e8:11:9a:7f:7a:7d:a9:bb:55:
         32:1c:f7:6a:35:81:20:02:d3:17:dc:c7:ee:17:b6:ec:b3:88:
         55:7a:b2:5b:0c:69:1c:2a:14:85:9f:8e:5a:2a:2f:21:c6:37:
         7e:03:47:be:97:aa:81:b3:35:4e:c1:4d:52:18:e0:2b:cf:86:
         1d:ac:f3:e0:34:31:42:25:ed:4e:e1:e3:01:e5:b1:d0:b0:46:
         65:3c:cc:25:9c:10:3d:b2:4b:bb:b8:f8:4e:a9:61:99:83:36:
         20:90:22:66:e3:ae:9d:2f:a4:dc:62:e8:a9:fe:84:a2:33:fe:
         77:b9:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:48 2026 by rpki-client