Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File:                     0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier:          uyUKcdlsNCaKEvsgBLm7fCX0me7g3vShunqcH/Qw37g=
Subject key identifier:   81:56:0B:23:BE:77:3B:0A:5B:DD:09:25:D4:68:E3:3C:E9:5C:74:21
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer:       /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial:       01A13F39B03A0E3CB5B4BEB1BE5E3A5EC0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number:          08FE
Signing time:             Thu 15 Oct 2026 11:01:47 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:47 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:47 +0000
Files and hashes:         1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: ze15PQ+L/YCKyo8mvHu3YvO22mXsqMAznJqCLuVOV3U=)
                          2: RnVTKZtoHdvPsfS8AH4yl7Tn4u8.roa (hash: Pgpu3NuPaXsm7XOY/YOTMwi4KbLTR5P/cSiW4/B73kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:b0:3a:0e:3c:b5:b4:be:b1:be:5e:3a:5e:c0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
        Validity
            Not Before: Oct 15 11:01:47 2026 GMT
            Not After : Oct 16 11:01:47 2026 GMT
        Subject: CN=81560b23be773b0a5bdd0925d468e33ce95c7421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:71:bf:35:38:6b:8a:55:8a:66:9f:5c:19:
                    ba:8c:02:70:5f:01:53:ea:75:77:e9:18:d4:a2:43:
                    f6:16:6c:fb:6a:d9:78:d1:72:4c:14:cb:11:b3:b4:
                    f8:ae:0f:ec:30:53:5a:0d:62:36:77:11:a7:32:38:
                    95:c6:c1:a8:5b:d7:34:5c:fb:5e:5c:64:0f:77:65:
                    b5:12:0d:d7:83:35:c4:01:84:d9:90:fa:82:be:7b:
                    11:83:9c:c0:a3:04:6b:79:36:ff:f8:4e:41:9b:6b:
                    9f:59:23:95:0a:c8:2c:da:d8:a4:18:f8:9c:1f:65:
                    42:dd:68:05:b3:88:be:5f:83:c9:9b:38:9e:bf:4e:
                    00:60:df:c5:c2:6b:09:5e:2f:de:94:15:21:8a:01:
                    17:e6:e9:35:af:7f:59:cc:a4:d8:d7:ed:19:fb:9b:
                    64:38:61:c0:49:c0:e5:24:06:64:65:5c:4d:36:9f:
                    b3:97:3c:39:6f:a0:10:cd:54:d9:a6:8f:26:38:d1:
                    07:5d:0e:db:cf:f3:38:bb:81:6a:05:fa:1d:7f:34:
                    d6:3e:0e:d6:7f:c5:e2:ab:c8:93:58:59:ed:25:32:
                    27:a8:70:1e:c3:98:98:b8:56:5a:37:ee:72:2f:0e:
                    52:ce:02:fc:3a:56:cc:8a:c2:e7:56:7d:93:8f:b3:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:56:0B:23:BE:77:3B:0A:5B:DD:09:25:D4:68:E3:3C:E9:5C:74:21
            X509v3 Authority Key Identifier:
                keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ae:eb:e6:ba:d2:42:74:42:15:c0:51:5f:14:9c:f9:16:76:
         ff:f8:12:c1:a2:54:5e:01:7d:4c:a1:b5:c7:a4:7e:7b:e7:47:
         73:d4:f2:c6:0e:bd:4b:6e:5b:86:92:a1:3b:2a:d0:d3:b1:dc:
         e5:ba:09:fa:cf:8a:31:fc:c2:93:a4:2f:e7:6e:3b:e0:8d:85:
         75:fa:98:85:b4:f2:81:e9:41:81:7d:04:74:c0:20:65:b9:56:
         5d:1a:f9:66:37:b9:4b:69:65:97:3b:cf:34:8a:d4:d2:92:88:
         e9:9d:fd:08:f3:e0:0c:ee:3a:4a:ed:c0:b4:d8:2d:14:2d:20:
         28:09:c5:48:bf:4e:e3:b3:cf:47:40:bf:bb:31:95:ee:a5:22:
         b7:11:bd:a3:4e:7c:11:33:a4:4a:a6:10:4b:57:00:9b:d2:f7:
         96:45:c1:c2:a6:0d:8d:b8:3e:a0:06:b0:cf:38:e1:2a:bf:c3:
         a2:0e:54:d1:e6:48:25:32:e7:1b:81:b6:17:b8:37:50:31:cb:
         73:b8:0c:b0:d2:73:58:b7:1d:4b:95:95:0c:31:ba:4b:15:56:
         ce:00:72:15:be:16:80:a7:c4:af:cb:fc:86:56:93:73:c5:47:
         15:30:95:25:b7:ad:b5:8e:c6:4f:d5:0d:3b:b5:9b:bb:1b:a9:
         96:1c:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:27:22 2026 by rpki-client