Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File:                     9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier:          YYwNzzeXjF2qDBNfrcjmoQyQ0k7GB7FqmpwDXXvgYYA=
Subject key identifier:   9E:D0:5A:88:CE:AA:72:F6:DE:23:E5:8D:5C:8A:5C:34:5F:2B:52:A2
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer:       /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial:       019F8FB537FE8BAFAD4F769396EF37199379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number:          0DEF
Signing time:             Thu 23 Jul 2026 16:00:45 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:45 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:45 +0000
Files and hashes:         1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: 3KFBTZMpJCpHThzJ9dCnN/snXAj/VQdGnEu0ieWw3Vs=)
                          2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:37:fe:8b:af:ad:4f:76:93:96:ef:37:19:93:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
        Validity
            Not Before: Jul 23 16:00:45 2026 GMT
            Not After : Jul 24 16:00:45 2026 GMT
        Subject: CN=9ed05a88ceaa72f6de23e58d5c8a5c345f2b52a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:9e:32:3f:28:50:b7:61:70:25:58:b7:40:
                    41:4a:c0:05:35:f4:2c:71:2d:8e:e5:b1:8a:39:dd:
                    0a:8b:db:ca:18:32:40:84:5b:1d:8a:ab:23:62:a4:
                    b7:03:85:89:a2:ab:ff:0b:db:5c:f9:d3:26:df:e5:
                    1e:f5:3e:84:d7:9c:98:5e:db:71:16:59:44:ba:4a:
                    f4:8c:05:53:08:93:a2:2f:b0:d8:06:6b:8d:57:e0:
                    f1:64:55:2f:80:29:e5:15:e3:54:d5:94:f2:03:39:
                    fb:bf:3b:29:08:6f:d0:39:b7:2e:5e:2b:f7:b1:61:
                    4f:b3:44:36:8d:9e:ef:2a:2b:21:f7:28:b2:50:0b:
                    29:a6:33:02:38:9c:57:d4:a8:0d:a2:90:5c:8c:eb:
                    f3:63:eb:db:4d:55:8a:8a:9b:e7:51:b2:4c:b6:73:
                    1b:f9:c6:96:99:b8:54:c5:20:bc:bc:69:4e:13:0b:
                    36:ac:0f:f0:d7:e6:8c:a7:13:3b:c7:df:4d:b7:c4:
                    01:35:b5:ca:fe:33:df:0d:54:55:50:46:48:c3:cc:
                    d9:5d:16:00:96:7a:dc:8d:bf:e6:51:9b:be:e1:fd:
                    12:25:2d:aa:79:6b:89:1a:16:b8:92:9a:52:12:c4:
                    af:38:fd:23:c4:a9:50:ce:6f:5d:d5:e1:7e:a6:19:
                    5f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D0:5A:88:CE:AA:72:F6:DE:23:E5:8D:5C:8A:5C:34:5F:2B:52:A2
            X509v3 Authority Key Identifier:
                keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:56:c1:f5:38:a9:82:d8:12:b9:34:1c:0e:21:6e:88:24:a1:
         c9:d5:a5:e2:26:8f:6b:cf:71:a8:00:81:a9:77:db:61:4a:9e:
         2d:1f:61:8c:c1:01:ce:18:84:30:78:90:38:cb:37:7b:90:7c:
         fe:05:9e:6b:fb:b9:3a:4b:c9:fd:13:96:f9:45:ee:c1:c5:ec:
         6e:d5:df:57:e9:f8:68:a6:0a:df:a0:51:63:d6:4d:6f:fc:bf:
         73:d0:4b:0d:9f:9d:c4:d8:28:ca:43:fe:eb:64:40:da:7d:2c:
         38:50:4e:78:65:8d:d5:72:b4:35:1f:c2:bf:9b:61:86:91:f3:
         9d:39:9d:33:1d:58:9b:ab:d6:ab:63:d9:4f:c2:39:9f:f4:e3:
         23:09:5b:fc:b4:09:ab:50:38:3a:d2:a3:98:e3:51:be:a6:23:
         dd:31:8e:a6:c0:6c:27:de:8c:42:d6:fb:ea:62:72:32:5e:3d:
         2e:9a:2d:d6:52:71:46:4f:46:4e:7e:f2:e8:30:a3:ee:05:83:
         b5:60:c1:48:85:9f:c8:1d:f5:55:dd:4a:a8:ac:06:59:51:53:
         d2:2d:5f:50:d3:3e:42:23:d8:dc:ce:90:2a:77:7e:7c:a8:8c:
         f4:63:79:f6:65:90:47:75:db:5a:d5:d4:4f:8c:9c:ab:c3:ce:
         a2:b7:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:24 2026 by rpki-client