Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File:                     9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier:          +r4NJV7TRbU3dPk/hLsN8Vnp8P2vd0Oz+CRMM+kSgXI=
Subject key identifier:   4E:B4:E6:B4:ED:A1:0B:F8:B6:CB:0F:44:9E:21:26:63:9D:D1:34:42
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer:       /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial:       019F8FEBEB37F22C414391B50459D7594F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number:          06EE
Signing time:             Thu 23 Jul 2026 17:00:30 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:30 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:30 +0000
Files and hashes:         1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: dg1u56VirHRK1gR1c3MYTujBTxt06+N2ZdIp0JipWWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:eb:37:f2:2c:41:43:91:b5:04:59:d7:59:4f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
        Validity
            Not Before: Jul 23 17:00:30 2026 GMT
            Not After : Jul 24 17:00:30 2026 GMT
        Subject: CN=4eb4e6b4eda10bf8b6cb0f449e2126639dd13442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:50:b7:c0:2c:2c:da:77:6a:66:0d:e2:8a:
                    bf:77:df:b9:3f:7b:ca:fc:ac:03:51:b2:28:e1:03:
                    40:56:cb:65:45:6a:52:24:81:7d:db:2f:df:40:41:
                    b3:69:51:6f:c5:45:96:6d:94:3c:7f:75:92:f0:af:
                    b4:4d:1c:2d:1f:0c:db:40:82:cb:ea:d0:1b:32:d7:
                    54:f7:1b:73:cf:af:c0:ee:02:96:11:af:12:bb:49:
                    04:bc:df:89:3a:ba:fe:b3:2e:80:be:5b:a7:a2:2d:
                    aa:a1:c7:7b:35:9b:02:25:6d:7a:85:fe:0e:f1:cd:
                    a1:c9:4a:7b:bc:33:22:e7:26:eb:fe:25:bc:a2:c4:
                    34:56:4d:19:45:31:b4:81:6c:49:f5:b9:4e:05:d7:
                    83:3e:99:25:9a:92:58:26:57:71:e4:d4:cf:9a:44:
                    9e:3d:5a:46:f0:1d:50:46:03:e7:98:fd:fa:1e:e5:
                    8f:61:48:44:93:e0:a8:c6:86:c4:7c:0e:0f:f1:06:
                    05:49:ef:74:7f:69:a3:9d:80:59:06:fd:75:a5:d2:
                    81:74:c4:9a:53:c9:4e:1b:e0:75:32:62:e7:fb:d5:
                    08:41:a4:f1:f8:0e:e5:7e:d4:06:87:62:b8:32:05:
                    11:c9:52:7d:e2:ea:1d:74:cf:b6:26:74:f3:d7:92:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B4:E6:B4:ED:A1:0B:F8:B6:CB:0F:44:9E:21:26:63:9D:D1:34:42
            X509v3 Authority Key Identifier:
                keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:74:9d:c4:63:0a:17:e7:01:98:a2:0e:d1:da:68:62:61:6a:
         f4:2f:23:9d:a0:5d:3a:e0:64:00:96:d0:54:5d:87:dc:1f:ae:
         24:b1:23:df:65:e3:c1:45:dc:1d:b4:2a:83:a7:f1:ff:2b:89:
         57:9e:f5:21:ca:83:c6:81:87:00:88:82:90:7a:55:ef:b1:7d:
         dd:dc:1e:f6:38:e1:bd:6a:08:6e:f8:c3:0b:9a:c5:14:35:9d:
         8f:e4:56:f9:b6:ab:59:c7:82:4a:be:52:d1:1e:11:4d:ed:e2:
         22:37:17:6b:9d:fb:34:91:5e:f5:4b:2d:3f:82:45:7d:d9:44:
         e9:a8:16:05:92:57:60:d4:1f:34:00:7e:e6:90:97:1a:04:81:
         b6:78:ce:d8:89:fd:a6:ed:cb:da:ee:ea:d5:b8:c9:b3:69:6a:
         8a:82:f2:00:38:d7:cd:06:32:c6:10:9c:14:4f:da:fd:b0:3d:
         13:d8:56:c9:63:55:a7:71:f7:df:3c:18:ac:75:46:04:17:ac:
         ef:04:01:67:59:81:e0:07:a1:37:ed:ac:a9:09:04:b6:ef:8b:
         0e:31:3f:6f:3b:b0:49:20:2e:7a:0e:f4:f6:34:66:dc:f8:55:
         6b:2b:a8:e2:1f:42:e1:fc:54:4a:5d:2a:f1:8c:8e:11:79:fe:
         7a:ff:78:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:54 2026 by rpki-client