Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File:                     S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier:          uNT+D4wFtpgKed3F1XqtWehDw0MxXAV5ucu/157M2mE=
Subject key identifier:   72:F9:ED:35:A7:72:A2:5D:B4:BA:3A:EC:C5:21:41:B1:6D:8D:1E:67
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer:       /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial:       019F94DBE9E942FBA608E8C51E588CFE5BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number:          0B09
Signing time:             Fri 24 Jul 2026 16:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:07 +0000
Files and hashes:         1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: 6btNCnIpJnzQrF5XuQ9rpjtAN6rqaYTo0HiGPy3L1cg=)
                          2: sfEWFmLBFi8kIni9PxbLJvVQPu4.roa (hash: T0uJkWdr7Y8Livsd/MrYx/Sd7EGtR4cka94f/gVeHmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:e9:e9:42:fb:a6:08:e8:c5:1e:58:8c:fe:5b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
        Validity
            Not Before: Jul 24 16:01:07 2026 GMT
            Not After : Jul 25 16:01:07 2026 GMT
        Subject: CN=72f9ed35a772a25db4ba3aecc52141b16d8d1e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:97:65:51:49:32:2d:0d:01:3c:a4:ae:83:
                    36:87:dc:af:04:a4:eb:88:59:14:ae:ee:61:15:5d:
                    61:ee:5e:3e:bc:54:47:de:fd:ca:c1:24:96:63:24:
                    a3:34:c1:31:f5:8e:82:34:95:c7:eb:65:39:b6:10:
                    25:17:f0:91:dd:aa:b5:b3:f9:5b:08:70:91:0a:54:
                    88:94:af:8a:7a:93:af:41:55:37:7b:c7:db:6e:4a:
                    80:c6:dd:a4:5d:e1:a7:50:6c:0a:3b:ef:57:7e:f7:
                    24:08:7d:b7:b6:d8:17:43:ce:5c:82:b9:3a:9a:06:
                    ac:d6:b2:39:d1:b1:aa:67:ba:2d:33:f8:42:c1:7f:
                    e5:fb:52:47:f1:16:af:93:35:09:d2:3f:58:33:31:
                    c7:68:b1:3d:08:19:a5:77:05:62:e9:83:ee:14:31:
                    21:19:90:3e:30:80:c4:ac:c0:44:a4:a2:ad:07:60:
                    f3:63:87:78:f4:7f:b2:5b:c3:5f:7e:e9:9d:d2:8f:
                    e5:61:9c:70:56:58:9c:12:1b:39:96:01:cc:b8:c5:
                    7d:ac:54:52:ce:52:b0:d9:8c:a8:93:9c:91:2d:3b:
                    bd:1c:11:cb:09:9f:8f:6c:1d:80:b0:42:25:7c:56:
                    95:fb:94:1d:f0:6d:16:f2:fa:72:87:90:3b:6a:a3:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F9:ED:35:A7:72:A2:5D:B4:BA:3A:EC:C5:21:41:B1:6D:8D:1E:67
            X509v3 Authority Key Identifier:
                keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:68:69:26:21:24:aa:ca:f2:a2:55:4c:26:fc:af:02:38:
         7a:ef:27:21:a5:0f:00:a3:05:da:07:70:9b:26:19:71:9c:d6:
         2b:26:ee:e4:f3:0c:6a:9c:cd:64:15:92:74:e6:66:72:98:fb:
         1c:11:7a:bc:9f:5a:14:23:7b:ab:6e:95:21:e3:7d:23:86:5b:
         d0:cd:bf:50:06:c5:74:cf:82:59:04:18:08:c8:3a:a8:65:6b:
         b2:91:3b:71:84:a2:fc:87:fa:49:5c:99:ea:6a:df:5e:33:b7:
         80:79:bc:8b:20:25:02:63:7f:d7:ef:80:a2:f0:01:22:80:39:
         0e:15:9c:ef:d8:da:9b:6c:fa:0e:d9:fe:c0:f0:c1:12:09:d5:
         aa:e3:26:e8:66:c3:61:2f:13:9b:e0:92:3c:04:14:2d:3b:67:
         2b:c8:2e:aa:46:b9:a3:94:61:9e:9c:08:50:03:81:e9:c9:83:
         ed:21:e7:47:3e:f5:6a:36:e9:1a:e6:3f:49:ef:2b:cc:b8:76:
         c3:47:2d:f3:92:c7:e3:94:94:92:b0:d7:cd:ef:2c:2f:67:c1:
         1f:bd:b1:6e:53:a5:9c:cd:c6:27:dd:36:6c:b8:17:fa:d9:c2:
         af:23:65:00:63:59:98:49:db:d9:dc:f5:5a:75:5e:14:c3:de:
         66:76:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:47:54 2026 by rpki-client