Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
File:                     9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json)
Hash identifier:          Nt0C+jX7eRJKMcKSergQ/0oK0hcYLw34xPDGua3nIfE=
Subject key identifier:   DE:00:96:CF:BA:62:3A:00:F8:4F:22:97:A2:36:22:15:37:63:27:CE
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Certificate issuer:       /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial:       019F9023136A5DC0B8FBD655D16B834FDC99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
Manifest number:          0CC0
Signing time:             Thu 23 Jul 2026 18:00:45 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:45 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:45 +0000
Files and hashes:         1: 99vNYm11Abb46yGkbIvnhElSUKk.roa (hash: kaM8j0/7vV6OtesnBvSal75AKpJWv23ajsp4aKhWL4M=)
                          2: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: yNuK7BhJL3LHza35ydaN/+QFPJLuRWwnZkzggI/88fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:13:6a:5d:c0:b8:fb:d6:55:d1:6b:83:4f:dc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
        Validity
            Not Before: Jul 23 18:00:45 2026 GMT
            Not After : Jul 24 18:00:45 2026 GMT
        Subject: CN=de0096cfba623a00f84f2297a2362215376327ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:23:8d:a7:96:a4:07:05:75:bf:05:d0:b8:87:
                    6e:77:f3:ec:ed:2a:25:f2:88:68:02:b4:8a:30:3f:
                    e5:20:b8:f1:cd:91:62:36:4d:46:a4:d5:be:ca:da:
                    82:3d:e8:36:a0:91:22:bf:cc:16:5a:ef:8a:25:92:
                    4d:14:15:a8:11:a9:fc:41:98:96:a0:28:8d:f4:41:
                    52:6f:59:91:cb:4c:61:da:96:86:42:4d:e3:38:05:
                    a4:48:1f:a0:12:99:27:8e:66:9c:ed:52:d3:c7:88:
                    b7:b9:d6:e3:f4:18:95:c4:f3:12:77:62:d2:5d:4b:
                    c6:1a:ae:c0:10:75:da:08:06:ad:be:61:23:73:b1:
                    89:95:d6:b6:ee:0d:07:5b:ae:d2:39:a7:eb:75:d0:
                    e2:f5:48:29:0a:84:41:8a:09:85:d9:ba:51:be:f3:
                    76:96:39:da:df:13:91:a8:90:9a:11:e5:a8:c2:f3:
                    42:05:82:43:09:8e:31:61:0c:47:21:af:ec:f6:4d:
                    58:53:31:87:3a:1e:e0:63:cb:bc:80:dd:fd:63:7d:
                    5d:50:b3:bf:2b:f5:d5:be:c9:c5:de:31:e8:11:f7:
                    75:da:9e:0e:98:2e:c5:f7:ed:fc:94:ba:0f:3f:de:
                    97:ee:09:e7:46:59:21:f4:c9:e6:84:44:ed:04:9c:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:00:96:CF:BA:62:3A:00:F8:4F:22:97:A2:36:22:15:37:63:27:CE
            X509v3 Authority Key Identifier:
                keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5b:c7:b1:fe:30:66:ef:0c:6f:f0:82:e5:63:65:e0:72:6b:
         77:76:02:05:3e:1b:f6:d9:92:80:96:3c:52:ab:89:57:36:d9:
         c4:42:96:86:bc:1a:e1:e4:af:8f:98:22:d3:17:60:fc:17:4d:
         ea:af:8d:cd:52:9b:32:f1:ad:5d:d9:87:d5:a4:4f:73:6c:e3:
         0a:61:aa:4c:c1:99:9b:c8:b3:53:88:b6:8e:57:08:c0:06:ae:
         35:94:f1:33:a3:98:ed:17:58:89:b0:0f:b8:9b:ae:90:0d:a2:
         38:9c:be:80:4c:7c:ea:7c:33:e9:47:3c:2c:16:c6:7a:38:05:
         4e:e7:80:c1:ed:8d:55:26:1b:91:21:a5:09:c5:da:1e:2f:62:
         ce:84:20:6e:3c:90:a8:44:a1:84:28:b1:84:0c:2e:93:9e:f7:
         32:2c:06:84:dc:60:92:62:de:5f:b4:05:bb:c7:7f:11:a7:da:
         e4:d8:ef:c0:68:d3:85:4b:a1:91:1f:2f:a6:96:3c:56:ca:3b:
         83:1e:13:fa:cb:7b:06:8e:f5:13:30:11:b9:aa:0b:18:f0:42:
         af:a5:fb:ce:5b:df:aa:db:04:0e:c1:80:5d:56:78:0e:b3:59:
         21:ba:c9:e8:11:df:1d:7c:c1:8a:05:84:b6:5a:74:52:f2:9b:
         c6:bc:40:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:15 2026 by rpki-client