Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File:                     9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier:          1rf4eqvHx7sov1KU3rZWQ8U/7AaAif92w5pFXJbYzbc=
Subject key identifier:   44:AC:E6:B4:69:CB:84:0F:AA:12:5D:1C:F8:0A:16:13:DA:A1:96:30
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer:       /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial:       019F90FECB471F012B28997272110A22A6B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number:          142A
Signing time:             Thu 23 Jul 2026 22:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:44 +0000
Files and hashes:         1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: GU7urDf7nz17Lm0aFiu4ju0FKAEi7Z/tYlP9IKFdxXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:cb:47:1f:01:2b:28:99:72:72:11:0a:22:a6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
        Validity
            Not Before: Jul 23 22:00:44 2026 GMT
            Not After : Jul 24 22:00:44 2026 GMT
        Subject: CN=44ace6b469cb840faa125d1cf80a1613daa19630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:72:60:22:f6:e2:8a:e9:77:a8:2b:7e:bd:
                    49:90:8e:2d:0e:1e:88:08:71:d4:bc:73:f8:82:b3:
                    79:0f:93:e0:c4:dc:51:db:a1:75:92:64:ef:f1:ff:
                    34:e2:9f:b2:6f:82:8e:41:09:b7:4f:4f:40:ae:e4:
                    a3:1d:be:fe:3e:ec:cb:04:45:44:eb:03:f9:1d:8a:
                    ca:1f:76:67:39:bd:ff:61:67:4b:08:a6:48:e3:51:
                    3b:a9:95:48:61:bc:35:70:1a:9a:05:bb:2a:e4:c1:
                    5e:7a:79:72:97:b7:d8:89:b7:3f:80:c5:65:e9:44:
                    80:9c:af:da:e7:6e:61:07:57:f4:a6:9e:17:8c:af:
                    12:47:11:77:23:d4:de:21:a1:38:45:c8:a3:1a:7e:
                    35:ab:c0:6e:b3:13:d0:ec:6d:3f:11:9c:b3:0a:85:
                    26:08:24:9d:2e:07:a5:42:a1:80:21:ed:2d:65:eb:
                    82:df:7b:eb:be:df:4a:c1:5a:67:f5:5c:33:c3:4b:
                    d2:bf:ed:91:92:e0:88:48:37:6c:82:4f:58:1e:d0:
                    db:d1:d1:61:0a:15:2f:52:32:41:0a:cf:c1:9d:4d:
                    d4:f9:b7:7e:69:fd:0f:ab:61:3d:29:d5:f6:77:65:
                    e0:f8:29:ba:41:22:6c:76:00:23:99:40:ff:d4:4d:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AC:E6:B4:69:CB:84:0F:AA:12:5D:1C:F8:0A:16:13:DA:A1:96:30
            X509v3 Authority Key Identifier:
                keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2d:a5:53:4b:c3:0b:91:55:42:36:b4:d6:63:3e:3a:91:38:
         a0:13:6f:c7:20:3e:8c:64:f1:70:93:68:6c:44:9e:76:e1:44:
         db:7f:99:b1:12:81:b6:61:d7:b6:6a:24:5a:cb:83:6a:52:3e:
         f9:fe:d1:77:c0:0a:2f:f9:6b:85:52:b3:e9:68:8d:75:21:eb:
         8e:06:08:df:e5:86:c7:be:1a:4d:1c:89:13:e9:a0:a7:f0:a5:
         b4:af:e8:e0:95:62:ff:b6:74:ec:74:28:de:75:cd:ee:da:ef:
         e2:19:0c:3d:c3:dc:98:da:5d:d3:c3:0b:b8:6b:b5:98:bd:bf:
         93:67:7a:4d:8c:78:9b:da:21:e1:01:d7:7c:47:e2:ec:58:57:
         31:d5:44:82:de:21:ce:f8:f5:25:d2:09:f7:ae:03:88:4f:1e:
         66:fc:d1:43:10:0a:1b:b3:56:9f:9e:bb:57:55:13:15:64:fb:
         02:b8:c1:72:5b:67:ca:73:2f:d7:91:16:f4:6f:fc:76:a0:99:
         10:14:91:af:04:20:65:c3:42:7b:b7:d0:58:e2:35:bd:98:2c:
         78:49:3d:7d:f2:0e:eb:86:8f:61:97:97:45:25:0f:37:b1:b1:
         77:f6:33:27:4a:49:a9:d2:2e:a5:c3:69:dc:75:b6:34:30:fd:
         23:7b:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:27 2026 by rpki-client