Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File:                     m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier:          EyKFWO8H7k7wqNZwi0dl5p6oa7rYZiG2ueZZv0Au9Ow=
Subject key identifier:   AE:BC:7D:A3:8B:05:66:51:A4:02:6C:FA:45:77:5A:91:D4:BD:FA:65
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer:       /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial:       019F90C83750DDA4AA21922BCF477BF47478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number:          14DA
Signing time:             Thu 23 Jul 2026 21:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:08 +0000
Files and hashes:         1: 7jj42obFD8RD0DjQ1ozNQQKQyX4.roa (hash: nLM/rezqL1i4yqf0Rz+h3pdwMXHwlPmA9MtXcIXiwTY=)
                          2: CCQOO8anG7WZQ-CMnCxWzdFShTs.roa (hash: M83hlMTeAUf+xS69MU+OXr2z18iSzDUopMQnLTo5ras=)
                          3: gzPjxSV5NT3n9pyhl6YdC1VefSA.roa (hash: mmHPwTp+4ezqtnWysDoJTp93kBZueU6MUxs9A6m03vY=)
                          4: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: 8r2EzdGokODVU/D6v8iht7tXyQQ55QtCtcD9BEnhRdY=)
                          5: ngZw_Aqalo4a-WBAo61UeGloX7M.roa (hash: s2t7boy4rl1XclJAMGdyD80QMpg5tZS7P2s0Nr+Sbwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:37:50:dd:a4:aa:21:92:2b:cf:47:7b:f4:74:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
        Validity
            Not Before: Jul 23 21:01:08 2026 GMT
            Not After : Jul 24 21:01:08 2026 GMT
        Subject: CN=aebc7da38b056651a4026cfa45775a91d4bdfa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:f0:0a:c2:2c:79:f2:47:eb:63:a3:bd:eb:
                    42:d1:93:b0:3b:36:c7:2c:d2:d6:72:91:29:ca:2f:
                    99:1e:6d:48:39:bc:d3:3c:21:97:cb:f3:63:da:51:
                    31:92:2c:15:89:ff:6a:54:b2:56:91:18:33:d3:70:
                    d1:38:44:82:80:05:b5:51:00:62:13:47:01:8a:ee:
                    f8:6b:e6:53:61:98:3c:61:44:2a:68:3f:b9:8c:b0:
                    57:9e:39:a2:3c:c2:30:7a:95:53:6e:c7:95:37:1e:
                    3b:cb:0e:85:4b:09:60:91:8c:6b:ad:15:1f:33:28:
                    1b:cd:59:15:04:13:1e:1d:5f:68:86:61:6a:98:9f:
                    07:56:f2:3a:af:a9:15:7e:97:36:5e:07:60:d3:55:
                    4a:45:74:65:01:c5:0a:ac:3c:54:df:be:a3:0c:64:
                    93:e8:fe:33:9a:0d:52:b9:74:f1:0d:bb:9e:ac:6c:
                    46:48:68:86:81:9e:13:9a:b3:90:24:c2:de:c7:5b:
                    26:4c:29:8a:cb:ae:76:f4:01:46:e6:4a:ba:ad:f4:
                    b4:24:8a:df:d9:1c:f4:e0:21:6c:7c:eb:89:f5:ee:
                    15:da:41:5d:f4:df:ac:75:01:68:2b:23:91:47:75:
                    d6:6c:cf:8d:db:33:7f:4e:ef:70:b7:39:cb:eb:20:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BC:7D:A3:8B:05:66:51:A4:02:6C:FA:45:77:5A:91:D4:BD:FA:65
            X509v3 Authority Key Identifier:
                keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:00:32:bd:c1:cd:76:6c:76:24:90:d6:03:8b:cb:bf:8a:8e:
         e4:51:cd:6a:59:88:06:13:43:42:d3:aa:65:60:d4:eb:91:65:
         bc:43:c9:d1:fd:91:9a:ce:36:80:52:84:16:76:63:a1:0d:66:
         d6:dd:0b:ae:b2:0a:56:6c:4e:54:ed:4a:e9:03:4d:8d:63:ca:
         70:ad:02:56:88:6c:63:41:c5:02:76:03:6f:20:c9:f3:64:aa:
         89:87:8a:6a:b2:2e:1b:66:11:9c:e1:26:d6:34:21:43:ac:80:
         ee:c0:08:ed:f7:c0:19:0f:41:21:bf:26:60:e3:5a:d7:7e:42:
         b5:81:d7:17:ef:be:14:1e:ae:02:bf:8e:b4:b0:55:94:0f:5a:
         08:bd:93:a9:7b:d2:aa:d0:93:d2:2a:05:77:a6:3a:4f:00:81:
         a8:6b:1d:f2:58:c9:1b:a3:3a:fd:ed:57:3a:95:3a:88:3a:e5:
         45:b8:21:fc:b7:d6:06:00:02:eb:a5:95:73:a5:a5:6f:74:52:
         5a:bb:fc:59:c2:93:98:3d:fa:df:9f:8a:42:db:1f:14:34:45:
         85:ae:06:96:cc:04:e8:c5:15:b9:b6:5f:01:14:eb:7d:2d:6b:
         c5:ad:24:ee:d7:aa:dc:b1:ca:a8:2f:20:11:ca:ec:dd:01:c2:
         eb:70:ab:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:39 2026 by rpki-client