Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File:                     c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier:          IOasxxTxTVmpCZO1b0ihFOQqs+2FPYK243EhJ4NHwKU=
Subject key identifier:   99:9C:D9:1B:B6:AE:85:E0:95:BF:D8:D2:50:88:59:00:89:04:C0:EF
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer:       /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial:       019F91A3F1180C7ED1057AA5F8A5E4584B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number:          0E09
Signing time:             Fri 24 Jul 2026 01:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:08 +0000
Files and hashes:         1: 40EThboBSEVGFMmXd89FK4WaTNo.roa (hash: ohel7RKT+QSonvsuuV4gvqAOjnxAWjb8zzBfZRnvIeI=)
                          2: XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa (hash: NrqwSk7qLUhd2Ca65sK/JaxXop9TloKYfUN2lC/2ang=)
                          3: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: PtLfb2Rb1DygsKDO2bYBrHx+eBb8dwJihacUIdJwADE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:f1:18:0c:7e:d1:05:7a:a5:f8:a5:e4:58:4b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
        Validity
            Not Before: Jul 24 01:01:08 2026 GMT
            Not After : Jul 25 01:01:08 2026 GMT
        Subject: CN=999cd91bb6ae85e095bfd8d2508859008904c0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:54:a5:b5:c3:4e:24:83:ff:14:d2:cc:b3:
                    a9:49:12:17:2e:8b:76:8c:dd:1b:c7:77:a3:fb:7e:
                    b9:03:13:c6:8a:df:74:70:73:73:7f:25:50:26:7e:
                    5f:49:8b:26:c0:ff:53:88:35:7b:00:9b:cc:fd:3b:
                    3e:27:47:f5:3b:b9:fb:f6:79:6f:a7:44:d1:d3:02:
                    8e:50:c5:8d:28:ce:c0:82:9d:f6:41:20:f7:5c:50:
                    eb:12:4b:3f:32:2d:db:3c:fb:7a:52:68:32:08:30:
                    9a:ed:b2:71:05:de:75:47:f5:fe:8d:b8:5b:6a:02:
                    71:2e:a4:8a:64:e4:13:f8:4c:2f:27:2f:f9:d9:fa:
                    91:e9:cf:4e:17:c0:71:db:57:bd:79:39:0b:41:77:
                    75:a5:02:fc:d7:13:05:46:96:fd:23:11:b2:f9:03:
                    87:cd:4a:c4:ab:f0:08:8b:29:2a:5c:c1:47:38:c2:
                    f8:a6:fa:83:e5:e3:5e:97:fa:75:a3:0e:bd:6e:cf:
                    37:cf:2d:11:61:58:1b:01:11:03:3b:87:bf:e0:be:
                    c7:69:fa:a8:76:a6:29:b5:12:0b:8d:f5:5c:f8:ce:
                    1a:d9:45:e6:40:9a:65:77:6d:7f:29:5c:eb:ec:af:
                    d0:22:45:8c:d4:d1:81:b2:cf:68:dc:b2:4d:ea:27:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9C:D9:1B:B6:AE:85:E0:95:BF:D8:D2:50:88:59:00:89:04:C0:EF
            X509v3 Authority Key Identifier:
                keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:8f:ca:14:a1:1e:01:db:9f:fe:41:95:9d:5a:b0:4a:13:70:
         ef:2b:44:f4:82:01:00:6f:b5:20:02:52:15:3b:54:66:c5:d1:
         74:bd:a8:b3:38:62:c1:e9:92:8f:89:fe:38:24:2c:9a:67:ba:
         0b:a9:80:ce:15:3e:44:39:d3:39:dd:e1:0e:cd:a4:de:87:cb:
         05:ef:f2:b4:76:df:d4:d2:21:c3:48:43:2f:ee:d1:81:79:91:
         5c:10:47:42:ed:ac:19:d0:5f:ef:16:52:94:db:11:0c:f6:fc:
         3f:ed:c6:c3:57:41:3b:d0:7a:96:a7:95:d1:5a:f4:1c:52:1a:
         ef:39:7f:2e:ea:d0:36:77:bd:20:97:23:03:e4:46:8d:4c:fd:
         a8:c2:d7:f7:14:f8:df:14:d1:5a:ce:f4:04:7c:5d:db:d0:e7:
         29:38:0a:f5:0a:0e:4c:b5:60:0e:93:86:bf:b8:cb:ab:9c:64:
         18:dd:7a:42:d1:47:59:5d:d0:dc:8b:b4:82:c7:af:93:9d:fb:
         a4:5c:7d:4a:15:7c:c3:90:0d:33:3f:1b:a1:a5:b6:e1:08:f2:
         0c:1e:04:0f:90:5e:5e:4a:f9:25:da:b7:22:57:21:ad:b5:77:
         5b:31:03:1d:64:19:fe:57:a7:fc:89:b9:87:da:30:12:61:17:
         7c:89:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:41 2026 by rpki-client