Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier:          Z1xwtrG/dARlc++hGoPEBQ9KRKi4ofkj+gOjeh0UdGM=
Subject key identifier:   76:F6:82:34:52:04:E4:CD:9F:59:C9:B5:C7:4E:BB:FC:D8:A7:2E:3F
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer:       /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial:       019F91A3AA258ACEFAC4942481EF4CFFFEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number:          09AB
Signing time:             Fri 24 Jul 2026 01:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:49 +0000
Files and hashes:         1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: MOgdLyTn9BYuxuRZAcc5/ppkv24YA+9a0ZadokossTU=)
                          2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:aa:25:8a:ce:fa:c4:94:24:81:ef:4c:ff:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
        Validity
            Not Before: Jul 24 01:00:49 2026 GMT
            Not After : Jul 25 01:00:49 2026 GMT
        Subject: CN=76f682345204e4cd9f59c9b5c74ebbfcd8a72e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:40:04:f3:27:6d:e3:43:03:7b:19:1e:57:
                    7a:c4:3d:f2:06:78:bc:e5:d9:f8:15:0a:ff:3f:b7:
                    b8:04:b3:87:19:9c:a0:e1:7b:f8:31:82:99:e0:e0:
                    4a:37:98:c3:9f:52:b9:0f:4b:e6:9c:53:74:7e:d7:
                    65:00:65:90:6c:0e:fa:77:dc:1f:8f:a2:8c:a3:82:
                    04:a1:9f:28:4b:f2:8a:65:8e:2a:eb:7f:6d:ed:79:
                    13:48:1b:28:75:17:33:f4:07:02:12:ff:ab:ad:87:
                    82:e8:e6:14:cc:58:8f:1e:a8:5f:cc:e1:be:a8:c7:
                    16:6a:11:fc:5a:02:0f:c9:0a:4d:21:54:2e:8d:b7:
                    f8:0c:2b:7f:40:61:42:eb:8e:84:c1:bf:43:7d:91:
                    57:0a:24:b8:b9:8d:39:02:c8:fd:6a:74:6b:35:7e:
                    88:60:11:73:c7:5b:66:b6:17:3e:10:43:ab:2b:f5:
                    4f:fc:5f:29:b5:fb:e5:7b:e2:f4:d8:78:49:b4:0f:
                    5b:37:1d:9c:a3:47:17:49:1a:82:9f:7d:f9:0c:83:
                    39:72:1b:33:e8:3d:00:0a:74:6e:44:29:84:00:c0:
                    24:44:dc:50:af:40:db:1b:05:1f:a3:8a:9a:2b:53:
                    46:81:2e:58:b4:48:75:6a:e9:4d:40:ab:23:94:6d:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F6:82:34:52:04:E4:CD:9F:59:C9:B5:C7:4E:BB:FC:D8:A7:2E:3F
            X509v3 Authority Key Identifier:
                keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8f:55:db:ee:03:a2:a3:92:4b:09:b7:e1:ee:47:7d:2d:0b:
         6f:ac:26:62:6a:15:92:e4:44:1a:0f:e9:11:40:a3:a2:f0:0f:
         6f:2d:7a:8b:1e:6f:ec:46:ec:e6:8f:e6:90:3a:6f:25:48:52:
         71:03:98:32:4b:4e:52:ce:2f:70:4f:21:32:a7:e7:f9:66:e1:
         33:7b:de:f6:95:ed:d4:3d:34:1f:4c:66:fa:b0:05:36:09:dc:
         6a:af:a5:62:78:02:8d:3d:3e:ea:87:98:fe:7e:6f:d6:ff:6d:
         64:6c:13:d0:32:46:56:ec:86:4b:d2:e7:a0:12:e0:ab:f7:55:
         c3:0c:e7:c2:b4:f2:20:c9:df:d5:7c:36:70:3f:c2:74:d0:56:
         fd:4d:2b:95:46:ff:40:ba:49:4b:ce:7f:62:e8:13:1f:c7:88:
         49:ae:8d:a6:18:2f:34:ad:0f:35:b3:2e:a0:98:7c:ee:65:04:
         fa:43:58:a7:f2:68:34:b3:ed:1e:64:a3:d3:18:a0:bc:14:f6:
         70:44:5d:74:18:7c:ef:4f:8c:73:fa:73:a6:3e:80:fc:12:94:
         44:7d:f6:99:6f:05:7e:c5:e7:3a:23:ca:c9:31:37:aa:83:bc:
         a4:e1:e6:6a:51:6c:09:48:7e:b3:59:24:05:9b:22:7d:b5:ab:
         87:37:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:32 2026 by rpki-client