Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File:                     9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier:          ZaSi+a+gNnjDDskhVcyjQLDY8uC+phE+lCRWAJcf8cM=
Subject key identifier:   69:45:DD:26:90:64:20:5F:5F:E1:7D:4D:C3:57:24:02:E7:AE:40:1F
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer:       /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial:       019F905A45C0DE71FF01D6420E0C24CF6479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number:          10F3
Signing time:             Thu 23 Jul 2026 19:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:02 +0000
Files and hashes:         1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: 2/uKZLTFK+u92DOlbLOU+pXn52aiuaWMs1c7Wur1doA=)
                          2: ylsyREe54U569Cbya5kHu3je-G4.asa (hash: 6/SDvz7I7Rk9Q9eges7LMoyhQg8zkiVuxvYbU53cDDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:45:c0:de:71:ff:01:d6:42:0e:0c:24:cf:64:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
        Validity
            Not Before: Jul 23 19:01:02 2026 GMT
            Not After : Jul 24 19:01:02 2026 GMT
        Subject: CN=6945dd269064205f5fe17d4dc3572402e7ae401f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:20:84:57:fd:7b:61:a6:5c:3e:34:23:12:
                    d8:1e:50:03:25:ad:89:b6:9b:c2:a0:70:ed:d7:eb:
                    5d:ce:6c:db:56:92:7c:f2:1e:58:dc:fe:e9:74:fd:
                    59:37:59:0f:d2:72:01:ee:a1:fa:a8:7a:46:99:4c:
                    7a:d7:e3:e8:f0:06:82:7f:8e:6a:f8:be:64:03:20:
                    ab:e4:5b:64:27:ca:41:f0:a3:e1:de:66:73:4a:87:
                    9d:3b:52:c8:36:ac:f5:0d:c3:9d:ef:6c:55:42:17:
                    b1:a8:29:2e:96:a1:e5:9b:d2:ad:c4:88:b1:e3:1f:
                    de:5c:7e:03:bb:fb:7b:32:2a:22:6f:f0:5d:e0:8a:
                    98:05:4e:69:92:93:67:39:95:13:95:ff:76:06:b2:
                    ad:8d:1f:90:f5:57:8a:4b:02:2a:db:03:ab:9b:ed:
                    8f:fb:22:9e:4a:da:69:78:6c:95:04:ea:9c:21:3d:
                    9e:44:93:11:96:5e:6e:ed:24:01:2e:0e:b0:68:cb:
                    3e:95:63:e8:8e:8f:7f:ed:76:92:c3:56:04:50:e5:
                    75:81:6b:15:cd:64:14:95:82:e5:17:f7:b1:e1:a3:
                    82:4e:ba:a7:42:d1:ac:13:c5:de:6b:e8:90:38:15:
                    e8:8f:d1:24:88:c9:eb:da:66:61:df:cb:52:c7:8b:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:45:DD:26:90:64:20:5F:5F:E1:7D:4D:C3:57:24:02:E7:AE:40:1F
            X509v3 Authority Key Identifier:
                keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4c:46:5a:19:13:3e:bb:e5:4a:67:f1:e9:01:6b:7f:a2:f0:
         07:ed:f9:6d:c7:d7:15:5d:50:5f:ea:79:8a:42:d4:99:16:f9:
         7c:60:4c:5e:4c:4a:43:fa:7c:47:cc:d1:71:35:7d:87:e8:e2:
         a8:9a:e1:a5:60:98:00:fd:8f:a9:ed:a3:c0:f2:70:cf:3a:ec:
         67:37:40:df:16:bd:d4:93:9c:c6:ea:bd:01:7f:9c:9a:9c:2a:
         7f:fa:9b:9a:f7:b0:66:f9:91:39:07:68:b3:f4:c8:f5:fa:f9:
         f8:b7:fe:49:75:c6:9a:12:85:f6:b4:e2:67:f5:47:8c:aa:1a:
         97:d8:54:8d:02:61:6f:31:c3:67:18:de:09:28:c9:71:1c:89:
         b1:59:74:dc:de:1f:b7:2c:17:a1:6e:7d:7f:80:2e:ca:a7:25:
         98:0c:cc:4b:7e:78:79:ed:6f:0b:24:00:6d:f2:e9:2d:51:6a:
         52:8a:49:07:4b:bc:dc:a7:de:8d:6a:3a:2a:16:8c:ab:0b:71:
         0d:ff:77:f9:52:35:e7:ff:fe:84:97:c2:53:d4:f6:6b:3d:cf:
         79:0a:d9:1c:04:c7:9d:6b:c6:46:ca:3c:66:cf:ab:fc:60:13:
         5e:2f:46:36:47:2d:25:51:31:86:d2:d8:1d:3d:d1:df:63:fb:
         0c:32:b4:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWkXA3nH/AdZCDgwkz2R5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Nzc2NmYwNzI2Y2ZmODYxOGFmOTY4MjU4ZjViYjIyOWU5
MzdjNmUwHhcNMjYwNzIzMTkwMTAyWhcNMjYwNzI0MTkwMTAyWjAzMTEwLwYDVQQD
Eyg2OTQ1ZGQyNjkwNjQyMDVmNWZlMTdkNGRjMzU3MjQwMmU3YWU0MDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRMghFf9e2GmXD40IxLYHlADJa2J
tpvCoHDt1+tdzmzbVpJ88h5Y3P7pdP1ZN1kP0nIB7qH6qHpGmUx61+Po8AaCf45q
+L5kAyCr5FtkJ8pB8KPh3mZzSoedO1LINqz1DcOd72xVQhexqCkulqHlm9KtxIix
4x/eXH4Du/t7Mioib/Bd4IqYBU5pkpNnOZUTlf92BrKtjR+Q9VeKSwIq2wOrm+2P
+yKeStppeGyVBOqcIT2eRJMRll5u7SQBLg6waMs+lWPojo9/7XaSw1YEUOV1gWsV
zWQUlYLlF/ex4aOCTrqnQtGsE8Xea+iQOBXoj9EkiMnr2mZh38tSx4vsywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlF3SaQZCBfX+F9TcNXJALnrkAfMB8GA1UdIwQY
MBaAFPV3ZvBybP+GGK+Wglj1uyKek3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMt
YTgwMjI0NjA0ZjI1LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMtYTgwMjI0NjA0ZjI1
LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkxGWhkT
PrvlSmfx6QFrf6LwB+35bcfXFV1QX+p5ikLUmRb5fGBMXkxKQ/p8R8zRcTV9h+ji
qJrhpWCYAP2Pqe2jwPJwzzrsZzdA3xa91JOcxuq9AX+cmpwqf/qbmvewZvmROQdo
s/TI9fr5+Lf+SXXGmhKF9rTiZ/VHjKoal9hUjQJhbzHDZxjeCSjJcRyJsVl03N4f
tywXoW59f4AuyqclmAzMS354ee1vCyQAbfLpLVFqUopJB0u83KfejWo6KhaMqwtx
Df93+VI15//+hJfCU9T2az3PeQrZHATHnWvGRso8Zs+r/GATXi9GNkctJVExhtLY
HT3R32P7DDK0iw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:16 2026 by rpki-client