Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.mft
File:                     9IK65Y63RVQ61RlngQKBCKcHXsM.mft (raw, json)
Hash identifier:          2ClYbhwJnkpcTT75abjfdVUZw6SBsisLh20zy4AyTHM=
Subject key identifier:   C3:89:7C:62:44:04:10:81:8E:6A:6D:29:16:8E:B8:62:36:F3:EB:23
Authority key identifier: F4:82:BA:E5:8E:B7:45:54:3A:D5:19:67:81:02:81:08:A7:07:5E:C3
Certificate issuer:       /CN=f482bae58eb745543ad5196781028108a7075ec3
Certificate serial:       019F916D32C2980330368A8648ADFFDC0186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9IK65Y63RVQ61RlngQKBCKcHXsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:20 +0000
Files and hashes:         1: 9IK65Y63RVQ61RlngQKBCKcHXsM.crl (hash: YwvBnb31MktXEjgiWDrMPHJwIQQHhvrJSdvtIdYxcYM=)
                          2: WqvF3xaAU5g9ZqYeaGr7TNyDSPg.roa (hash: 8K9lIrtuYoWxMoTshzYwykTSdth4hFzLqIUp7nfiqiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9IK65Y63RVQ61RlngQKBCKcHXsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:32:c2:98:03:30:36:8a:86:48:ad:ff:dc:01:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f482bae58eb745543ad5196781028108a7075ec3
        Validity
            Not Before: Jul 24 00:01:20 2026 GMT
            Not After : Jul 25 00:01:20 2026 GMT
        Subject: CN=c3897c62440410818e6a6d29168eb86236f3eb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:1b:e7:d3:93:20:4b:dd:b3:11:11:a5:49:
                    c7:aa:de:98:53:9b:e5:fa:71:0a:f4:d3:98:87:54:
                    99:48:58:d4:a7:5d:ea:f7:81:16:8f:a7:cc:7b:05:
                    f9:e2:93:c0:9d:8e:07:4b:b3:a5:22:a0:83:1b:9e:
                    a2:70:0e:81:c0:f2:5e:69:8c:53:a2:2e:7f:5c:2f:
                    62:98:78:97:1c:df:a6:9c:42:86:b1:a7:ca:f6:69:
                    31:b2:c1:70:93:86:68:62:c7:2c:49:33:b6:b1:00:
                    c1:a4:8a:63:8b:f2:08:36:9d:57:3f:6b:ee:23:3c:
                    c8:a5:40:14:aa:33:6d:a9:91:fa:54:4a:49:c4:b0:
                    14:f6:7d:a1:61:0f:23:ab:c2:b2:1d:ec:6d:32:2a:
                    9b:dc:eb:3a:75:fb:d3:3b:30:3a:0a:6d:21:9e:da:
                    e2:72:bb:bb:ee:69:68:bc:c5:7d:bd:07:eb:64:57:
                    0e:47:c4:cf:36:8f:fa:51:ef:de:6d:8a:b9:29:ca:
                    37:cb:5a:bd:cf:2e:79:f5:81:2c:c9:01:9c:71:91:
                    c9:b6:c0:47:49:73:d3:91:11:22:b3:8a:94:11:6b:
                    5b:1f:98:fa:53:d2:0b:f4:74:06:1f:5d:dd:b9:b7:
                    82:01:e9:2d:49:13:40:da:a2:0d:5e:f4:b1:d6:08:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:89:7C:62:44:04:10:81:8E:6A:6D:29:16:8E:B8:62:36:F3:EB:23
            X509v3 Authority Key Identifier:
                keyid:F4:82:BA:E5:8E:B7:45:54:3A:D5:19:67:81:02:81:08:A7:07:5E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IK65Y63RVQ61RlngQKBCKcHXsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/9IK65Y63RVQ61RlngQKBCKcHXsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:95:e0:b3:f1:22:18:bb:1f:3d:5f:bd:25:77:18:e1:98:e6:
         9f:b3:a0:fa:9a:55:99:1f:ff:03:9e:a2:b2:5f:25:32:87:59:
         da:ed:03:ce:78:62:bc:c6:61:82:21:e5:c6:28:32:1f:20:94:
         8b:84:ab:56:3d:e8:a7:52:2c:a8:d0:89:c6:ba:58:09:0e:de:
         b1:ed:51:cf:09:fb:8e:c8:31:9e:6c:d2:30:a3:76:46:bc:1b:
         63:5b:95:68:a6:d7:6d:bb:93:5f:23:e7:e1:e0:e8:73:d6:a5:
         82:56:5a:56:3a:98:f3:44:b8:96:63:1d:1c:7a:69:c0:c5:96:
         8e:27:a6:bf:17:fd:ea:59:31:7c:0a:f5:47:0c:6a:12:b1:0e:
         40:e7:78:79:c1:b0:49:ce:59:ec:31:af:3f:0f:44:08:f2:95:
         76:34:0f:ba:1f:d6:fe:b6:52:1b:2f:21:9e:f8:75:00:58:2a:
         2f:dc:f9:69:7e:b7:90:34:e0:66:ca:1a:ed:22:b5:50:69:62:
         a8:81:09:ee:4f:00:a2:44:da:0a:96:c2:07:91:f9:6c:9b:29:
         0c:ae:41:e4:c5:18:e1:01:9e:18:dc:e1:f9:e1:5a:9e:e6:46:
         30:64:23:86:2e:24:db:d0:b5:70:0f:44:4a:de:c4:12:eb:60:
         1b:07:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:44 2026 by rpki-client