Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File:                     9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier:          ZKzY1Y4cl159m9vllGnt1Ucy4DXQ+AlNpHpopwkSD3k=
Subject key identifier:   10:30:82:E3:52:25:AF:9A:7F:B9:45:ED:7A:F5:9F:A4:B0:59:DC:89
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer:       /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial:       019F902317FC1127210BA87E4BC920B1B3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number:          099A
Signing time:             Thu 23 Jul 2026 18:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:46 +0000
Files and hashes:         1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: 0fDeiMundsHV82reb1PU3sW7sRDWvwJwxmyZC5wani8=)
                          2: U0VlaKKNtdOTOqK2MVcrObf1kHo.roa (hash: aj9GxjWDAWuJEL63II9rLgS5knljvCRB2AV58y//rLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:17:fc:11:27:21:0b:a8:7e:4b:c9:20:b1:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
        Validity
            Not Before: Jul 23 18:00:46 2026 GMT
            Not After : Jul 24 18:00:46 2026 GMT
        Subject: CN=103082e35225af9a7fb945ed7af59fa4b059dc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:19:da:93:c0:7a:12:26:34:9f:01:3e:d5:
                    9d:1e:12:d5:eb:58:9f:e4:1f:01:c6:27:b0:67:8e:
                    ab:de:f5:84:16:19:a5:d8:2a:f1:2a:35:1c:1e:2f:
                    b6:0b:3e:57:17:62:d9:e2:44:e9:25:3e:90:d4:03:
                    4d:bc:82:8d:cb:62:53:01:d0:fc:71:15:0c:7e:07:
                    36:1d:d3:4c:e3:a0:30:ef:5d:1b:c8:54:2c:6a:7d:
                    2c:bb:53:49:7c:5b:80:7c:73:ef:6d:e3:a8:71:a8:
                    ff:e0:78:42:93:36:ae:b9:23:e9:18:e4:0f:1e:75:
                    61:62:cd:20:eb:f9:2c:37:74:c2:30:5c:8f:14:e0:
                    a1:a6:f1:91:46:2d:e5:85:be:e1:b2:fb:92:01:1f:
                    69:47:ef:12:10:bb:ac:77:22:9d:18:34:4e:95:2f:
                    80:c3:4d:73:8c:3d:11:4f:43:50:d0:43:ea:c9:46:
                    5e:72:af:6f:2e:de:0e:a0:4b:e7:cc:79:dc:0c:19:
                    72:f5:ee:ff:d6:55:82:d4:f1:04:50:d7:28:df:23:
                    6c:f1:b3:04:c6:1d:18:d4:69:e6:c3:db:6e:48:d3:
                    32:ed:6f:e9:18:d7:4c:e1:71:41:b2:e7:91:00:12:
                    14:ae:d4:cf:7a:50:e0:b4:fe:58:5c:8e:7c:a4:6d:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:30:82:E3:52:25:AF:9A:7F:B9:45:ED:7A:F5:9F:A4:B0:59:DC:89
            X509v3 Authority Key Identifier:
                keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:2b:5f:d5:23:7e:78:ea:db:22:7b:1e:ee:d7:94:78:a4:82:
         07:94:9b:5b:1c:35:03:55:1f:13:4a:94:bc:3e:a7:92:c5:8c:
         80:54:08:15:7d:f5:2c:7c:f2:33:52:c1:e8:9a:79:de:5d:fa:
         3f:c0:ac:54:fb:ed:34:41:1d:44:66:68:e3:df:19:c2:78:b5:
         c8:ff:e5:e8:8b:f7:05:00:42:9d:81:f5:dc:ba:7f:51:29:3a:
         df:83:5f:0c:03:38:cb:30:27:a0:9f:fb:25:ec:16:2e:36:26:
         19:34:56:f9:bd:65:4f:cc:aa:f5:0c:0a:4c:33:1c:88:94:76:
         6f:36:93:ff:09:fe:f8:f3:a2:ff:cc:ce:59:36:84:d5:69:b6:
         60:00:e8:76:0c:61:0c:1e:67:9d:4b:f8:91:ae:b0:57:73:c8:
         49:6d:b5:64:b5:e3:aa:e0:6b:2d:c2:a3:9f:30:14:9f:36:fd:
         7f:0b:55:16:d5:28:4d:70:b9:62:b8:bb:cf:d1:4f:75:66:43:
         11:95:ff:59:9f:5a:08:54:f8:ec:8a:b9:de:d0:92:6a:4c:a4:
         aa:fb:3d:c1:05:c2:a1:39:fc:12:15:5a:e2:f7:ba:b4:d2:19:
         fe:5c:17:17:9e:33:ba:56:4f:cf:56:72:42:ff:ce:d4:bd:0c:
         4c:b3:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:17 2026 by rpki-client