Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File:                     9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier:          vAn+WWPFXSYx6vneGWdfDe9MaItVkdWg1qWk+BhvUqI=
Subject key identifier:   9A:DC:96:58:62:29:8E:EC:DE:CE:68:47:89:3D:E7:7D:15:9F:3C:8E
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer:       /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial:       019F91A3756DC78DCF7505A9EFF9509E4951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number:          149E
Signing time:             Fri 24 Jul 2026 01:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:36 +0000
Files and hashes:         1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: +dPEaNmvMR5CtnNWGUIPqKE8wa5CXCpTT4BaMna0MxI=)
                          2: ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (hash: /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:75:6d:c7:8d:cf:75:05:a9:ef:f9:50:9e:49:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
        Validity
            Not Before: Jul 24 01:00:36 2026 GMT
            Not After : Jul 25 01:00:36 2026 GMT
        Subject: CN=9adc965862298eecdece6847893de77d159f3c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:83:7e:3f:bc:50:54:71:66:dd:e5:83:b2:
                    1d:b9:7b:0a:e2:79:5a:49:2d:95:28:55:33:3c:94:
                    7e:a3:2d:0f:39:ee:41:69:84:3c:97:ac:5c:b8:8d:
                    bd:fd:da:83:df:2f:27:bb:d0:87:99:fe:ad:08:d3:
                    8d:36:1d:bb:ef:65:3d:ef:1f:45:56:c6:b3:cd:c6:
                    40:df:69:8b:d6:34:ed:e7:bc:9b:22:eb:a6:89:2c:
                    25:6e:8a:68:f9:49:11:c9:a4:96:e1:58:5f:0e:05:
                    a9:60:8f:c6:2e:52:45:03:9f:89:8b:ee:b6:cf:df:
                    56:b8:68:79:e2:8c:e1:8a:87:de:27:de:cf:3e:73:
                    b0:c7:27:5c:dc:73:b0:d3:05:14:a7:08:36:0b:71:
                    8d:06:23:bc:28:33:fc:5a:e8:d8:59:dd:45:93:8d:
                    c1:21:a3:7c:3b:08:6f:c7:82:f4:c2:c9:58:44:5b:
                    fe:bf:dc:8d:3a:0e:1f:7d:f4:22:3f:16:96:ac:5e:
                    13:90:3d:f0:bb:6d:58:ea:49:f0:79:c2:66:bf:e3:
                    ef:e5:c3:fb:57:53:49:a7:6e:74:90:1e:9a:40:5c:
                    9b:9c:3d:9f:06:84:74:f1:57:c3:0e:1a:a9:f9:63:
                    79:21:47:a9:6e:e6:51:55:94:d5:c6:1d:e1:1c:dd:
                    b9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DC:96:58:62:29:8E:EC:DE:CE:68:47:89:3D:E7:7D:15:9F:3C:8E
            X509v3 Authority Key Identifier:
                keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5d:3f:5c:cc:ac:44:73:1d:fa:11:9b:67:63:c3:94:cd:0b:
         e6:16:60:c2:01:76:05:67:b7:49:e7:5d:6e:60:bb:13:32:2f:
         bc:db:00:be:24:ed:57:cc:c5:1d:dc:94:98:64:25:a0:56:6e:
         6b:00:ab:41:a0:31:e5:05:a6:68:10:12:d1:b1:c1:d5:d3:1e:
         1e:d1:93:e4:08:10:0d:da:10:8b:23:79:cc:fe:a7:db:9f:b2:
         73:fb:7a:af:57:69:59:4d:4e:fc:1b:aa:38:9b:28:4f:2d:e2:
         37:0f:78:01:a7:6d:ea:6f:c8:b7:ed:b7:a7:60:c1:53:4d:34:
         8e:ed:41:73:30:90:7c:31:b1:57:df:df:d3:f6:f2:0b:2e:0b:
         03:2b:1a:1c:7f:be:1f:55:17:54:80:55:dd:db:20:bd:7a:46:
         e9:ba:4c:8c:f5:8d:32:fe:87:f4:66:11:b7:c0:fc:71:bb:c1:
         cc:c2:72:ac:c6:04:c2:48:b9:c2:30:7b:3a:95:68:87:9c:a3:
         f8:c6:74:4e:a2:c8:8d:95:43:fa:d3:12:1b:47:6a:75:c1:ab:
         c2:36:e0:07:42:34:fa:b0:18:70:e8:43:3c:5f:b9:0c:66:10:
         05:ec:d0:76:f0:3b:e6:9b:7a:86:a5:05:53:04:2e:bd:f6:c4:
         dc:08:1c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:06 2026 by rpki-client