Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          Iz719uCo+AJBuh1pAq6ylb4Yi3eA0XXLrpM0CMBlkto=
Subject key identifier:   D1:E3:DC:98:12:20:B4:92:D3:6D:7D:4E:57:95:00:94:51:A9:A1:B7
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       019F90C817A332861CC30FF30DDC686B692D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          151B
Signing time:             Thu 23 Jul 2026 21:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:59 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: xDQTyJPuna5wnpgEzqO2+ZrDrWokSef/9W4fL3hGXrk=)
                          2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:17:a3:32:86:1c:c3:0f:f3:0d:dc:68:6b:69:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: Jul 23 21:00:59 2026 GMT
            Not After : Jul 24 21:00:59 2026 GMT
        Subject: CN=d1e3dc981220b492d36d7d4e5795009451a9a1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:2d:a7:b9:1b:63:04:dc:ee:e8:05:c7:b9:
                    db:f9:60:df:d9:b8:44:6c:1e:aa:7d:62:6d:b1:04:
                    08:62:c2:54:98:55:b5:86:ad:e5:b6:f3:aa:ae:3b:
                    bf:da:27:25:d6:3e:68:9f:05:b7:86:e0:c3:19:d5:
                    42:e6:cf:96:b5:88:b6:09:a1:5d:10:c4:d9:3b:a6:
                    1b:10:61:67:7a:25:a0:da:2f:c6:91:f1:b0:9c:c3:
                    16:d0:cc:39:93:a5:22:07:06:f1:c1:88:3c:ee:7a:
                    c9:a9:d8:1c:3a:5b:d3:33:82:97:29:f9:a8:8f:ba:
                    10:94:ce:c7:e3:1a:0d:cf:a9:9e:02:1d:d1:d7:e3:
                    b0:1f:e7:f9:68:21:25:30:e6:90:9e:cf:43:71:d2:
                    e1:d1:77:ae:97:0d:43:86:9b:09:ce:a4:56:02:30:
                    c0:fb:80:cc:55:2a:73:65:3d:b9:06:86:0c:fb:df:
                    7e:40:9a:07:b2:bb:98:46:04:5b:4a:87:35:e2:76:
                    cc:5d:93:78:c2:b1:41:85:48:2a:0f:d7:d5:8e:72:
                    dd:d5:5f:55:50:58:25:49:4d:13:19:6b:5e:49:9c:
                    b2:21:62:f7:68:39:52:36:10:d3:19:94:40:a7:47:
                    cd:4b:5f:51:d4:27:70:cf:ce:b1:a9:e0:c0:75:00:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E3:DC:98:12:20:B4:92:D3:6D:7D:4E:57:95:00:94:51:A9:A1:B7
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:f7:92:92:d7:0b:33:e6:3a:6a:be:e3:19:a6:2f:b1:97:
         ba:b8:77:2c:39:80:5d:4c:d8:c3:cc:d3:92:d0:ec:4e:74:58:
         50:14:e1:54:ff:bf:5a:77:3f:7d:15:e7:10:5d:50:62:69:0d:
         d7:43:67:39:04:85:59:12:9b:a7:77:74:d9:74:94:c0:ad:fc:
         21:f3:c5:a2:a0:e7:c0:97:d2:d6:75:52:80:04:ee:e4:cd:b4:
         6c:8f:1c:29:1e:63:d9:b8:2a:dd:4f:24:3b:4c:d1:79:a6:7b:
         5e:1b:b7:c3:3a:bb:24:ad:fd:7f:68:00:b9:1a:8b:9b:83:9e:
         48:d6:f5:d6:f6:14:8c:9c:b3:d2:7a:ba:84:4d:ec:80:9d:b8:
         7c:50:84:4b:0b:1e:c9:a4:70:b6:7b:78:4a:aa:e3:eb:f3:97:
         55:04:c8:0c:53:61:1b:58:96:71:0d:5c:dc:25:74:f3:f6:d5:
         ca:fc:58:f5:98:dc:ff:36:11:c6:39:e2:0a:96:73:74:44:f3:
         67:f3:76:df:00:19:f0:a7:2b:f0:4d:e3:20:dc:9a:99:01:71:
         49:e1:7d:68:c7:21:05:5e:b6:5b:c6:f2:be:6c:9a:88:d7:aa:
         63:58:c9:97:ee:8c:b7:97:8a:ab:db:09:cf:7a:7c:13:9c:4c:
         51:db:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:12:37 2026 by rpki-client