Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          OhhF9185SDVdq3swYASV/tT0fTL2e1J/k67jTIcyH7c=
Subject key identifier:   13:6B:7B:B9:83:AF:97:3E:0A:52:00:9C:0C:24:DF:00:FE:DB:B6:CF
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       019F909163BC8F7D5D261A12434A21408433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          062D
Signing time:             Thu 23 Jul 2026 20:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:15 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:15 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: /dVvQ77qYkIJNBjEIlpQRUuuabHLZtwe378yF3RRpM0=)
                          2: Q1BIazUMtU491Kfp1prxFz4oeuU.roa (hash: sJo8b2jgePbm04v5Oh4sG6+LqF87DEVfl2ISH3CHQlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:63:bc:8f:7d:5d:26:1a:12:43:4a:21:40:84:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: Jul 23 20:01:15 2026 GMT
            Not After : Jul 24 20:01:15 2026 GMT
        Subject: CN=136b7bb983af973e0a52009c0c24df00fedbb6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:03:b5:9e:93:72:13:0e:bd:73:38:1b:06:
                    ad:d2:ec:46:77:b9:6a:0e:72:09:91:72:6f:d6:41:
                    7a:5c:1e:cf:4d:9b:6d:d3:95:b7:d1:64:68:b1:59:
                    81:0c:08:ad:89:e1:8e:d4:0e:99:5d:de:0e:5e:a7:
                    0a:fe:03:5b:62:5d:ac:1a:82:a5:a4:8c:62:19:4a:
                    eb:e1:c3:91:83:1f:84:45:8c:b2:6d:70:a0:08:0d:
                    a3:72:34:0d:0a:01:64:9f:03:64:f1:69:fd:53:47:
                    0a:b1:03:75:e9:86:65:0c:ed:23:05:03:02:4f:b0:
                    c6:7f:ee:c7:f5:ae:b2:e6:df:d3:3c:df:c9:56:f9:
                    6f:56:36:b1:21:b0:d5:a5:0a:7b:26:52:9e:ce:b8:
                    c9:47:91:93:14:7f:d8:04:dd:b5:fe:14:53:9f:b8:
                    77:6e:d0:7b:ff:bc:45:da:d9:9b:bc:d8:d0:cc:ab:
                    dd:f7:bd:c2:67:1c:4d:c3:d8:46:53:63:a5:ec:0f:
                    b8:a1:e5:2f:ed:3e:c9:2e:6a:9c:6b:5a:b8:dd:fd:
                    b5:08:7f:72:52:41:66:a1:48:47:ec:f8:8b:71:05:
                    4c:c5:e3:a8:ad:9b:1a:fd:f4:de:34:90:d3:ad:26:
                    3c:60:dd:e2:49:20:f0:d4:8f:49:94:6c:fc:0e:05:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6B:7B:B9:83:AF:97:3E:0A:52:00:9C:0C:24:DF:00:FE:DB:B6:CF
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b7:6f:87:5a:b6:f4:f8:7e:5a:f8:70:8d:01:12:0c:c2:a8:
         88:ae:bd:02:04:08:e0:b2:b1:46:39:ce:57:7a:aa:6b:ef:de:
         e1:ab:5a:f8:b3:e4:ea:8a:50:e4:ed:f9:94:18:fa:71:52:bd:
         f5:ed:68:fb:ce:22:0b:0b:c0:e2:70:b0:13:58:d4:2f:6d:2e:
         ff:d4:ae:f8:2e:ca:ac:97:fd:7a:3f:ea:ab:e1:f3:f8:0b:bf:
         fa:5a:11:96:16:4b:06:24:ea:d8:da:04:f2:95:c9:d2:80:b1:
         49:43:c7:b7:02:91:50:1a:fd:31:d3:1b:62:56:6e:5f:69:5f:
         8b:bd:cb:34:b1:ba:a5:af:42:0c:72:0f:cd:6a:fe:cb:f4:0e:
         ef:12:85:78:d4:fd:f0:a3:2c:5b:aa:19:ab:bb:43:1c:54:a2:
         f6:8c:0a:b2:95:5b:d5:e9:fa:5e:db:00:43:1a:bc:98:e7:7e:
         67:da:df:d3:a1:cd:9a:9f:a8:f6:19:54:f2:2f:f9:cf:40:c9:
         0f:0d:03:7e:76:79:37:72:91:d4:52:3c:7b:2f:ce:1f:37:99:
         ed:5e:77:36:b4:4c:5b:ee:34:36:bc:01:3c:e3:43:36:a6:a2:
         46:c0:27:16:64:e0:38:fa:72:a6:0a:14:7f:95:fe:8a:20:43:
         1d:d8:0e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkWO8j31dJhoSQ0ohQIQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjQ5YmZiMmEwYjgyNDQ2MDYwYzdmYzkwNzgxMGU1MTg3
MDU5MzYwHhcNMjYwNzIzMjAwMTE1WhcNMjYwNzI0MjAwMTE1WjAzMTEwLwYDVQQD
EygxMzZiN2JiOTgzYWY5NzNlMGE1MjAwOWMwYzI0ZGYwMGZlZGJiNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziQDtZ6TchMOvXM4Gwat0uxGd7lq
DnIJkXJv1kF6XB7PTZtt05W30WRosVmBDAitieGO1A6ZXd4OXqcK/gNbYl2sGoKl
pIxiGUrr4cORgx+ERYyybXCgCA2jcjQNCgFknwNk8Wn9U0cKsQN16YZlDO0jBQMC
T7DGf+7H9a6y5t/TPN/JVvlvVjaxIbDVpQp7JlKezrjJR5GTFH/YBN21/hRTn7h3
btB7/7xF2tmbvNjQzKvd973CZxxNw9hGU2Ol7A+4oeUv7T7JLmqca1q43f21CH9y
UkFmoUhH7PiLcQVMxeOorZsa/fTeNJDTrSY8YN3iSSDw1I9JlGz8DgUOHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNre7mDr5c+ClIAnAwk3wD+27bPMB8GA1UdIwQY
MBaAFPb0m/sqC4JEYGDH/JB4EOUYcFk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTIt
MzNhNTZmNDU5YmMwLzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTItMzNhNTZmNDU5YmMw
LzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErdvh1q2
9Ph+WvhwjQESDMKoiK69AgQI4LKxRjnOV3qqa+/e4ata+LPk6opQ5O35lBj6cVK9
9e1o+84iCwvA4nCwE1jUL20u/9Su+C7KrJf9ej/qq+Hz+Au/+loRlhZLBiTq2NoE
8pXJ0oCxSUPHtwKRUBr9MdMbYlZuX2lfi73LNLG6pa9CDHIPzWr+y/QO7xKFeNT9
8KMsW6oZq7tDHFSi9owKspVb1en6XtsAQxq8mOd+Z9rf06HNmp+o9hlU8i/5z0DJ
Dw0DfnZ5N3KR1FI8ey/OHzeZ7V53NrRMW+40NrwBPONDNqaiRsAnFmTgOPpypgoU
f5X+iiBDHdgOVw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:03 2026 by rpki-client