Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File:                     m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier:          9p4pNB2VWsnJufID9GtbFAkZkwE+gJuup7M8mlNGgd8=
Subject key identifier:   B0:B0:7F:D2:0A:7E:7A:B1:00:C0:12:6D:CB:4F:E4:37:E6:C8:19:81
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer:       /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial:       019F93C8FAF37BFD8DBD7D5DBEBD31C9F6F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 11:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:49 +0000
Files and hashes:         1: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: Zvir9FUvwjaPI/Q8nogVSd2yNCJSqavm+xMRexX6pR0=)
                          2: oNy7iyROhmf7k1QXS1fyOykVhms.roa (hash: 7ICki/NejOefHux3d5CNCzujTTJwY1H52uKM23OBmV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:fa:f3:7b:fd:8d:bd:7d:5d:be:bd:31:c9:f6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
        Validity
            Not Before: Jul 24 11:00:49 2026 GMT
            Not After : Jul 25 11:00:49 2026 GMT
        Subject: CN=b0b07fd20a7e7ab100c0126dcb4fe437e6c81981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:6b:9b:b1:00:4a:ec:50:d4:ff:0e:a4:03:
                    17:91:7a:43:94:43:80:ee:54:63:e9:c1:41:a0:75:
                    fc:f9:28:79:63:24:cb:66:0e:53:60:94:39:77:86:
                    e2:90:96:34:3d:12:17:dc:d0:69:15:5f:02:f1:9b:
                    90:e6:b1:1c:46:ab:b4:20:89:cc:4b:84:86:3a:7f:
                    87:16:be:09:5c:88:37:11:ca:50:95:e2:d0:40:dd:
                    5f:c9:24:25:a8:d2:32:0d:fe:0d:af:9e:16:87:3a:
                    d5:a8:dc:de:95:95:43:03:08:f9:8a:7b:c4:fd:d8:
                    60:6e:a3:3d:b5:60:ff:33:f4:39:74:1e:93:e0:9e:
                    4e:3d:c0:b4:0a:b8:25:47:7f:8a:21:03:db:0b:e8:
                    4d:60:2b:08:e9:a5:dd:e5:80:d7:49:1a:77:1b:96:
                    ce:01:1b:b9:ba:02:8d:53:56:bb:1e:d6:62:8f:c7:
                    9a:c0:0d:60:64:66:08:de:c2:0f:fc:ea:6f:c6:09:
                    94:52:e0:03:68:07:d9:3f:e1:26:0a:49:da:1d:cf:
                    36:a9:20:83:84:e6:e1:04:d4:24:5a:e0:9e:88:59:
                    e3:4e:13:42:0e:3a:7f:29:61:72:a4:c3:36:84:d8:
                    56:9d:ac:fb:41:00:e7:29:e8:74:f4:dc:be:ec:37:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B0:7F:D2:0A:7E:7A:B1:00:C0:12:6D:CB:4F:E4:37:E6:C8:19:81
            X509v3 Authority Key Identifier:
                keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1a:97:55:f3:68:7e:33:b4:dc:9e:e5:55:b9:ce:7e:83:c7:
         e1:b1:c7:3d:80:fc:16:dd:ae:00:b6:7c:e3:d2:ff:71:06:65:
         b5:f2:79:83:0a:61:bb:38:08:00:44:a8:70:ec:b8:1a:63:54:
         28:10:03:40:c1:b8:38:6e:6f:70:3b:0d:73:15:69:d1:cd:c5:
         0f:6e:40:bf:06:09:c2:75:d1:22:71:39:4b:8b:5d:4d:d8:f6:
         34:75:61:d8:f8:13:82:75:49:18:fe:fd:6e:c2:81:0f:10:20:
         8d:61:df:dd:37:be:e7:b4:dc:0b:fe:74:a5:85:76:33:28:92:
         06:6a:e9:03:dd:d2:39:4e:e9:30:00:11:a0:1f:33:72:d0:5d:
         04:a8:34:cb:d7:6c:c6:79:d0:17:f3:26:96:11:ee:5e:12:b2:
         c2:d6:4f:48:50:ba:5a:77:f1:a0:82:e7:62:e0:63:7f:f5:85:
         f7:e0:b0:84:3a:48:76:83:b8:29:57:8c:8b:65:2a:37:0b:78:
         66:2a:af:2c:da:89:0c:a6:3f:7f:1a:3d:30:68:d5:38:47:cd:
         75:e8:94:34:9e:90:cd:53:bc:96:18:96:76:ee:75:71:07:12:
         51:3d:24:44:2a:25:37:1d:17:cd:6f:39:35:4a:7c:81:2a:f4:
         34:ec:3f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:32 2026 by rpki-client