Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
File:                     9aSNNBWgK5T1T-4rZZSPJetPfdo.mft (raw, json)
Hash identifier:          jTOCFqdLH9nVDOHshEbG8aKRp3dQljeliQ0/4J5Yvnk=
Subject key identifier:   77:F3:E8:D3:27:1E:8A:B1:56:CF:C8:0B:4A:A1:2F:04:7E:40:7B:67
Authority key identifier: F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
Certificate issuer:       /CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Certificate serial:       019F8F4784DF2303DF0ADA54FF480D487FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 14:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:56 +0000
Files and hashes:         1: 9aSNNBWgK5T1T-4rZZSPJetPfdo.crl (hash: mI890g6LEb8AxSIHRuuIKNZcpILSqP+nSbeut56lGLI=)
                          2: KB-nu_fDuo0XIMgqWugjNtPelKM.asa (hash: xVtyR3/ZytBeSN3L364bzhtV6xgki7m57Wrm3JRE2Fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:84:df:23:03:df:0a:da:54:ff:48:0d:48:7f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
        Validity
            Not Before: Jul 23 14:00:56 2026 GMT
            Not After : Jul 24 14:00:56 2026 GMT
        Subject: CN=77f3e8d3271e8ab156cfc80b4aa12f047e407b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:c6:57:26:3e:8a:37:50:0c:b5:4e:ed:2b:
                    2c:1b:57:f6:bd:a4:ce:05:6f:08:73:59:dd:8c:e8:
                    ad:b9:91:2d:4a:64:29:0c:25:47:09:88:de:8f:4c:
                    1c:7d:2a:a3:e6:2d:19:7b:ae:b5:ea:ea:38:03:d9:
                    0e:f2:fe:c2:99:32:1d:e2:44:4f:b5:86:16:c7:bb:
                    1d:62:d0:af:98:7a:84:d0:c1:a2:3d:27:bd:0f:5f:
                    f3:4c:c0:c8:18:f4:ff:11:af:b6:c4:1a:8f:b5:a7:
                    69:b0:5e:96:88:be:a0:f0:20:aa:50:7b:b3:ab:6e:
                    6c:e1:82:82:70:6c:ea:84:9f:1b:34:db:1e:27:ad:
                    86:30:5b:4a:5a:1f:d2:eb:d8:ae:24:46:cb:f6:1d:
                    d1:63:08:b1:2e:03:a8:f6:8c:6d:59:f4:0f:d1:f7:
                    79:4a:07:71:d4:e9:ab:05:99:79:42:fd:f2:cb:58:
                    41:d5:38:c2:ef:7f:64:65:d9:80:bc:9d:31:41:a4:
                    12:3c:fe:9e:38:09:9b:c5:f4:48:f4:0d:51:f8:11:
                    17:36:09:8b:75:a4:20:de:c9:e7:26:2c:8b:6c:06:
                    d5:0e:61:d0:df:cb:36:c1:b8:4e:db:57:43:31:ba:
                    9d:bf:c1:a0:cb:ff:1e:c2:12:a8:3c:ad:2e:6e:3d:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F3:E8:D3:27:1E:8A:B1:56:CF:C8:0B:4A:A1:2F:04:7E:40:7B:67
            X509v3 Authority Key Identifier:
                keyid:F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:a9:fe:7e:76:fa:6a:14:4b:0e:7c:f4:58:f9:24:5f:a3:
         92:c6:4d:7b:45:0d:46:58:64:fb:9b:4f:3c:1a:25:32:83:59:
         4c:e7:77:58:2a:eb:2f:c2:2f:c8:be:37:2a:36:db:f5:65:1d:
         26:a4:f7:3f:99:83:97:4f:87:96:e8:bd:b9:31:0f:4f:c0:6a:
         e9:f1:49:4f:84:9f:20:46:8f:dc:17:33:12:7d:54:65:32:5b:
         04:d7:57:be:b9:b9:63:76:cf:4f:ca:29:4b:2a:92:bd:88:32:
         9e:79:d2:1a:6d:54:2e:75:29:79:97:65:f7:0d:fb:96:29:fc:
         61:e9:dd:9e:f8:05:e9:eb:97:0d:59:9c:2c:f4:a5:c0:2a:ab:
         f3:f2:77:93:a7:94:e0:1a:89:19:f6:dc:18:2e:5d:de:dd:69:
         df:16:32:11:f8:86:76:3b:6a:0d:f8:4e:dd:31:05:f6:87:d5:
         f2:cf:fd:e8:c4:e0:30:0b:7d:a1:41:8d:7d:85:76:df:de:ec:
         fb:78:4e:89:31:e7:d9:9b:4c:b0:dc:17:3b:e6:93:4c:d4:bf:
         e7:1a:eb:32:70:83:dc:d7:c3:98:ec:ad:f8:de:1b:2f:b3:d3:
         4e:d4:ef:bf:0f:bf:6e:c5:a4:39:2e:2a:93:d2:9e:2b:c5:fe:
         90:c1:c1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:55 2026 by rpki-client