Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
File:                     9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json)
Hash identifier:          ci7neWiyap6P/SdvktcffvTaSFMlnG5oL4CrVobEAdA=
Subject key identifier:   DF:F4:1C:03:B6:A0:BD:63:66:A1:5E:B3:62:53:5B:85:36:65:9F:DC
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Certificate issuer:       /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial:       019F91A3A16620E86EF1CB54BE90E9B90BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 01:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:47 +0000
Files and hashes:         1: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: pfsXyDhweMdHBp+9+9XhMnHY+XMv31B/XLgdVhHBy5M=)
                          2: WR2mMv7qmUceN0Mkq4FVsAqss34.roa (hash: BI2UfIzSLpmq5ZqkIGDg6SgwwPzP/38b7CPwIY4B+T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:a1:66:20:e8:6e:f1:cb:54:be:90:e9:b9:0b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
        Validity
            Not Before: Jul 24 01:00:47 2026 GMT
            Not After : Jul 25 01:00:47 2026 GMT
        Subject: CN=dff41c03b6a0bd6366a15eb362535b8536659fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:a1:68:81:79:9d:09:7a:b3:e9:07:55:97:
                    68:9d:a4:5b:18:22:7a:c8:a4:40:c1:12:3b:d1:0c:
                    6d:ee:4c:9e:b6:fd:e6:80:3c:35:b0:9a:22:31:53:
                    51:1d:9f:88:1e:10:5a:3c:8a:01:aa:12:00:52:92:
                    99:55:4f:9c:b4:77:f5:b3:f2:1c:96:6f:87:d7:65:
                    90:1a:fc:20:9d:67:12:80:5d:22:dd:7a:6f:46:8a:
                    d1:f6:60:15:83:d1:b4:07:10:12:e3:f1:1a:86:4c:
                    03:3c:be:86:06:31:ef:7d:1d:0f:7e:e0:02:86:32:
                    d7:e8:16:9f:12:2b:84:1e:b6:0a:20:39:8f:55:7d:
                    bf:2f:ae:16:a2:01:12:85:c7:49:65:35:aa:e6:14:
                    e7:ca:f3:c8:80:37:66:cf:3c:78:e0:7c:4e:4b:33:
                    fb:f0:ca:7b:50:06:6b:ab:55:72:aa:e0:8c:a5:73:
                    48:d6:1e:06:b3:78:d7:a8:a4:76:7e:f1:ce:0d:e6:
                    1b:44:c6:24:99:32:f2:90:c9:5f:32:02:73:2b:54:
                    c9:c5:ef:0b:ee:0c:c4:df:1f:36:90:e4:64:12:41:
                    fc:97:e8:5f:f0:1e:a8:50:6b:5f:75:07:6f:03:aa:
                    7f:7a:d6:32:0e:7c:df:65:df:02:0f:d2:26:c5:59:
                    5b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F4:1C:03:B6:A0:BD:63:66:A1:5E:B3:62:53:5B:85:36:65:9F:DC
            X509v3 Authority Key Identifier:
                keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:8f:2c:15:d2:b3:ae:03:8c:26:4a:22:21:73:f8:42:3a:
         37:7d:56:0c:04:64:46:26:cd:e6:82:c2:ca:3d:07:26:05:1a:
         d6:59:12:4d:a5:98:44:17:b5:d5:85:a1:f9:cd:02:ff:1b:17:
         e7:3b:fd:f3:d3:70:1d:7c:bf:3d:a5:78:39:f7:b2:27:78:21:
         02:38:d7:be:2a:36:97:de:0a:4d:59:c5:75:f3:7b:5d:04:8d:
         4c:0d:6f:48:c5:4c:bc:d5:8d:15:13:60:3f:bd:da:33:43:d1:
         42:33:f7:fb:89:b9:3a:e1:84:15:67:a4:9e:d1:8d:ca:89:18:
         70:3e:41:a1:f1:d4:a1:67:9b:eb:a3:e3:f9:6e:c2:e8:08:c3:
         0f:5d:d7:a9:36:ee:96:ce:c3:eb:bd:52:38:f2:e2:0c:44:ee:
         e9:75:c7:39:52:7b:a1:e0:f5:36:60:e3:3e:b0:0e:c8:56:4e:
         c6:dc:69:12:85:f0:33:f2:f4:0e:24:2d:50:76:ee:e8:4a:7a:
         32:cc:7f:0d:c9:8f:a2:89:e0:b7:8f:c2:1a:51:9e:3c:08:34:
         e2:18:e1:cc:b1:50:d0:a4:6d:51:20:2a:ba:cc:47:2e:8b:20:
         f5:cf:c2:35:bd:b2:35:5a:56:ee:51:de:86:0f:9e:ef:5c:8d:
         be:1d:43:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:43 2026 by rpki-client