Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File:                     9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier:          0CgLyHa+kTzQT4jwZIXM45nFrvrmj4xpAiOpCfu/Dfo=
Subject key identifier:   9D:78:76:AD:AA:65:E4:4E:43:61:46:78:47:73:8B:07:64:77:05:A4
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer:       /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial:       019F8FEC17B689D1D5A2AB79DC65C04B83C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number:          06DF
Signing time:             Thu 23 Jul 2026 17:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:42 +0000
Files and hashes:         1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: yE8H4nzaGGX6P1+C6PBOf2zDQBTtQK/LMvoZvKUnNV8=)
                          2: Fnxy3WJWYvuek9Fr0KYOmQUUsw4.roa (hash: Ch+0FQEjljg05e4GEw4ZsydId/PhinfJoSdNkBFbTQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:17:b6:89:d1:d5:a2:ab:79:dc:65:c0:4b:83:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
        Validity
            Not Before: Jul 23 17:00:42 2026 GMT
            Not After : Jul 24 17:00:42 2026 GMT
        Subject: CN=9d7876adaa65e44e4361467847738b07647705a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:44:06:f6:1f:80:6f:f2:81:60:cf:cf:5f:
                    18:ac:9b:e5:4e:80:34:f8:a5:ad:50:01:ed:6f:ac:
                    60:ea:5f:44:2b:ca:49:f3:2c:d0:9f:0b:e2:72:28:
                    56:0e:21:ea:12:cf:39:c6:cb:fa:02:3f:a3:b9:66:
                    7c:a7:35:53:0f:f4:17:4a:4c:31:55:b9:f6:93:b2:
                    36:14:25:b3:d4:e5:6a:59:a1:2e:aa:07:3b:a2:94:
                    c5:6a:d3:3e:31:88:44:44:ce:93:9e:96:b9:ba:4d:
                    5d:55:76:b9:06:b4:c7:57:9b:77:6f:4b:21:ab:94:
                    f4:ed:eb:e1:b6:3d:b8:5a:42:74:53:43:25:57:69:
                    43:1b:14:b4:9e:72:4e:f1:e6:26:5c:b5:02:a5:1a:
                    08:fe:92:3b:8b:bb:ae:ea:da:bf:ae:41:42:1f:89:
                    87:5c:2b:1a:ef:85:03:ab:c8:cc:c7:80:82:b7:43:
                    e4:7a:a1:df:95:0d:c7:57:31:73:60:86:8b:c6:92:
                    ad:73:c9:fd:c4:f5:13:29:af:bc:0f:26:cb:18:cf:
                    2b:67:84:52:07:b6:95:ee:4f:01:fe:50:3f:45:89:
                    9c:bf:12:1e:ea:21:28:51:e4:19:e6:62:7e:84:5a:
                    de:37:76:fe:01:4a:b6:0b:72:76:1f:a0:01:b2:ef:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:78:76:AD:AA:65:E4:4E:43:61:46:78:47:73:8B:07:64:77:05:A4
            X509v3 Authority Key Identifier:
                keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:4d:1c:a3:25:2c:c7:1c:a5:c1:48:09:a7:78:8d:b3:1a:
         be:68:39:6e:c8:33:9a:58:7e:f0:44:aa:d5:b5:69:22:cd:03:
         e1:bb:d7:ba:66:54:8b:a1:d3:9f:bf:8d:25:cb:f3:08:f6:d4:
         57:7b:fa:c9:4f:90:ed:d8:23:ff:1c:a8:32:da:02:bd:ff:c6:
         ff:e9:f3:5e:6c:c9:b5:27:2c:ae:f8:5e:c4:13:9b:b2:b0:2e:
         76:9f:7d:47:af:51:6c:e1:45:77:b7:da:1a:f3:5a:ad:8e:19:
         63:e7:85:f8:d5:bd:d5:ec:85:57:c9:fc:66:32:a9:0b:25:21:
         2b:24:2d:85:29:9a:6d:2d:94:65:55:e5:7f:21:fb:24:49:f4:
         8d:55:bd:fd:1e:2b:53:c2:4b:5f:74:df:e9:c2:1d:78:a7:ed:
         3c:07:c2:0a:f4:0b:41:9c:55:11:53:b6:6d:27:84:22:2f:ae:
         ea:e6:09:b8:a2:00:00:14:6b:16:24:3a:67:81:70:70:62:f4:
         51:89:25:bc:d1:fc:db:a3:29:b2:68:f1:2b:96:f5:2c:21:1e:
         fd:b6:a3:39:c4:ca:49:29:46:25:77:67:62:90:70:5f:16:79:
         74:d8:da:ce:fa:fc:f4:6a:94:e7:1b:43:28:eb:f9:98:b1:40:
         63:7d:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:46 2026 by rpki-client