Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File:                     h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier:          7zrFB5RjwkSoAY88cJ/wXRnvFYNgmMnyOdXx4VOVOIc=
Subject key identifier:   44:0C:8D:21:34:22:4F:95:5A:B5:EF:4B:88:4C:7E:14:EE:42:33:EE
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer:       /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial:       019F916CEBD5E93C4C7DFDDF61DE809EAC74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number:          19DA
Signing time:             Fri 24 Jul 2026 00:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:02 +0000
Files and hashes:         1: 4L2HrkOMp5Px3ZdgqOBGMnz6oXw.roa (hash: qjbkKzm11wnXRFJIt4quryujdmBS5m5m8Id3/w9vHFw=)
                          2: 78tSQmB_UZC_rIGDHLnxnqOm3fI.roa (hash: 3kNkwMTWy/XYCkJODFF1IVosQpGtDfhW2/dwVf0UwBQ=)
                          3: C3Lj3Wt6YNWIPGHmadEQ-dchhaw.roa (hash: fn0aOrz4mN4OtO/EtlMrSuF4wh5zaQaJSbD2ep7jxzI=)
                          4: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (hash: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg=)
                          5: PY323kbvCRFsNrwGFI26gXv0gpE.roa (hash: U0ksXLpw7uH4vwqe/cNwV58+FVim6JoHjXiFGt1giNE=)
                          6: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: 5Wgd2SydSp5GU2rmHko059viKi0E036lk+88LWzyeZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:eb:d5:e9:3c:4c:7d:fd:df:61:de:80:9e:ac:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
        Validity
            Not Before: Jul 24 00:01:02 2026 GMT
            Not After : Jul 25 00:01:02 2026 GMT
        Subject: CN=440c8d2134224f955ab5ef4b884c7e14ee4233ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:00:16:e2:da:dc:6c:64:c3:ee:cf:e2:ea:cb:
                    36:dd:b9:61:2a:03:dc:66:09:1a:3d:0d:05:0f:1e:
                    41:3c:d6:a2:a8:4b:3d:46:f1:23:af:ea:22:da:fa:
                    82:8e:fd:aa:35:e7:2c:f2:d2:75:1f:0f:a7:a8:8f:
                    8d:38:d2:19:af:cc:92:62:5c:90:0f:44:a7:59:9c:
                    82:75:20:61:50:f8:b5:45:22:e6:d8:b0:80:56:22:
                    75:37:07:99:33:c4:bd:00:52:46:77:f1:cd:ca:37:
                    0e:9b:5e:2b:1b:11:72:76:9a:2c:20:bf:e1:c3:89:
                    5a:34:7d:4d:fa:70:64:80:8f:01:33:3d:57:b7:e9:
                    ca:42:61:9e:12:c2:09:1e:e7:52:e8:90:ac:48:f4:
                    3b:1c:92:ef:13:21:6e:db:bc:ab:12:62:6e:14:f4:
                    bd:df:82:3d:36:dc:c7:e0:a9:7f:b4:44:85:85:8c:
                    a8:af:fd:a3:98:36:70:fa:a3:d9:32:79:c9:71:a9:
                    7c:32:e4:29:1c:5a:e6:43:58:26:f5:84:c2:68:0c:
                    5c:6e:eb:7b:ff:09:dc:78:ba:09:de:75:ef:9a:42:
                    19:7f:ff:06:b9:fe:fe:69:c7:fb:bc:18:4d:65:9b:
                    39:c1:f5:91:06:cf:e2:8e:e5:8d:41:d8:cc:36:c5:
                    98:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0C:8D:21:34:22:4F:95:5A:B5:EF:4B:88:4C:7E:14:EE:42:33:EE
            X509v3 Authority Key Identifier:
                keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fd:91:b3:ff:6a:26:5c:e8:10:15:d2:d7:75:7d:ed:a8:d8:
         5d:d0:ae:8c:06:67:63:bd:27:72:0a:7f:1d:2a:49:41:c1:6f:
         e8:e7:17:9e:31:06:c7:77:91:ee:7b:50:2b:39:ed:b7:61:7b:
         12:97:21:e1:40:1b:7d:59:c4:52:6b:df:0b:06:52:00:4e:11:
         46:bb:dc:0f:49:08:32:ba:70:31:2e:e5:4f:fa:77:b1:dd:ca:
         7c:06:9a:d1:68:0d:d4:cb:09:4a:2c:45:43:d4:3a:d1:cc:67:
         35:0c:b5:af:8e:f7:4d:5a:86:05:b4:3f:e1:a8:7a:62:25:cb:
         2f:57:41:76:60:13:3d:26:f9:42:18:9c:e6:4b:e8:5d:dc:d4:
         dc:f4:95:64:b7:62:18:eb:fb:ad:6b:12:1b:aa:40:97:72:ae:
         0f:6f:0f:5f:00:af:f0:68:5c:d2:c4:0f:78:5f:36:6f:c6:2c:
         5d:02:f9:64:4a:bb:83:1d:73:3e:78:d6:8d:f6:93:08:c3:4e:
         29:50:70:50:87:e9:f7:64:97:60:5c:6c:bc:6f:96:0c:dd:7b:
         f0:ae:4c:df:3c:d7:83:36:3f:03:74:ce:76:0e:75:7b:de:fe:
         ad:fe:d7:e1:58:e5:9f:87:74:84:cb:b7:3a:d3:f9:cb:ed:11:
         5c:25:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:17 2026 by rpki-client