Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
File:                     T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json)
Hash identifier:          Zl1DqenkC7WYV68voaQN+eor4QBjgjd8eZvzjvqkgQY=
Subject key identifier:   34:36:C2:91:70:29:71:53:0D:80:8C:B7:78:E7:A9:30:30:B5:1C:A6
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Certificate issuer:       /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial:       019F91DB103923D708FFEABD359776BB7167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
Manifest number:          01EC
Signing time:             Fri 24 Jul 2026 02:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:20 +0000
Files and hashes:         1: BOT5KFIXJpkIbzlxtuVva-pqcW8.roa (hash: V0+HzlrzgNuQq4OTP8iqfYcbyGXd1T0uSkmpDamsFm0=)
                          2: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=)
                          3: IXv7GLa92HnV3l1DApAceTiWeyw.roa (hash: wbQSrQRDyv+cAs4TzHktwX1YmUunTHit+MVHYBjMrCw=)
                          4: JIP6keB7F7Gm2ZlkQopa4DPs_us.roa (hash: jFlq3BusUmP4qYxCaXEGJylNWdexiUDC80OW6u36VHU=)
                          5: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: Lg+Pamrfmrq1miG3Xll3pHxKaAqlHsXhdes+eMWomZI=)
                          6: TbZ4UxM472uZwvxUqFwV48R32GU.roa (hash: +tVWlpFmpYRQxsehBjuSGd5DAH2rij5I3LuhqNxfiC0=)
                          7: VNfg-QglXGIujd90KUvMXS6gBSY.roa (hash: i1z1xtfhhF9sKthwdcoGahPZ+gLqvmKabhZTgAjg+1Q=)
                          8: YuXGy4DeeKK817s02xmtLVstl_M.roa (hash: 3pU1tPDQwQuNiKFX6sho9jHiT+VzWttOjYDmMxptk5w=)
                          9: ZTOkVo51zjkueJP-_jF8sE0dlwI.roa (hash: qWI1aXm7aJOa2gqUSo121mJhm0HQWb9xB4CjBEm9B2Y=)
                          10: gh269-L8TbTY3-TVP_7aO8lyx58.roa (hash: VbOH7TTnQt8mmF2t2Xgvv1Gs0QXIq8ndLB+CWsdxeFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:10:39:23:d7:08:ff:ea:bd:35:97:76:bb:71:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
        Validity
            Not Before: Jul 24 02:01:20 2026 GMT
            Not After : Jul 25 02:01:20 2026 GMT
        Subject: CN=3436c291702971530d808cb778e7a93030b51ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:95:ab:05:8a:a9:e9:2a:6d:3e:e0:75:86:eb:
                    7d:ff:b0:10:41:7d:2d:92:ed:4b:1b:74:0a:b6:7d:
                    30:ff:86:3e:98:98:a2:94:3f:97:d0:70:eb:8d:a9:
                    88:b8:6b:32:9f:80:b2:35:87:d6:ec:e7:57:04:dc:
                    f2:24:65:d9:1f:c2:47:c2:45:cb:23:f4:15:79:f8:
                    12:50:c1:d8:67:91:95:07:7a:7f:23:4f:27:d0:a9:
                    48:e2:46:24:de:0b:31:d6:f1:ac:8c:d1:a7:60:3d:
                    53:4a:69:e3:bb:9d:84:38:67:eb:eb:fa:43:b3:26:
                    c2:03:9d:89:ce:e8:e0:20:e1:3b:dd:27:ab:e2:d8:
                    17:c1:66:99:89:f2:41:67:26:cf:4d:ac:71:37:d8:
                    e9:5c:6f:33:91:2a:16:ec:fd:e8:d0:8e:03:98:a0:
                    ba:f2:7f:0d:c6:da:8a:82:a0:66:f9:0d:f1:06:54:
                    09:6b:64:a1:42:8b:06:9a:08:29:9b:59:03:17:5a:
                    e0:b9:d6:7f:43:1f:53:97:e9:84:9e:69:e6:4b:62:
                    65:e1:2a:8f:77:de:20:e7:6b:c4:24:31:3d:5e:cf:
                    01:58:4d:eb:8d:a4:ce:31:73:87:44:17:e8:be:41:
                    5b:b6:15:6d:a0:70:d2:36:08:0a:21:b4:ec:5a:ca:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:36:C2:91:70:29:71:53:0D:80:8C:B7:78:E7:A9:30:30:B5:1C:A6
            X509v3 Authority Key Identifier:
                keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:42:8c:55:a6:88:42:b5:4e:a2:87:90:cd:4d:ff:53:8e:
         0e:76:76:a1:6b:04:dc:ff:29:85:62:54:8a:69:76:f8:0f:4c:
         8d:db:04:f9:3a:f3:e2:0c:68:66:3b:f0:a6:c1:5a:e0:d2:35:
         a7:5c:06:50:54:5f:eb:91:52:4b:e3:ee:f7:75:c8:d8:3b:4f:
         42:c9:7d:36:67:d0:d0:36:f0:f7:26:9d:ed:24:7d:5c:75:e2:
         51:dc:ff:8d:f3:48:fa:0d:11:3b:96:9e:17:27:51:ff:eb:27:
         7b:41:ba:d9:4d:08:9f:46:77:84:65:31:7c:74:02:dd:87:38:
         f8:5d:a2:04:3c:e1:c3:0b:6b:8f:1b:e8:b3:98:e4:0c:27:76:
         fd:12:3f:b1:7d:95:d7:ea:28:8a:91:c5:27:8b:04:76:4e:0b:
         0d:d1:f2:1b:fa:fc:1f:d4:ed:2c:32:4c:77:22:db:b8:e4:dc:
         d1:98:fe:87:c5:c9:93:51:64:88:ff:eb:10:ea:46:7b:1f:c8:
         60:98:50:16:62:b1:b8:b3:26:94:96:37:5b:f4:58:22:63:0a:
         69:73:f9:54:93:4c:35:62:db:e7:5b:55:a2:44:55:56:d0:7b:
         cd:5e:45:fc:57:d4:0f:05:f6:b7:05:bc:02:8e:13:47:95:b5:
         ff:42:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:53:24 2026 by rpki-client