Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File:                     9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier:          LdJZBKkhGLndHgvDHJ4eimI2yuQh/WWNIGve/wqFedI=
Subject key identifier:   D4:CC:A5:6B:44:95:5A:D3:8E:17:D7:E7:48:49:CB:07:E9:E2:12:74
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer:       /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial:       019F8F471343BE5D6B3C0B5D4628C29841D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number:          0714
Signing time:             Thu 23 Jul 2026 14:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:27 +0000
Files and hashes:         1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: dNelke5ZSILVAgm38UbQK8nE6KFb7qfKZkvAZ4F38r0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:13:43:be:5d:6b:3c:0b:5d:46:28:c2:98:41:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
        Validity
            Not Before: Jul 23 14:00:27 2026 GMT
            Not After : Jul 24 14:00:27 2026 GMT
        Subject: CN=d4cca56b44955ad38e17d7e74849cb07e9e21274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:82:99:5a:49:b8:e7:19:c2:56:f9:a5:66:
                    46:59:7d:eb:a0:b2:fa:f3:7d:51:15:67:26:98:2e:
                    fd:d6:f0:19:3f:0b:47:e3:57:f2:64:db:65:38:ef:
                    b3:16:15:d6:66:c1:65:1e:7e:3b:5b:b0:0d:59:dc:
                    4f:b9:80:71:1b:53:e1:44:aa:ca:2f:86:1e:e9:f2:
                    9b:88:34:25:d0:e5:bf:9a:70:dc:ed:07:a6:5b:22:
                    e2:bf:45:6d:25:c9:60:0a:94:52:22:99:b9:1f:b0:
                    f5:58:3a:f7:12:7c:75:8b:48:0a:97:0a:b6:04:a8:
                    61:d8:ec:e7:e6:06:3e:fe:ee:39:68:65:65:32:81:
                    e3:9e:35:4e:dc:f6:4d:1f:b9:ed:00:f4:1a:b4:90:
                    fc:30:04:83:98:eb:e1:d5:d1:b3:19:a7:59:86:e3:
                    3d:ea:6e:f1:aa:88:b7:5e:34:96:6c:7b:7d:99:53:
                    ac:6b:08:73:41:17:bf:c8:58:72:07:cb:02:9c:dd:
                    61:80:28:73:6e:86:de:6d:77:d9:44:03:76:1c:34:
                    97:6b:ca:7e:2a:58:18:fa:f4:8a:43:28:40:0a:75:
                    43:d1:6c:2c:0f:37:54:0b:7b:81:c0:84:1d:d2:c6:
                    ff:70:a0:d3:2b:cf:3c:1c:4f:25:79:05:6b:c8:eb:
                    aa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CC:A5:6B:44:95:5A:D3:8E:17:D7:E7:48:49:CB:07:E9:E2:12:74
            X509v3 Authority Key Identifier:
                keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:80:73:f8:c2:8d:39:c9:7c:b4:d2:9a:2c:41:59:de:e0:f6:
         c0:2c:73:08:01:b6:fb:f4:ac:bf:f9:79:8a:a3:86:99:74:37:
         55:59:6a:3f:89:f8:73:fe:de:f3:23:b1:b8:62:57:6b:d1:2c:
         64:99:a0:3c:bb:4f:b5:c6:8c:76:f6:12:16:ec:f5:fa:c9:e0:
         e6:44:20:22:84:84:af:88:1d:35:a3:e9:22:9c:56:0d:82:20:
         b5:8b:94:26:22:3c:68:13:bc:14:9d:80:d0:db:89:35:ca:6a:
         66:89:f9:a7:28:c1:47:6d:a2:97:d5:3f:60:31:1a:e9:42:13:
         7e:a9:c9:90:94:80:aa:93:36:07:4e:24:23:2c:da:47:56:9c:
         1f:3a:6e:e7:48:9b:77:99:1f:7c:5c:fc:3c:1d:0e:0d:c2:78:
         7b:13:ac:03:d0:8b:ff:dd:80:33:64:39:99:51:b0:c0:3a:78:
         ba:12:6a:e5:80:2a:17:91:ea:ab:46:b6:29:d5:8b:e3:23:e4:
         1d:34:b5:13:8d:93:94:34:79:22:9b:e2:01:13:a3:86:f2:0f:
         a0:db:b6:c3:15:be:82:c2:a0:ef:f4:91:b9:39:4f:d4:54:07:
         52:eb:9c:7f:e9:da:ae:87:aa:54:66:4d:2b:bd:de:94:d2:16:
         e4:d4:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:00 2026 by rpki-client