Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
File:                     9rkcLAjwDWdj0unmosRCETDz3b0.mft (raw, json)
Hash identifier:          1Uw1klaA2TOxnkRuDWgloa3gx4gSR4qdbnNtJElpw2Y=
Subject key identifier:   5E:C0:B3:1D:21:39:10:9F:5E:CB:2F:A2:7B:DF:32:C1:1B:E1:11:25
Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
Certificate issuer:       /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Certificate serial:       019F8F4753D212183B2D7494451ACD5ED520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
Manifest number:          0673
Signing time:             Thu 23 Jul 2026 14:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:44 +0000
Files and hashes:         1: 9rkcLAjwDWdj0unmosRCETDz3b0.crl (hash: nYTURWGeIq04XAbzbo9ga46jLlRPVY/W/P3oMFF3Q40=)
                          2: O9gvHkG2h2zO-WbCdSfRap-erlk.roa (hash: oEpItWYo36cnFY6gqJseSt67WlSCENpXs7wywbBecHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:53:d2:12:18:3b:2d:74:94:45:1a:cd:5e:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
        Validity
            Not Before: Jul 23 14:00:44 2026 GMT
            Not After : Jul 24 14:00:44 2026 GMT
        Subject: CN=5ec0b31d2139109f5ecb2fa27bdf32c11be11125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:22:cc:be:b1:93:36:0e:b3:72:b9:6f:cf:e7:
                    88:37:2b:f9:40:2f:d3:5f:37:79:87:03:fc:5c:96:
                    31:c7:ef:03:2b:ae:81:50:15:de:00:5c:9d:f3:a1:
                    fa:0d:54:c4:38:45:90:96:ef:82:d3:21:8f:49:a0:
                    82:7e:e6:6a:b1:a8:d5:14:d9:a3:f2:ff:fa:c1:88:
                    30:dd:f9:82:68:85:c1:06:17:fb:68:7b:38:68:47:
                    da:00:04:20:7c:93:36:62:89:c3:af:6f:b6:09:7c:
                    c0:fa:34:fe:04:96:3a:a4:13:86:6c:04:15:0b:47:
                    08:39:e0:4c:ae:fd:95:ec:35:90:fe:7a:84:d8:28:
                    d5:bc:24:95:89:c9:1a:83:cd:8a:5e:01:6f:8d:76:
                    d9:85:48:cb:70:55:e7:1f:0b:a3:61:5f:36:ef:01:
                    86:55:db:7b:50:c4:ec:18:8c:bb:c2:6c:57:0b:9c:
                    9f:a7:ae:a4:6c:37:cc:f2:c1:a1:d8:ce:dc:c5:1a:
                    81:23:76:70:6c:06:e8:7d:ff:3b:a5:c0:55:31:8d:
                    3d:e6:fa:6b:c2:58:4d:38:0e:5e:4c:27:19:5e:04:
                    67:e2:5b:bc:ab:9d:04:53:7a:df:1e:55:92:79:65:
                    49:0b:83:76:6e:13:40:af:cf:c8:2c:e2:d0:c2:91:
                    c5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C0:B3:1D:21:39:10:9F:5E:CB:2F:A2:7B:DF:32:C1:1B:E1:11:25
            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8c:8f:11:69:ed:42:d6:82:a4:7b:65:e6:46:a1:bc:cf:7a:
         ff:fa:d6:d6:46:ca:6d:86:22:ce:74:52:b9:28:fc:11:0f:ba:
         ae:f8:f8:b0:ed:11:69:76:97:75:79:04:76:be:bc:d8:52:a0:
         83:a1:62:45:3f:50:dd:7f:62:a3:4c:41:ce:e7:2b:a1:cd:54:
         71:8d:bb:5f:40:b3:6f:35:20:d6:3c:d2:dc:86:62:df:5c:d9:
         85:0d:16:26:5f:18:b8:2d:4b:19:43:f6:86:10:3b:f8:d9:1f:
         19:b2:14:1d:bc:48:3e:0f:c0:84:2d:85:97:fa:7e:4d:d9:b3:
         b1:52:76:6b:5f:6c:7f:90:ca:6b:90:e0:13:ea:8b:4d:55:6e:
         31:18:6c:e2:8f:54:7d:d6:c3:40:b7:dc:6b:9c:16:64:bb:28:
         ee:2c:be:ea:c8:a6:4d:d6:9b:76:f3:8f:e7:df:ea:f6:88:af:
         85:d5:22:47:09:ba:46:a6:b5:67:08:4d:b0:99:6f:28:de:09:
         05:19:43:e3:a0:e5:c1:c4:29:57:dd:17:d4:8b:af:76:88:e4:
         dd:8e:a5:34:7a:1d:eb:29:1a:5c:3f:5b:01:55:fd:87:4d:24:
         26:34:3f:9a:c4:78:fd:c8:a8:9d:62:f3:1e:0d:d9:62:50:65:
         ca:06:b4:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR1PSEhg7LXSURRrNXtUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjkxYzJjMDhmMDBkNjc2M2QyZTllNmEyYzQ0MjExMzBm
M2RkYmQwHhcNMjYwNzIzMTQwMDQ0WhcNMjYwNzI0MTQwMDQ0WjAzMTEwLwYDVQQD
Eyg1ZWMwYjMxZDIxMzkxMDlmNWVjYjJmYTI3YmRmMzJjMTFiZTExMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iLMvrGTNg6zcrlvz+eINyv5QC/T
Xzd5hwP8XJYxx+8DK66BUBXeAFyd86H6DVTEOEWQlu+C0yGPSaCCfuZqsajVFNmj
8v/6wYgw3fmCaIXBBhf7aHs4aEfaAAQgfJM2YonDr2+2CXzA+jT+BJY6pBOGbAQV
C0cIOeBMrv2V7DWQ/nqE2CjVvCSVickag82KXgFvjXbZhUjLcFXnHwujYV827wGG
Vdt7UMTsGIy7wmxXC5yfp66kbDfM8sGh2M7cxRqBI3ZwbAboff87pcBVMY095vpr
wlhNOA5eTCcZXgRn4lu8q50EU3rfHlWSeWVJC4N2bhNAr8/ILOLQwpHFZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7Asx0hORCfXssvonvfMsEb4RElMB8GA1UdIwQY
MBaAFPa5HCwI8A1nY9Lp5qLEQhEw8929MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2Yt
OGM5MWY5NmJlNjI1LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2YtOGM5MWY5NmJlNjI1
LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYyPEWnt
QtaCpHtl5kahvM96//rW1kbKbYYiznRSuSj8EQ+6rvj4sO0RaXaXdXkEdr682FKg
g6FiRT9Q3X9io0xBzucroc1UcY27X0CzbzUg1jzS3IZi31zZhQ0WJl8YuC1LGUP2
hhA7+NkfGbIUHbxIPg/AhC2Fl/p+TdmzsVJ2a19sf5DKa5DgE+qLTVVuMRhs4o9U
fdbDQLfca5wWZLso7iy+6simTdabdvOP59/q9oivhdUiRwm6Rqa1ZwhNsJlvKN4J
BRlD46DlwcQpV90X1Iuvdojk3Y6lNHod6ykaXD9bAVX9h00kJjQ/msR4/cionWLz
Hg3ZYlBlyga0UQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:05 2026 by rpki-client