Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
File:                     9-5cHIBMM_3jPZsIuRn3PTHQttk.mft (raw, json)
Hash identifier:          a+IKRDvDBBz9M6ZMrmQvP45a7XebOR5xICrWkhIoKF8=
Subject key identifier:   F9:16:97:7F:0E:8F:09:E6:5F:60:64:D2:B3:44:E5:55:36:02:57:17
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Certificate issuer:       /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial:       019F902320FD6F5408258AD361A46EEC6603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
Manifest number:          0E3D
Signing time:             Thu 23 Jul 2026 18:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:48 +0000
Files and hashes:         1: 0y82NnZOUS5QhtbUGUPm-XaKV8A.roa (hash: g76Du+LlOjlKMO34J2hj9ezARBg/rEQncuJVGlyHo34=)
                          2: 9-5cHIBMM_3jPZsIuRn3PTHQttk.crl (hash: wvkEAiwCj5+Bl8kqqbX0Ee/UNbwDcVI/C8CvlR0t3us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:20:fd:6f:54:08:25:8a:d3:61:a4:6e:ec:66:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
        Validity
            Not Before: Jul 23 18:00:48 2026 GMT
            Not After : Jul 24 18:00:48 2026 GMT
        Subject: CN=f916977f0e8f09e65f6064d2b344e55536025717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:51:b3:b6:b3:2d:ce:6e:b9:f2:1d:2a:f3:
                    a8:b7:3b:3b:53:a3:d1:dd:8b:67:13:16:57:1b:b6:
                    3a:9d:21:1d:50:0f:4a:76:3a:f4:03:59:bc:30:b6:
                    94:84:3b:a1:17:6c:74:4e:3a:e6:30:29:f8:65:79:
                    9b:aa:8a:6a:0c:1c:7b:c0:16:88:34:b8:7d:7c:a1:
                    cd:04:81:05:57:2e:0b:66:2e:1b:c4:22:3e:63:34:
                    9f:ac:d3:cb:26:eb:c1:99:1b:d7:b6:a6:b4:92:53:
                    e7:de:ff:9f:d9:43:24:0f:b6:7c:ce:8e:93:0b:72:
                    e4:91:8f:44:fc:dc:f8:e9:b8:7e:53:73:80:e2:d1:
                    9a:1e:c7:9d:a7:03:87:62:de:c2:b2:64:11:a9:54:
                    62:eb:18:eb:e5:dd:38:a9:2b:0b:6e:a9:d8:97:61:
                    90:48:89:71:d5:c2:29:fc:17:c0:75:5e:48:b6:61:
                    0c:d8:c0:b6:06:44:a9:78:2a:20:de:cc:b0:45:aa:
                    50:a8:9c:11:30:4b:d2:a2:73:8e:eb:c5:ec:3d:40:
                    28:39:ef:d4:90:b1:0f:c1:58:db:b2:97:53:ce:3a:
                    de:07:4a:25:09:85:95:30:f0:e5:99:bc:52:f5:73:
                    aa:8f:fd:91:06:2c:0d:b1:06:34:95:5c:3d:d0:38:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:16:97:7F:0E:8F:09:E6:5F:60:64:D2:B3:44:E5:55:36:02:57:17
            X509v3 Authority Key Identifier:
                keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c8:1c:f5:82:d8:66:2a:04:b8:73:19:86:e7:46:b5:68:a7:
         46:32:15:17:19:a5:57:74:25:1b:22:11:0c:f8:ba:1d:2b:cf:
         9e:de:06:c5:a0:e1:e3:5b:c5:95:a2:41:5c:a7:95:2d:d3:3b:
         e2:c3:7e:2a:b2:7f:c8:f2:41:11:29:3b:8f:66:4c:c4:9e:5d:
         da:d7:be:ea:45:4e:3b:a6:c2:8c:33:3d:f7:eb:82:75:59:30:
         8b:e5:3f:ed:ce:32:e4:c2:39:cf:b9:58:bf:13:ad:ce:63:13:
         2c:f8:56:b9:00:18:e2:ce:cc:47:91:94:34:10:60:55:c3:98:
         44:6b:cf:ca:60:84:63:f5:80:b2:0f:31:43:c6:ec:27:39:ee:
         7e:e9:d1:f6:df:72:ba:ea:11:c8:66:a8:d3:33:f1:7a:cb:73:
         62:05:ea:a0:55:34:bf:70:63:5e:99:be:15:aa:e2:b9:1c:dc:
         c1:27:66:09:46:42:80:dd:68:6f:67:b5:08:52:38:23:8f:72:
         18:58:7f:56:0d:a4:2a:86:37:a8:6c:65:8e:21:92:76:fc:61:
         e2:3a:b0:aa:11:cf:21:cf:55:ff:3a:eb:16:a1:f2:17:b4:bb:
         bf:00:ce:0a:6c:02:69:52:a8:88:2f:21:47:df:89:1f:a7:42:
         d0:06:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:33 2026 by rpki-client