Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File:                     9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier:          cpzV1fPjt3BITL8KTV/QUFoZRliQb6BH9iAA3Xqakfg=
Subject key identifier:   13:73:56:7E:13:68:0B:99:79:F9:DD:53:25:5F:F0:52:70:64:BA:67
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer:       /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial:       019F90C8190A13DBC12F16A298DB10665AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number:          17BB
Signing time:             Thu 23 Jul 2026 21:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:00 +0000
Files and hashes:         1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: p+4302zmppDBkuAS5wvoc3rXGp+0vMdRZZZ2MaQyifI=)
                          2: UEAaPo6VUETHn6B0u4mE40cQPvI.roa (hash: oDl/sgYlJlPoPDa6gI6+975HLzl7ybSw7kcsMPOBkCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:19:0a:13:db:c1:2f:16:a2:98:db:10:66:5a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
        Validity
            Not Before: Jul 23 21:01:00 2026 GMT
            Not After : Jul 24 21:01:00 2026 GMT
        Subject: CN=1373567e13680b9979f9dd53255ff0527064ba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:9e:19:1d:f4:92:73:e3:73:09:34:23:ef:
                    43:05:6d:09:89:0e:ac:f5:55:ec:2e:3e:93:81:83:
                    76:32:43:2f:dc:de:fa:25:55:d5:c3:d1:ad:0f:f5:
                    cf:94:52:a6:b4:ed:c4:2e:50:68:69:97:9c:9a:50:
                    04:bd:80:a6:b0:e8:03:e8:8d:86:4c:00:64:5c:cc:
                    15:19:e0:e2:11:90:0b:87:b3:df:15:6f:51:9e:8b:
                    0b:7c:78:a3:f8:c1:5b:72:cd:a1:98:29:3c:25:78:
                    4f:e2:b7:88:5f:2c:02:5c:e7:1e:b1:ed:b9:f6:35:
                    c7:2d:02:1e:37:63:1d:0b:42:84:a0:b1:e7:1a:96:
                    44:ef:98:5e:b1:18:1e:7f:2d:49:dd:91:da:f8:a5:
                    76:b6:92:84:47:d5:0a:ed:1e:f5:ac:75:ae:ee:4e:
                    57:5d:f3:1d:29:ae:3d:14:31:b1:ab:b8:28:a0:2c:
                    9d:40:f0:db:5e:18:f6:05:aa:0a:40:0b:dc:84:77:
                    50:a8:77:92:1c:6b:c4:82:80:eb:1c:2f:dc:a6:d9:
                    1c:41:56:2a:0e:1e:91:70:9e:20:b0:d6:15:97:f5:
                    21:27:54:b9:ba:ea:f9:55:64:1a:8f:ef:58:2b:76:
                    ce:55:a5:38:74:94:9c:b3:7d:fc:23:48:84:81:78:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:73:56:7E:13:68:0B:99:79:F9:DD:53:25:5F:F0:52:70:64:BA:67
            X509v3 Authority Key Identifier:
                keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f6:2f:f0:b7:d4:ae:25:bb:a0:3f:f9:73:fe:c1:58:b3:3a:
         03:40:a6:c9:2f:a4:83:bc:f5:f3:b7:a5:bc:43:41:db:77:f8:
         0e:db:1e:17:ad:63:da:bf:a3:70:6b:5f:8e:bd:ea:46:ca:cb:
         c0:fc:df:4f:b8:36:34:6b:0a:1c:32:58:a0:23:c5:37:bc:ec:
         73:27:b8:c3:e9:f8:3f:84:4e:c7:04:5f:cf:c2:10:be:d5:1f:
         77:63:e5:bc:e6:e0:7d:52:0c:57:06:17:50:ff:02:15:10:d2:
         44:ff:51:79:6b:07:51:cb:8e:66:a5:40:ed:93:35:6b:fd:39:
         2c:84:5d:dc:2b:a8:2d:29:93:c7:dd:6c:96:ab:c6:00:11:73:
         da:0d:0c:74:20:f9:a9:c4:52:b3:61:4d:ce:00:35:a6:c3:a7:
         c3:22:c2:3a:5b:b3:d5:b4:0f:2f:34:5d:ab:07:ab:bf:fb:89:
         94:d4:24:83:48:e5:b8:17:bd:f6:6e:75:e8:a7:40:57:2e:8f:
         b3:87:be:80:e9:49:2d:be:63:1a:bc:e0:01:36:5a:66:39:26:
         18:69:c2:e2:98:c3:c8:89:3c:34:e9:69:1c:ef:e3:1f:23:bd:
         d1:bb:7b:e7:cb:39:a7:56:9a:f5:0c:a9:af:ec:4b:03:bb:d1:
         84:16:86:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:51 2026 by rpki-client