Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
File:                     9z1njq7ZSnm3Qt1DveP1TynbMVI.mft (raw, json)
Hash identifier:          wl27tMX8SzvhNbrIC3k+aEUgHc8cOuR/MzDs65ozWbc=
Subject key identifier:   92:39:4F:83:49:25:5D:17:21:D3:89:EC:4F:C1:A9:D9:BC:6F:04:33
Authority key identifier: F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52
Certificate issuer:       /CN=f73d678eaed94a79b742dd43bde3f54f29db3152
Certificate serial:       019F8F4737425E87289CE1A3ABBF651D8AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
Manifest number:          03BF
Signing time:             Thu 23 Jul 2026 14:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:36 +0000
Files and hashes:         1: 9z1njq7ZSnm3Qt1DveP1TynbMVI.crl (hash: 3MgePThHnAU5aUrWQFfqMO2LGruPuEyVmL0LjmDH4mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:37:42:5e:87:28:9c:e1:a3:ab:bf:65:1d:8a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73d678eaed94a79b742dd43bde3f54f29db3152
        Validity
            Not Before: Jul 23 14:00:36 2026 GMT
            Not After : Jul 24 14:00:36 2026 GMT
        Subject: CN=92394f8349255d1721d389ec4fc1a9d9bc6f0433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:af:db:3e:c7:47:08:a2:60:60:0d:de:df:
                    57:95:e6:6e:92:59:39:ae:15:0d:25:4b:49:ff:eb:
                    60:97:69:61:ca:49:ba:65:8c:b9:75:41:46:94:86:
                    12:a0:89:12:e9:3d:21:67:c6:93:f5:b3:c2:0f:4a:
                    23:10:d0:e7:9e:1f:9d:26:4b:c3:e9:81:40:99:99:
                    3f:0d:cc:3c:14:0f:00:df:c7:35:cf:32:e2:fa:96:
                    59:76:e5:85:e5:f5:56:9c:85:8b:b4:38:66:08:12:
                    d2:5e:b4:c6:7b:8c:e6:0c:dc:32:13:73:22:cf:f6:
                    cf:1d:95:6e:79:fb:51:aa:e2:cc:74:1d:d9:83:35:
                    19:34:f2:3f:7b:cd:ee:1d:65:7a:57:27:fb:4c:a4:
                    9a:29:c3:ec:28:cb:a8:69:b1:a7:28:2e:cd:a0:c1:
                    33:c3:9c:b9:d0:5b:04:da:19:0f:b4:0b:88:23:e8:
                    fb:0f:04:52:e7:49:61:f6:15:70:05:67:3a:5d:4c:
                    c3:b5:80:1c:9f:ce:5a:36:58:3e:81:d6:e5:ed:b0:
                    3a:64:b4:c9:60:a8:9c:cf:d6:02:c7:a0:bd:7a:30:
                    c0:ee:d9:a6:05:59:98:06:26:06:b0:f9:ac:23:b3:
                    24:d7:24:6c:d1:27:f1:bc:04:f6:69:1c:91:4c:c5:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:39:4F:83:49:25:5D:17:21:D3:89:EC:4F:C1:A9:D9:BC:6F:04:33
            X509v3 Authority Key Identifier:
                keyid:F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:a1:cb:37:7b:08:98:12:86:f6:5b:49:13:ea:f7:31:a9:
         60:17:f2:82:89:ac:6e:f0:0e:89:c7:43:1e:ee:4b:39:2b:a2:
         58:a1:e6:0b:98:5d:80:15:7d:a6:c4:52:59:a4:f7:ba:7d:70:
         45:26:3e:93:46:61:25:c8:04:f4:30:6e:e1:60:60:02:48:ae:
         8f:c5:8c:8b:7b:a9:95:47:2c:41:ff:de:fb:2a:f4:a0:96:15:
         5f:26:e7:30:8a:2e:26:33:09:93:a2:00:d1:5c:1a:d3:87:81:
         de:6f:15:ed:cc:98:c2:c6:1c:27:f5:60:54:99:3f:b8:1b:f6:
         51:b8:36:34:eb:95:a3:08:db:fb:85:57:17:6a:6d:3a:51:c4:
         30:5e:ab:84:43:1d:94:84:81:ac:61:a3:24:f2:c0:14:c6:04:
         bf:e7:68:0d:20:47:2f:11:25:82:eb:8d:77:74:7e:92:33:6e:
         21:da:c9:a8:17:a8:88:11:82:ee:fb:1a:d3:f8:a2:4b:4a:47:
         ef:5d:1a:f1:d0:e8:6f:68:8f:41:34:05:92:b0:f6:77:a9:81:
         3e:58:da:8f:88:0f:fb:36:32:0a:08:f6:8e:06:26:0c:59:f1:
         2f:23:bb:dd:b4:39:ad:eb:c7:c9:9b:5d:e9:5a:fe:e4:4f:36:
         be:27:a6:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRzdCXoconOGjq79lHYrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3M2Q2NzhlYWVkOTRhNzliNzQyZGQ0M2JkZTNmNTRmMjlk
YjMxNTIwHhcNMjYwNzIzMTQwMDM2WhcNMjYwNzI0MTQwMDM2WjAzMTEwLwYDVQQD
Eyg5MjM5NGY4MzQ5MjU1ZDE3MjFkMzg5ZWM0ZmMxYTlkOWJjNmYwNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM+v2z7HRwiiYGAN3t9XleZuklk5
rhUNJUtJ/+tgl2lhykm6ZYy5dUFGlIYSoIkS6T0hZ8aT9bPCD0ojENDnnh+dJkvD
6YFAmZk/Dcw8FA8A38c1zzLi+pZZduWF5fVWnIWLtDhmCBLSXrTGe4zmDNwyE3Mi
z/bPHZVueftRquLMdB3ZgzUZNPI/e83uHWV6Vyf7TKSaKcPsKMuoabGnKC7NoMEz
w5y50FsE2hkPtAuII+j7DwRS50lh9hVwBWc6XUzDtYAcn85aNlg+gdbl7bA6ZLTJ
YKicz9YCx6C9ejDA7tmmBVmYBiYGsPmsI7Mk1yRs0SfxvAT2aRyRTMVJ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI5T4NJJV0XIdOJ7E/Bqdm8bwQzMB8GA1UdIwQY
MBaAFPc9Z46u2Up5t0LdQ73j9U8p2zFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXoxbmpxN1pTbm0zUXQxRHZlUDFUeW5iTVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80OTcxMjUtNjFmYi00MmU4LWFjNDkt
NjE2NzNhNDc3NTQzLzEvOXoxbmpxN1pTbm0zUXQxRHZlUDFUeW5iTVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi80OTcxMjUtNjFmYi00MmU4LWFjNDktNjE2NzNhNDc3NTQz
LzEvOXoxbmpxN1pTbm0zUXQxRHZlUDFUeW5iTVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdGhyzd7
CJgShvZbSRPq9zGpYBfygomsbvAOicdDHu5LOSuiWKHmC5hdgBV9psRSWaT3un1w
RSY+k0ZhJcgE9DBu4WBgAkiuj8WMi3uplUcsQf/e+yr0oJYVXybnMIouJjMJk6IA
0Vwa04eB3m8V7cyYwsYcJ/VgVJk/uBv2Ubg2NOuVowjb+4VXF2ptOlHEMF6rhEMd
lISBrGGjJPLAFMYEv+doDSBHLxElguuNd3R+kjNuIdrJqBeoiBGC7vsa0/iiS0pH
710a8dDob2iPQTQFkrD2d6mBPljaj4gP+zYyCgj2jgYmDFnxLyO73bQ5revHyZtd
6Vr+5E82viemjA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:55 2026 by rpki-client