Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File:                     9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier:          1aXo22bDGIfO6BTPvBI2rKUB41jFHggDTUEQuW4bBOw=
Subject key identifier:   81:CE:4C:20:1C:81:0D:3B:FE:19:39:41:CE:1D:E4:27:01:43:E1:B5
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer:       /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial:       019F90C764C8EEA260F5E93F978E18FA3B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number:          0BB4
Signing time:             Thu 23 Jul 2026 21:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:14 +0000
Files and hashes:         1: 5VaEr_9CgIk0hDvBuz897kphjAA.roa (hash: O8HVzXpA3yJisGesiXqBb6I5Gg2zmpPDn2gcT3B2Ub8=)
                          2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: TDEypDIjydEz9+1jOKokWQpTTd1N83n8cDI2Poov1XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:64:c8:ee:a2:60:f5:e9:3f:97:8e:18:fa:3b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
        Validity
            Not Before: Jul 23 21:00:14 2026 GMT
            Not After : Jul 24 21:00:14 2026 GMT
        Subject: CN=81ce4c201c810d3bfe193941ce1de4270143e1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:78:99:64:04:08:c8:44:db:c2:44:cc:6a:
                    49:ce:67:9a:25:d4:f1:c5:93:ad:e7:75:a4:e2:b1:
                    cd:fc:38:bb:22:5f:c1:0a:49:95:e1:33:4c:70:3e:
                    1f:52:0b:10:ac:11:13:b1:0a:71:0a:4b:75:fe:c5:
                    39:f8:7d:06:00:8d:af:dc:ba:1d:20:98:6c:3d:13:
                    11:0b:fa:8d:e9:be:df:ed:fa:90:a2:0b:43:b7:14:
                    c0:8e:71:43:40:0b:f6:a5:1c:76:df:61:4d:7a:e6:
                    08:37:c5:d4:6f:21:5f:ab:a7:82:bf:64:06:71:41:
                    48:14:1a:cb:4b:32:f1:2d:ad:f2:04:66:e6:a0:c3:
                    37:97:d3:85:cb:99:98:aa:28:3d:62:55:f7:f1:9e:
                    80:df:55:9d:3a:29:2c:af:e4:41:da:68:5d:8f:13:
                    d5:e0:f9:0c:b7:91:dc:91:85:df:b7:46:af:a1:43:
                    4e:62:c0:de:a9:8b:75:ac:62:64:9e:88:cc:82:d9:
                    0c:cb:67:b0:74:75:54:ea:76:4d:5b:29:9c:35:c2:
                    26:fd:7f:11:53:3c:a4:a9:25:54:97:f9:ba:da:32:
                    0a:fe:66:b5:1a:9d:63:1a:e5:a8:e9:38:e8:0e:10:
                    91:fd:fb:5b:3d:5a:40:d6:83:00:71:13:59:39:b9:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CE:4C:20:1C:81:0D:3B:FE:19:39:41:CE:1D:E4:27:01:43:E1:B5
            X509v3 Authority Key Identifier:
                keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:00:fb:0b:22:d5:8c:9c:af:92:bf:e0:3b:47:6d:8f:fd:
         5d:ae:2f:e2:81:e1:a0:a0:b4:6d:69:d6:3d:ea:5f:2b:c1:17:
         cd:eb:e7:23:9d:87:b9:1f:4c:dd:9b:6c:18:f4:1f:c0:80:74:
         08:d5:b7:46:e1:c8:ae:e1:a7:25:1c:be:33:34:20:ec:e8:4c:
         0e:82:9c:a0:81:6b:10:32:e0:cd:6c:e1:e4:bd:b0:55:dd:27:
         7e:13:d1:ba:df:b8:25:69:43:ca:73:d3:5c:d1:5f:73:21:79:
         06:5d:14:fc:0c:03:0f:f9:87:5c:1a:af:fc:d5:23:4a:66:7b:
         6d:99:66:e4:02:ab:e6:e6:51:b6:0e:25:d2:a8:c2:84:53:78:
         88:1f:ea:ca:8c:ab:fd:1c:2f:33:23:4c:4d:3a:6c:6d:bf:72:
         39:3d:ef:11:4c:21:8b:84:a4:23:1c:e3:9e:e2:59:38:29:e6:
         9a:5f:70:c2:59:e9:36:80:c4:e6:f3:98:85:09:b1:d0:19:30:
         99:6b:a9:3e:76:ab:f0:26:1c:bd:3a:2b:02:5b:bd:8e:69:a4:
         f4:d8:cb:2c:9c:d8:3a:5a:ec:26:5d:1d:36:93:6d:02:24:cf:
         12:a0:e2:ed:32:25:9f:00:25:ce:92:11:ae:9f:ad:4d:37:87:
         55:8b:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:29 2026 by rpki-client