Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File:                     9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier:          EbpL4jsEG6mAx0nWDILSA9q2jk6XK8I2u6ORcjmIaJg=
Subject key identifier:   E8:17:39:FA:7D:A8:18:AB:E5:D1:92:8F:A2:50:46:3F:6E:E3:57:EA
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer:       /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial:       019F90FEC4FC5B0D1A0EE70D97AFACAC6C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 22:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:43 +0000
Files and hashes:         1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: yrGMnuSVbnoNuD9hV7pzvsDAg2w2uql/Lb11OU4EUeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:c4:fc:5b:0d:1a:0e:e7:0d:97:af:ac:ac:6c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
        Validity
            Not Before: Jul 23 22:00:43 2026 GMT
            Not After : Jul 24 22:00:43 2026 GMT
        Subject: CN=e81739fa7da818abe5d1928fa250463f6ee357ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:2a:28:fe:89:ce:0f:de:d2:ad:e0:d8:43:
                    66:23:ac:ef:94:2c:5c:da:71:b5:87:6f:e2:9b:1e:
                    06:08:9d:cc:39:f3:5a:fb:e6:e7:2a:97:4c:0c:7c:
                    c6:cb:60:a1:ba:8c:ea:fe:3b:09:97:61:63:04:49:
                    af:72:90:fd:cc:f0:e7:03:60:64:08:51:d3:1d:1d:
                    15:c5:2a:a0:99:b2:ea:d6:36:34:24:c5:1c:59:a9:
                    c5:a7:d9:0d:24:24:d1:74:bf:44:14:a3:0d:4c:6c:
                    49:f8:f5:48:9b:92:42:fd:fe:93:3e:c0:4d:d3:6e:
                    41:89:fb:f1:0d:4d:97:5b:20:e5:f8:43:32:c8:f0:
                    5d:fd:d4:65:96:aa:2c:39:de:da:fb:eb:42:b2:a9:
                    86:76:55:4c:06:76:9c:71:0c:c2:ee:43:c8:3a:5c:
                    8d:ee:06:57:41:4a:e4:06:f2:4e:64:ed:ee:72:fd:
                    fd:c5:01:55:f2:21:97:14:b2:23:ad:e1:b3:80:62:
                    68:91:45:1e:0e:01:fb:63:ca:cf:c3:77:5a:ef:cd:
                    14:a6:90:cc:07:98:cf:64:5e:70:35:89:df:9d:ae:
                    8f:e4:45:11:ec:ac:bb:d8:58:2b:3e:0d:f7:de:b5:
                    74:a3:67:20:49:a3:2d:17:e4:08:09:c6:9f:4a:55:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:17:39:FA:7D:A8:18:AB:E5:D1:92:8F:A2:50:46:3F:6E:E3:57:EA
            X509v3 Authority Key Identifier:
                keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:b7:34:bf:cb:94:6b:7a:90:1d:0c:75:64:b3:f0:89:14:
         8e:d4:1c:c5:0f:55:20:41:fe:83:fa:50:a2:08:56:75:07:b5:
         72:63:70:4a:2c:ca:ca:78:52:0a:64:d2:a5:2b:a7:c0:de:42:
         18:17:ed:7c:0d:ae:2d:c2:53:16:4f:aa:87:bb:3c:0c:e8:11:
         77:a7:de:ce:01:47:df:b5:d0:fb:08:24:8e:22:6c:73:db:ad:
         5c:ef:e2:7c:f6:96:2c:c8:71:d5:4c:03:d5:1e:c9:24:d5:1f:
         b7:83:de:32:34:39:15:13:11:98:57:d5:48:47:91:9e:38:36:
         74:27:06:d6:c3:7b:54:4e:30:93:d9:07:9b:92:c5:51:2f:ab:
         ed:a7:b8:53:14:d6:ea:50:f9:0b:0c:5e:10:4e:3a:b1:9f:76:
         67:70:71:34:3d:fb:37:b7:8f:30:6a:6d:17:d0:97:1f:0a:71:
         5c:69:1e:e2:cb:f1:b3:81:86:96:63:5a:33:f2:9e:d8:89:e0:
         71:be:c7:aa:ce:de:e3:ed:6a:dd:a3:44:d9:48:0f:00:40:fa:
         94:ab:d5:74:03:aa:7e:39:50:54:05:6c:a0:14:95:5d:ef:3c:
         57:66:a6:3e:8a:7e:f8:a4:94:ba:19:7c:ac:7e:89:61:39:33:
         2b:25:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:43 2026 by rpki-client