Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File:                     9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier:          fPJtQHOmyLxVs+h/kWYY9QrZDz7Vfvc3xPsTvjLnixQ=
Subject key identifier:   C2:C2:BB:32:83:E8:17:7F:87:DB:F6:17:EE:3A:18:FA:26:DF:9E:02
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer:       /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial:       019F8F10DA65AD6D29C11B5E366D3038D3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number:          07F3
Signing time:             Thu 23 Jul 2026 13:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:14 +0000
Files and hashes:         1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: SqjegDhtSv2DMhPa1OQsI9T/VBCOK+BBYGluguP0/oU=)
                          2: IuqD_YnEK40mq9P3_VxGGLfnMtY.roa (hash: bqXRCPcw1sANvy12S42YPS3VVGlJERGIKMC/ip/iYlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:da:65:ad:6d:29:c1:1b:5e:36:6d:30:38:d3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
        Validity
            Not Before: Jul 23 13:01:14 2026 GMT
            Not After : Jul 24 13:01:14 2026 GMT
        Subject: CN=c2c2bb3283e8177f87dbf617ee3a18fa26df9e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:35:e9:ca:2e:78:19:41:84:37:f5:4f:21:
                    1d:40:4d:dc:71:e1:ec:3c:a5:c2:15:81:a2:42:0c:
                    cf:34:4a:ea:8a:cc:57:3c:57:c3:2f:34:37:74:e6:
                    ce:f2:d2:ee:bb:24:be:f9:49:31:fd:b6:48:d8:10:
                    6c:b2:e8:7d:f3:36:5a:83:4a:d1:72:11:c5:26:4d:
                    fc:fe:06:cd:d1:5c:b4:1c:fa:51:dc:62:81:4d:0f:
                    c0:3a:b1:4f:c8:30:c5:2a:9e:46:ab:71:18:ce:95:
                    7d:f7:a9:40:f1:28:15:23:a6:13:8b:28:3e:24:1d:
                    7f:9a:5d:ce:c6:1f:f7:72:e9:15:53:b3:74:40:ca:
                    32:2e:7b:65:db:41:70:6d:fd:52:18:51:17:e0:a7:
                    75:54:b9:bb:7d:ce:b3:e7:38:4c:19:34:2a:22:32:
                    3e:96:1f:bf:21:88:50:9d:33:9e:cd:a8:11:4d:07:
                    90:0d:8a:4e:77:3c:77:bd:2f:17:e6:50:d4:0e:5b:
                    c4:c0:eb:8d:36:ed:18:b6:9d:9c:6b:ce:30:ba:de:
                    dc:64:8e:5c:af:b9:16:36:50:a3:3f:95:31:45:a1:
                    0c:b2:90:48:92:1c:f6:55:7d:35:61:05:cd:70:b1:
                    96:b1:0f:f3:34:10:30:83:01:d7:fa:0c:0f:a0:5b:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:BB:32:83:E8:17:7F:87:DB:F6:17:EE:3A:18:FA:26:DF:9E:02
            X509v3 Authority Key Identifier:
                keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:10:e1:e4:ce:2c:f5:34:c1:76:06:3b:61:97:24:ce:59:81:
         88:f1:79:0e:32:1f:29:38:ff:b4:46:70:d4:31:a6:2e:cb:3f:
         b3:8d:ad:46:3b:ba:41:c1:31:6a:85:16:8e:af:83:10:c1:f0:
         53:a1:2e:d6:f9:4c:71:d1:a5:19:bb:c7:05:69:28:31:02:11:
         f8:30:52:86:88:3d:d6:c9:10:b3:da:9c:b1:04:d3:fb:9e:c5:
         c2:f3:18:37:e7:ce:2e:af:4e:eb:4f:04:ee:c7:cb:d4:55:6f:
         f0:74:b7:21:62:af:24:56:b0:44:ad:de:fc:fa:37:1a:23:81:
         c1:2d:4e:d1:57:d4:96:83:34:dd:7d:19:9e:df:92:51:82:05:
         45:45:76:e1:2a:db:30:1d:79:f6:ef:cb:6c:7c:b1:0e:e0:f4:
         e6:b4:3d:0f:87:64:e4:aa:4d:17:03:66:e7:35:a6:41:3f:ef:
         aa:cb:e8:e0:dc:75:67:1c:58:7b:88:be:d7:74:de:bf:be:8d:
         36:c5:85:02:c5:46:92:53:22:10:d0:c2:39:d3:96:10:c6:4c:
         03:c5:62:c2:a2:4e:3f:ed:cd:ab:3f:8c:f8:79:c5:aa:22:21:
         c5:ac:6a:1a:be:b9:c5:44:ae:60:1a:84:3f:54:2a:d7:c1:f4:
         e9:9a:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:01 2026 by rpki-client