Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File:                     9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier:          wBd/IRUyg0EEUTAsvei4VphqTEXI70LILZ/a26cTJzc=
Subject key identifier:   9E:AF:ED:A8:A4:EE:D5:4A:0E:E8:1A:4C:61:E3:CC:8D:61:E2:74:73
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer:       /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial:       019F92113DC9F97805B2AD69EF113074AD8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number:          19FC
Signing time:             Fri 24 Jul 2026 03:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:31 +0000
Files and hashes:         1: 2gp85iNI9hOHVMoD-AVmhaVIeZQ.roa (hash: axs71u0qY3GNU78vZgfYXYLH532ZZvavOcB1PlEaAyE=)
                          2: 5V_xONqzwKma1n0RRaZThBrg5gE.roa (hash: z1TwNh3QakcyBUbCZgGTjXYrrx8YDgv/xgtP0R9TjOI=)
                          3: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: Wowr63ChRoOacqSptfQsBOyvcT3S8kqDhkAyatmeg3A=)
                          4: MQ1U78oWAmsdfBjipimRQxhaZUQ.roa (hash: tfXkEvSI0LPBTOF9HaPkhhqnpC/Uebo4bMhTqO5iftI=)
                          5: Sr8taJwNmM6IUIh68pFCremKsP0.roa (hash: 8hNtlSLs+hgRIJnDDfJh2MIcy6zUGifsMLAL3xiKJ1I=)
                          6: afKpLSzkRBXzV4BjT3BpJM7Spxc.roa (hash: j0zroS1QN9AcRS6ak5G4uapit2hUYLDInrxtzYQvIDc=)
                          7: cJSB3QS13j7tmP3z_rxKXgO4j60.roa (hash: 9yWuPk6TuuusjVGKVizh7DPc+s1P+89Z5o314zB49FI=)
                          8: kGPfhXxpreZtjaPga5IzFyy5BYc.roa (hash: i9y196dGRt0WCvB/nvKsvdx4WF+EKGdHmOuGX6kQ6qY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:3d:c9:f9:78:05:b2:ad:69:ef:11:30:74:ad:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
        Validity
            Not Before: Jul 24 03:00:31 2026 GMT
            Not After : Jul 25 03:00:31 2026 GMT
        Subject: CN=9eafeda8a4eed54a0ee81a4c61e3cc8d61e27473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:e5:77:05:32:61:01:be:27:13:2c:6f:cc:
                    c4:50:7f:00:aa:b6:b2:42:0a:f4:63:e5:f4:d4:77:
                    14:39:d3:31:eb:49:f3:89:6e:4f:bf:31:77:d8:6d:
                    24:e7:87:25:00:d5:95:4a:6c:4e:4b:9a:e6:19:9e:
                    73:69:2d:e2:14:3d:d8:d6:03:f8:bf:28:ea:ee:72:
                    dd:76:1d:49:38:1c:19:80:a6:92:a9:01:e8:41:8f:
                    27:85:bc:39:e6:37:12:77:3c:02:27:b5:02:46:1e:
                    c6:e0:d1:13:82:6c:48:af:7a:73:b8:bf:70:b8:32:
                    fc:00:9b:fb:4f:84:42:b9:c6:2b:dd:79:1f:ca:a5:
                    8c:17:8e:38:a1:2d:27:2c:42:63:16:f0:6b:20:dd:
                    da:5b:09:00:29:b6:49:1e:8b:fd:20:7d:86:16:be:
                    38:bd:9b:56:b5:ea:ce:2b:ad:0a:1a:37:32:b9:6b:
                    46:61:19:c6:29:a3:38:31:e2:f7:8e:a7:8e:10:b1:
                    f2:05:54:a2:5a:ff:4d:b7:22:23:46:e9:05:23:c5:
                    d3:50:84:7e:c5:4c:98:cf:85:69:51:47:78:16:ef:
                    13:8c:89:59:f8:e5:01:d0:84:40:ae:3d:f2:b6:00:
                    55:43:fe:9d:f8:64:76:ed:9f:ca:4b:19:6a:49:4c:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AF:ED:A8:A4:EE:D5:4A:0E:E8:1A:4C:61:E3:CC:8D:61:E2:74:73
            X509v3 Authority Key Identifier:
                keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7e:19:c3:74:d1:e9:7f:14:56:da:89:2a:ad:eb:6c:f6:f7:
         0e:96:47:0f:37:61:88:d5:28:cf:69:52:ef:b0:f7:ad:73:40:
         4f:28:9c:cd:06:c5:de:e9:f6:37:28:7a:1b:53:16:a4:4d:56:
         82:97:8c:19:2b:3d:62:b6:05:53:d6:5a:ee:61:ba:da:65:59:
         d7:9e:28:be:a5:0e:78:7c:e7:ac:84:7d:f8:0a:3c:d3:0d:00:
         7e:7f:61:9c:a4:25:1c:12:6f:02:d7:fe:d9:9d:f5:a7:bb:4b:
         98:51:6d:6f:4f:a7:d9:2e:1f:7c:d4:0b:15:54:f2:0d:a5:9e:
         30:a6:c8:e7:cc:04:b0:71:f7:1a:0a:2c:a9:53:e2:14:7b:d3:
         fe:9d:90:67:88:10:8b:55:91:60:df:8e:a0:72:a3:94:92:0e:
         04:50:22:8c:b4:0c:4b:77:7e:48:20:51:01:37:17:b2:a4:3d:
         cc:d7:b2:06:8f:ee:ee:28:a7:9c:2f:cc:da:25:a2:d3:3b:d1:
         30:67:bb:ba:0d:92:86:2b:01:b7:49:06:56:32:f9:1f:57:a9:
         87:6f:d3:a4:17:83:87:98:38:c7:99:7a:68:65:61:a4:12:2c:
         67:fc:80:a4:81:4a:09:10:bf:33:85:13:60:0a:a5:fa:61:03:
         5e:c8:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:49 2026 by rpki-client