Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File:                     9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier:          48MpxgfozOubNf1aUvQ092l2OnrH6Tf3zMOT2S3hroI=
Subject key identifier:   4F:45:7A:D5:61:87:EF:29:77:7A:78:FA:39:30:65:5F:CE:D2:92:B1
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer:       /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial:       019F90FEED75E028C296DA90D342BD653B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number:          0A18
Signing time:             Thu 23 Jul 2026 22:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:53 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:53 +0000
Files and hashes:         1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: WyVW57M1eBnuzVqiWXxarVtJjxiYmP/85leHOV62E+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:ed:75:e0:28:c2:96:da:90:d3:42:bd:65:3b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
        Validity
            Not Before: Jul 23 22:00:53 2026 GMT
            Not After : Jul 24 22:00:53 2026 GMT
        Subject: CN=4f457ad56187ef29777a78fa3930655fced292b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:35:83:99:a4:e3:6f:9f:ea:fb:7b:fe:51:23:
                    6c:4b:1f:9f:d0:23:41:07:d4:6a:62:13:dd:ee:32:
                    1d:5f:35:e4:3f:33:cc:a5:8d:11:da:0f:cf:97:6c:
                    2f:e8:a5:01:08:4c:ad:94:c4:43:99:4b:65:40:90:
                    a2:24:d5:5f:e9:be:ed:21:76:7f:9c:57:92:5f:aa:
                    e4:87:e2:b9:84:51:99:9b:99:5e:87:2f:1b:b6:bd:
                    f6:c4:84:1c:54:ed:52:b6:69:19:10:a5:21:31:d9:
                    be:a6:aa:7a:3f:4d:d7:f8:cb:1b:95:5c:e5:da:f2:
                    fb:a7:cd:47:b7:8f:e0:64:06:e0:5d:0a:b6:3e:10:
                    4b:e2:2e:e0:83:dc:a0:5f:af:00:6b:1c:ef:15:cf:
                    fb:09:cb:d7:03:6e:1f:7f:6b:24:1c:fd:93:17:19:
                    59:8e:7c:5a:0e:51:cb:bf:18:e2:56:da:90:1b:7e:
                    6d:03:21:39:84:8c:19:8e:bb:a4:b7:4d:d4:d4:15:
                    c0:43:5a:5d:d4:f4:a1:22:85:6e:d4:b1:db:84:80:
                    cb:8c:37:46:af:58:0f:03:90:7a:e7:15:0f:df:9c:
                    ec:a8:02:91:b2:ba:a0:b5:49:40:45:e3:e3:3a:48:
                    e4:ec:76:bc:98:10:c8:c5:ae:48:ba:5f:8f:f3:ae:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:45:7A:D5:61:87:EF:29:77:7A:78:FA:39:30:65:5F:CE:D2:92:B1
            X509v3 Authority Key Identifier:
                keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:51:26:36:c6:f5:e8:4f:e2:81:e4:25:62:5b:bf:a7:40:
         b5:50:71:20:3a:e0:56:9c:cb:de:56:cd:f7:77:41:e5:0a:13:
         26:d5:65:bb:72:7e:64:af:f9:80:96:15:1a:c8:ac:9d:65:06:
         cb:97:96:7b:7c:61:2b:dc:03:4d:e1:99:86:06:69:42:ed:14:
         65:da:3e:06:0f:80:6e:8c:df:8e:0d:1a:97:c8:b4:d4:65:56:
         0b:cf:70:b2:21:89:6a:c1:4d:47:7d:80:cf:3e:68:36:6c:cc:
         5c:7e:04:92:72:a3:17:a5:48:1e:0a:7d:a2:35:6d:91:ee:04:
         b0:c8:52:d0:0e:7b:68:09:b5:82:18:a9:38:8f:0a:36:1d:5d:
         f4:1b:14:1b:00:02:9c:7a:70:30:7f:44:60:31:8e:95:ec:c5:
         88:55:c9:2c:16:ef:f5:64:05:e4:42:19:e8:f1:52:d1:d2:1c:
         4a:36:b8:d1:ce:e1:d0:10:17:3d:a2:1e:d1:ae:b7:5e:8f:60:
         6e:ad:dd:e6:88:ed:a9:1f:90:5b:6f:89:4e:dc:1c:5d:e1:11:
         a2:84:6c:d2:75:6d:65:d8:cd:ee:4d:c2:27:90:bf:38:f8:cf:
         83:22:a8:28:4f:8c:68:89:2a:eb:bb:4d:3b:cd:4d:34:59:d7:
         70:ef:14:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/u114CjCltqQ00K9ZTsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZmMyODc5NTAwZTFlYjgwODU1NzA1Y2Y4NDM1ZTAzNjM1
MTM3ZGUwHhcNMjYwNzIzMjIwMDUzWhcNMjYwNzI0MjIwMDUzWjAzMTEwLwYDVQQD
Eyg0ZjQ1N2FkNTYxODdlZjI5Nzc3YTc4ZmEzOTMwNjU1ZmNlZDI5MmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jWDmaTjb5/q+3v+USNsSx+f0CNB
B9RqYhPd7jIdXzXkPzPMpY0R2g/Pl2wv6KUBCEytlMRDmUtlQJCiJNVf6b7tIXZ/
nFeSX6rkh+K5hFGZm5lehy8btr32xIQcVO1StmkZEKUhMdm+pqp6P03X+MsblVzl
2vL7p81Ht4/gZAbgXQq2PhBL4i7gg9ygX68AaxzvFc/7CcvXA24ff2skHP2TFxlZ
jnxaDlHLvxjiVtqQG35tAyE5hIwZjrukt03U1BXAQ1pd1PShIoVu1LHbhIDLjDdG
r1gPA5B65xUP35zsqAKRsrqgtUlARePjOkjk7Ha8mBDIxa5Iul+P867+awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9FetVhh+8pd3p4+jkwZV/O0pKxMB8GA1UdIwQY
MBaAFPb8KHlQDh64CFVwXPhDXgNjUTfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZ3b2VWQU9IcmdJVlhCYy1FTmVBMk5STjk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lZWViYTMtYjAzNC00M2Q5LThlNDMt
NzQ0NzJlMzk2ZTg1LzEvOXZ3b2VWQU9IcmdJVlhCYy1FTmVBMk5STjk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lZWViYTMtYjAzNC00M2Q5LThlNDMtNzQ0NzJlMzk2ZTg1
LzEvOXZ3b2VWQU9IcmdJVlhCYy1FTmVBMk5STjk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRtRJjbG
9ehP4oHkJWJbv6dAtVBxIDrgVpzL3lbN93dB5QoTJtVlu3J+ZK/5gJYVGsisnWUG
y5eWe3xhK9wDTeGZhgZpQu0UZdo+Bg+Abozfjg0al8i01GVWC89wsiGJasFNR32A
zz5oNmzMXH4EknKjF6VIHgp9ojVtke4EsMhS0A57aAm1ghipOI8KNh1d9BsUGwAC
nHpwMH9EYDGOlezFiFXJLBbv9WQF5EIZ6PFS0dIcSja40c7h0BAXPaIe0a63Xo9g
bq3d5ojtqR+QW2+JTtwcXeERooRs0nVtZdjN7k3CJ5C/OPjPgyKoKE+MaIkq67tN
O81NNFnXcO8UXw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:33 2026 by rpki-client