Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File:                     9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier:          ZVMm/1K1xHDXN2STlN8UOdAGYnhjTOkvE5rFnBhG8pA=
Subject key identifier:   95:4C:38:BD:20:F1:43:96:51:37:AF:94:FF:D5:D7:A6:08:01:3E:61
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer:       /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial:       019F90FE5CCC685206457A43CC55C3F4FB5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number:          07E5
Signing time:             Thu 23 Jul 2026 22:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:16 +0000
Files and hashes:         1: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: lleiAigxKkwxvp+gnakHQHrvV9N16Nkmye+nNJjeYfc=)
                          2: QswWzxGJPrCuags3T3sVZhymc5Q.roa (hash: /433oyyX1AGDgQHu0Vt/5hnmhr/+/BlPoLd3zml5Aq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:5c:cc:68:52:06:45:7a:43:cc:55:c3:f4:fb:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
        Validity
            Not Before: Jul 23 22:00:16 2026 GMT
            Not After : Jul 24 22:00:16 2026 GMT
        Subject: CN=954c38bd20f143965137af94ffd5d7a608013e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:57:df:10:d3:a0:6c:11:01:04:5a:19:34:ac:
                    29:ea:17:ba:b8:03:44:fe:4c:0a:bf:5d:ff:29:e3:
                    09:91:2c:17:11:13:dd:2b:23:8a:e8:ba:57:40:10:
                    47:d8:e0:cb:f3:ce:fc:95:e9:4e:7d:f6:9e:ae:97:
                    fc:9a:d9:b5:c4:a4:e8:17:e5:12:8b:04:f8:52:83:
                    14:5d:fc:f6:82:5f:d8:6a:9e:3b:f3:f5:6a:53:b2:
                    bc:43:a2:22:e8:c5:15:25:b9:5c:d1:dc:10:71:d3:
                    d8:42:07:b6:ca:d3:f2:8b:59:ae:4b:f6:ba:e6:0d:
                    5c:b0:34:f5:86:f4:f0:3a:da:e2:59:13:88:0e:e4:
                    6e:f2:65:f0:9c:18:5c:ca:0d:1a:95:91:87:1d:b0:
                    8d:c1:fb:3c:24:f4:62:5a:2a:29:b2:75:b8:b6:98:
                    2d:75:53:20:68:a6:5c:17:25:c5:fa:43:75:f5:78:
                    de:cc:e6:bd:2e:d6:3d:87:ba:21:c9:a9:d6:cd:d9:
                    ec:f1:9b:5d:e9:ad:5a:27:48:95:3e:1a:7b:5d:33:
                    5d:de:04:91:0c:76:30:7f:5f:64:09:d6:31:3c:bc:
                    a9:ce:83:a5:3d:a8:f6:49:7b:ea:fe:6b:fb:c9:35:
                    e8:46:cf:7b:1a:3f:fa:5e:0b:97:b4:c8:76:70:2e:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4C:38:BD:20:F1:43:96:51:37:AF:94:FF:D5:D7:A6:08:01:3E:61
            X509v3 Authority Key Identifier:
                keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:5e:b6:59:16:64:06:0b:24:4d:67:9d:ee:66:1d:4a:29:
         e0:68:88:35:e8:d7:14:f3:c3:dc:b4:ec:38:74:41:86:54:9a:
         c2:18:6b:3b:be:3c:da:36:41:70:24:df:f3:52:42:68:2f:58:
         69:03:14:ca:3b:cf:25:b5:1d:87:57:2e:8e:83:f6:14:25:7d:
         01:e2:44:22:cc:78:5a:31:a1:7d:39:4e:ca:09:74:72:9f:4c:
         30:56:b1:2f:d7:e8:fb:0f:90:1d:69:12:4b:49:20:81:5d:bf:
         52:16:8d:b0:48:9d:75:1c:db:81:d7:ad:4b:af:82:28:4c:9a:
         b3:bf:f4:65:22:51:3e:c9:c4:16:ee:e6:4b:c4:df:88:9b:c5:
         1f:ad:18:43:3e:ae:75:dc:9a:11:b4:a2:f7:0f:7a:18:22:75:
         cf:ce:70:bb:f9:b5:04:f4:99:00:7e:6b:32:eb:e1:36:99:b1:
         a0:d6:02:0f:bc:57:65:e2:0f:eb:a1:60:b3:d6:9e:fe:d4:e4:
         a0:0c:cf:aa:f1:71:50:0f:cd:15:fc:3f:f1:b9:8f:58:4f:38:
         36:7d:3a:ca:31:81:e3:20:fc:4c:25:e6:03:1a:2f:97:51:4e:
         89:03:84:5c:d6:55:e2:6a:9a:1d:a3:81:0e:00:c1:e4:ca:bb:
         fd:08:9a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/lzMaFIGRXpDzFXD9PtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YWJjYzc5YTM2N2Q5YzAxMmMxNjg0YTg0MjI5OTZjZGM0
M2RlNzYwHhcNMjYwNzIzMjIwMDE2WhcNMjYwNzI0MjIwMDE2WjAzMTEwLwYDVQQD
Eyg5NTRjMzhiZDIwZjE0Mzk2NTEzN2FmOTRmZmQ1ZDdhNjA4MDEzZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51ffENOgbBEBBFoZNKwp6he6uANE
/kwKv13/KeMJkSwXERPdKyOK6LpXQBBH2ODL8878lelOffaerpf8mtm1xKToF+US
iwT4UoMUXfz2gl/Yap478/VqU7K8Q6Ii6MUVJblc0dwQcdPYQge2ytPyi1muS/a6
5g1csDT1hvTwOtriWROIDuRu8mXwnBhcyg0alZGHHbCNwfs8JPRiWiopsnW4tpgt
dVMgaKZcFyXF+kN19XjezOa9LtY9h7ohyanWzdns8Ztd6a1aJ0iVPhp7XTNd3gSR
DHYwf19kCdYxPLypzoOlPaj2SXvq/mv7yTXoRs97Gj/6XguXtMh2cC7EGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVMOL0g8UOWUTevlP/V16YIAT5hMB8GA1UdIwQY
MBaAFPSrzHmjZ9nAEsFoSoQimWzcQ952MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0Yjgt
ZGU0NGVlODE0NzBiLzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0YjgtZGU0NGVlODE0NzBi
LzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFhetlkW
ZAYLJE1nne5mHUop4GiINejXFPPD3LTsOHRBhlSawhhrO7482jZBcCTf81JCaC9Y
aQMUyjvPJbUdh1cujoP2FCV9AeJEIsx4WjGhfTlOygl0cp9MMFaxL9fo+w+QHWkS
S0kggV2/UhaNsEiddRzbgdetS6+CKEyas7/0ZSJRPsnEFu7mS8TfiJvFH60YQz6u
ddyaEbSi9w96GCJ1z85wu/m1BPSZAH5rMuvhNpmxoNYCD7xXZeIP66Fgs9ae/tTk
oAzPqvFxUA/NFfw/8bmPWE84Nn06yjGB4yD8TCXmAxovl1FOiQOEXNZV4mqaHaOB
DgDB5Mq7/Qiabg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:49 2026 by rpki-client