Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File:                     9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier:          BTigT2ycmNKMoRwLU3We0tnwxGyEq9/FcpTIJJ9ad+s=
Subject key identifier:   8C:BD:4B:54:D7:3C:5F:60:6B:FA:21:49:B5:F5:20:58:1E:3C:53:6F
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       019F90C76FEF3BA5C244A629181A94023880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number:          1A6C
Signing time:             Thu 23 Jul 2026 21:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:16 +0000
Files and hashes:         1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
                          2: 1-vkSUj3IhBaF6QCupk9p-QFNkpg.roa (hash: NyoZpDBj6nyKZfID52EDPnf8kCWXyPjqV37Bafp3IEk=)
                          3: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
                          4: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
                          5: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: 4bHr2lJOx4fsFsMVHCy+Z9sJC4PQwEj1bfj122qNELk=)
                          6: bSIf0T0EwRvYabxLmjmKKkxKJuc.roa (hash: QjhZut+rcecUKTU/gefSSs0Q8mSl4Rg0xTqiyiwiuWQ=)
                          7: k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa (hash: lMxKbbsuVDDpKDp0TZpDMbjhyk3buYEiXF/UkdpZabc=)
                          8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
                          9: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (hash: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:6f:ef:3b:a5:c2:44:a6:29:18:1a:94:02:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Jul 23 21:00:16 2026 GMT
            Not After : Jul 24 21:00:16 2026 GMT
        Subject: CN=8cbd4b54d73c5f606bfa2149b5f520581e3c536f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:40:7d:c7:37:d9:42:d8:9c:80:2f:f1:35:
                    1e:b2:62:8c:11:db:c3:61:74:39:11:eb:bb:05:58:
                    7b:67:b8:b3:41:6b:30:91:f2:9f:4f:02:ac:ae:bc:
                    f6:65:80:70:d8:e8:16:be:ed:9d:c8:33:d0:85:44:
                    c9:92:e7:0c:6b:90:45:6a:7a:8c:f0:86:fc:cb:aa:
                    1d:d9:dd:00:13:58:f3:bb:da:53:b3:74:86:4c:87:
                    a1:6d:2e:3e:2b:7b:2e:88:0c:cb:35:e5:a5:26:b5:
                    c6:e0:64:2b:41:1d:b8:5d:0f:d7:90:31:2d:dd:5c:
                    d1:3e:5b:43:f8:7f:c1:27:ca:3c:0e:e6:54:16:94:
                    d4:cd:7e:75:e7:a1:cc:24:b7:51:c2:f4:f4:fe:24:
                    57:32:15:1b:35:f8:be:11:bc:fe:a3:33:6a:6b:07:
                    ad:39:ef:96:00:f1:d3:3a:57:3b:d0:a3:c3:63:3b:
                    bc:38:9a:f0:cd:6a:c6:ba:eb:83:ac:19:29:be:a2:
                    96:ff:7a:77:15:ec:2b:d7:a5:81:58:6c:a1:5c:b4:
                    d8:8d:66:3f:9a:7e:23:a4:a0:9d:40:38:49:d8:4e:
                    1d:dc:6b:40:cb:1e:91:6c:95:c4:0d:af:71:94:ee:
                    f4:e7:53:6b:35:b8:74:b9:10:70:cc:cd:52:5a:5a:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BD:4B:54:D7:3C:5F:60:6B:FA:21:49:B5:F5:20:58:1E:3C:53:6F
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:1a:0e:96:47:1d:7d:f1:43:e1:b1:3d:33:28:1a:f5:c3:
         62:11:0b:8f:a5:42:a2:2c:d8:9c:ca:5a:d4:da:9c:bb:57:25:
         9f:46:b4:4f:2e:3d:b4:bd:92:95:f8:e4:f6:02:24:3e:bc:26:
         17:11:0f:e5:ef:4d:43:00:bd:3f:3a:f8:05:4f:e5:f5:b9:54:
         a2:99:8a:da:79:7e:55:74:19:38:32:c3:56:b9:5e:10:d5:65:
         96:66:f9:9e:94:a4:cd:d6:14:1b:3e:2f:66:cf:5c:e7:d1:3b:
         58:3b:e2:24:7c:f5:e2:47:93:9b:38:69:47:92:ea:48:c2:c7:
         42:76:b8:d9:5c:f9:7d:f3:19:60:96:7b:97:c6:62:96:cb:61:
         0a:09:56:28:57:35:93:10:53:0d:8c:b0:a1:4f:ca:3f:c1:ce:
         6c:f2:3a:9a:55:b2:d1:67:1b:76:5d:a9:c5:d5:66:dc:0a:29:
         57:cc:49:a1:6e:8d:64:a6:45:c4:3d:d2:b3:41:42:0f:ea:5c:
         56:f3:f3:6d:7d:59:50:7c:96:b9:bc:12:48:8f:17:f6:7b:f6:
         a9:f1:14:06:e4:76:53:f4:a0:cf:12:28:bd:75:f1:e9:82:b1:
         cf:eb:92:f0:06:07:e8:67:b3:36:3f:7e:8c:f7:99:be:d1:1a:
         d4:f0:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:49 2026 by rpki-client