Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File:                     9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier:          xwDnKerduUfpDMIEQq1mgVr7uZTWgPBd0cMgmv8PJRE=
Subject key identifier:   B4:C9:5D:1F:E3:2A:DA:E0:A9:76:BF:B3:31:5B:48:5B:D4:80:9F:56
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer:       /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial:       019F90FF34D5C37F543A22E850A159CF840B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number:          19EC
Signing time:             Thu 23 Jul 2026 22:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:11 +0000
Files and hashes:         1: 0-tptR07qPQI1PrLFZ2Spsmo9wI.roa (hash: xdq/IhgnMxgabiXLMEzmuyfP/vCUHuNiO8WYDGCMQ6E=)
                          2: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: t/vy6q8YKTV0bqAKmVZuiDpcyof8YGE0ViJSKEkuVFM=)
                          3: ATW5QVX78zajRacvXNXBk3Aly-g.roa (hash: Tr/C5en3rO3/GmpPwhKz36QysVFer0FW+e0wXsc+bew=)
                          4: GEoXY8Eo2XzgeItRTgPzZeQHm6s.roa (hash: PrlMHiO761T6U6jqe8Q3zRA47bqAwm7GlV8y8DHOJEs=)
                          5: TZb0pwqKAULgiO7MxUXFvu2eCDY.roa (hash: xx3QLAhALsGor/waOfuSlLQuXwnX4zFtt11tExzIAAg=)
                          6: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
                          7: qmzO7mlQad_7dlbrAr1Mw_1dWQ4.roa (hash: aOy0qMqofYClfKxTTVggVX6wSS7nXBYoHRRV19W75MY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:34:d5:c3:7f:54:3a:22:e8:50:a1:59:cf:84:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
        Validity
            Not Before: Jul 23 22:01:11 2026 GMT
            Not After : Jul 24 22:01:11 2026 GMT
        Subject: CN=b4c95d1fe32adae0a976bfb3315b485bd4809f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:cb:e6:fe:35:83:80:90:bc:66:ab:f5:07:
                    6a:06:5c:da:ab:31:f7:a9:5e:ab:0e:8d:5e:c0:55:
                    ff:8f:7e:20:0a:e8:24:50:f0:3f:fc:6e:6e:4a:07:
                    f8:32:e5:9c:2e:a9:87:80:77:44:c1:96:f1:b7:24:
                    f7:bd:df:78:43:34:b4:e6:5e:a5:c8:d7:a2:45:b6:
                    69:4d:72:7d:b6:ab:31:4e:ea:e8:de:90:ab:e2:4e:
                    f5:77:58:7e:25:bb:96:b6:d6:b8:94:02:88:2b:5c:
                    c8:b6:b8:f0:5a:71:fe:ff:7a:6a:08:bc:17:9b:ea:
                    7a:07:7a:4a:c2:06:4a:8c:b9:23:08:ee:b2:ca:37:
                    34:7c:cf:d4:f3:35:96:75:21:22:3c:8a:05:f8:f0:
                    8d:52:2b:10:6c:1d:4e:de:10:f0:1a:2e:2f:11:b6:
                    4a:6c:4d:a6:b6:01:e3:cf:bc:8b:9d:aa:c2:e0:f2:
                    e5:5c:bc:2b:e2:e0:58:e8:8f:81:fd:2f:26:2d:f2:
                    40:7d:f7:d0:2f:51:be:1d:9f:67:8f:f8:ee:2b:70:
                    7d:2a:ae:70:dd:74:0c:52:12:40:8f:fe:45:4f:5d:
                    ac:af:a7:40:57:02:22:fc:c5:84:ce:b6:94:53:cc:
                    36:06:b7:7b:fc:24:d6:45:f6:f1:82:b2:c8:0e:a6:
                    e8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C9:5D:1F:E3:2A:DA:E0:A9:76:BF:B3:31:5B:48:5B:D4:80:9F:56
            X509v3 Authority Key Identifier:
                keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2d:01:a1:d1:85:4b:b6:2d:e9:28:75:a0:89:f0:16:60:16:
         fa:9d:c8:00:23:72:c7:b9:31:d6:78:09:17:ad:f3:d8:41:48:
         bc:d9:e7:9a:c8:7c:20:e7:a2:bc:ea:e5:d7:e0:87:4d:8c:c3:
         2d:93:0c:a1:3f:0b:95:32:17:1d:6b:79:03:d0:da:43:bf:8f:
         fa:ec:09:99:8b:33:94:be:7e:20:e6:e4:bc:9d:80:85:82:52:
         d4:f9:9c:8a:61:71:b7:40:55:72:71:64:f5:fd:cb:4f:2d:f8:
         e8:34:0b:be:cd:6a:a6:1c:55:da:0f:4b:57:bc:09:74:5a:f6:
         06:0b:2c:3f:73:c8:b4:dc:db:84:f3:d6:6c:3f:ba:ce:35:01:
         76:0e:cd:1b:7e:82:d6:fb:eb:79:15:96:ef:30:4a:8e:06:f1:
         71:12:22:60:b9:17:52:81:fb:06:04:f6:74:a8:38:17:67:d5:
         33:45:91:3d:93:6d:60:49:d6:33:60:ef:96:35:fa:89:dd:56:
         1a:d4:ca:66:0b:5c:83:8c:3b:8a:1a:cf:e1:91:25:a2:32:ea:
         12:fb:5e:de:09:0e:26:22:f6:d1:78:14:53:06:e5:3c:a2:83:
         0d:99:18:c1:5e:88:a3:37:b3:14:7d:eb:a2:4b:c6:18:af:a5:
         2b:1f:93:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:32 2026 by rpki-client