Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File:                     9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier:          CqqkyaNbZ+ZeZ0SlLXZkjohzk8lo6NMC/zzCSRo9VR4=
Subject key identifier:   AD:8C:CD:C9:4D:DE:92:15:AD:4D:24:B9:D3:8A:7E:F0:9A:24:72:E4
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer:       /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial:       019F8F7E70C3D86E68A08C96E204F80838B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number:          0490
Signing time:             Thu 23 Jul 2026 15:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:56 +0000
Files and hashes:         1: 7_zn84ybIr1uylkitwOR1cEu2dI.roa (hash: 2W6Vxmwk8XQBE6BnPj2SuKeyu76vgg2avkcyHjCtB64=)
                          2: 8qI5M9nt77vE4nTZuhI3O-_7Moo.roa (hash: bhOfxE1N9Q9DLTIZ9ruXl8yH7rMWdChvmxBcbOxnD1I=)
                          3: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: hl0qEWK86otp8a4Z4W3Nss6GsRPEmFKTGGMV8q5KqQg=)
                          4: I-XIjRxgkdNZeZ6XgcxI96kMFwI.roa (hash: /L+nfUszoFluPyMyZo9VlBC8cE+Ie4cQ8KAxPH1RRAw=)
                          5: iCQOeluGzuF2H3yby0GDplaPkdI.roa (hash: FSXXrDNKGzru4cBB3J/wsVuN39ULCg+BCEi5BmI7ZZk=)
                          6: mzDYp7n26mDiWHNdtuApd9PtwRI.roa (hash: B9knfXLtUIlMboxQnejwbYi+kBKU6xfPLrCe2Bf2F4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:70:c3:d8:6e:68:a0:8c:96:e2:04:f8:08:38:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
        Validity
            Not Before: Jul 23 15:00:56 2026 GMT
            Not After : Jul 24 15:00:56 2026 GMT
        Subject: CN=ad8ccdc94dde9215ad4d24b9d38a7ef09a2472e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:39:54:b9:28:6b:5d:6a:b0:5c:68:05:9d:
                    c7:ba:53:99:ec:75:76:82:08:e3:be:8f:0d:a5:df:
                    e9:af:10:0b:75:cf:20:98:ae:81:9e:6e:4c:69:0c:
                    2a:f0:41:a2:9f:08:b5:19:3c:61:31:4b:a4:d7:73:
                    50:c1:91:42:a0:37:ca:0d:be:98:ba:31:36:41:dd:
                    b4:fc:5d:5d:15:81:9a:56:9d:9f:e0:ff:75:0c:70:
                    5f:39:50:ce:59:83:21:10:30:aa:e3:f8:a1:c4:68:
                    eb:74:86:f9:81:2d:a4:aa:45:ab:4e:55:b5:28:96:
                    48:db:c2:7c:ce:6c:1b:b8:0f:d2:89:07:01:83:3d:
                    c3:4c:4f:0e:e6:6c:2a:58:19:f0:a8:9c:cf:01:b8:
                    85:8b:5e:fc:fb:d9:bf:cf:fe:6b:51:1a:80:e5:58:
                    c4:3f:17:6a:72:8b:bb:76:ba:21:8d:a3:7b:26:91:
                    95:47:71:bd:49:db:ff:7b:1b:7e:92:9d:9a:c2:4b:
                    7b:ba:8f:3f:2d:8d:80:f4:f9:75:ed:3a:d0:8f:7f:
                    b4:a7:b8:d1:83:14:1c:3b:4c:a2:72:55:9c:3c:72:
                    45:de:c9:3b:51:c0:53:37:14:9f:99:84:66:01:b0:
                    7b:12:7f:b4:ea:a0:35:63:02:23:2f:2b:93:d3:34:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8C:CD:C9:4D:DE:92:15:AD:4D:24:B9:D3:8A:7E:F0:9A:24:72:E4
            X509v3 Authority Key Identifier:
                keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:85:4b:7d:e5:79:31:95:c6:e0:97:a5:1f:73:61:8d:e0:61:
         e2:40:4a:38:7c:b5:11:d3:0b:7e:a2:4c:94:16:4f:20:d7:fc:
         86:70:04:a8:d4:64:2a:d9:61:5c:a2:a2:f4:7f:6c:c3:3a:4d:
         cf:48:c9:e0:15:f4:71:cf:38:b1:9a:2a:27:f5:76:77:8b:a2:
         50:e9:a4:db:c8:2e:05:ae:db:1d:c8:ea:6d:43:e7:0e:3d:79:
         ef:62:52:89:60:dc:32:dc:29:a8:44:7f:fd:a5:be:ff:23:64:
         9f:9c:23:e9:c2:c8:3d:26:54:b5:87:3e:0a:39:06:5f:7e:14:
         aa:c3:f5:78:42:5b:79:ec:e1:22:d8:cf:69:02:31:64:61:a3:
         07:f9:1d:77:d2:7a:f1:eb:af:b9:2c:90:8b:72:5a:5b:9e:48:
         80:f5:35:d1:8a:fa:f6:32:1a:34:69:10:ea:6b:73:07:fd:0d:
         13:1a:ee:8d:cd:71:39:0a:cf:60:aa:89:05:4a:77:53:d6:65:
         41:a4:2c:41:e0:1f:2c:b3:a5:d7:1d:2b:8d:2c:86:08:5a:c9:
         83:04:bf:a8:01:2e:77:4a:5d:2b:4e:3b:b3:43:64:1b:f4:cb:
         1c:e6:2c:97:37:0e:10:01:d2:41:79:cd:82:fa:10:a9:21:67:
         00:88:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:44:11 2026 by rpki-client