Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          4KeEaI6keDqxx5+nsh1lu/l9g9mcXuqccvqnAd72XHU=
Subject key identifier:   22:2B:52:FB:DD:C7:99:6E:73:DE:CE:E9:BD:92:C1:82:16:17:C6:FC
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       019F91A3F81CE1DAC4D2F366B1DF87A05838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          06F4
Signing time:             Fri 24 Jul 2026 01:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:09 +0000
Files and hashes:         1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=)
                          2: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: oA8wQyv/cA+nFf+onyCFkKWPOhJaxkQS4Y8W30Tn4Ys=)
                          3: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=)
                          4: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=)
                          5: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=)
                          6: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=)
                          7: v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa (hash: gPHxfBPLjS7r3KK8sjMCL/yxvco773JImBamks13aRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:f8:1c:e1:da:c4:d2:f3:66:b1:df:87:a0:58:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Jul 24 01:01:09 2026 GMT
            Not After : Jul 25 01:01:09 2026 GMT
        Subject: CN=222b52fbddc7996e73decee9bd92c1821617c6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:8e:d3:8c:db:3d:88:08:b2:b9:f6:ce:92:
                    d8:f2:55:14:6e:1f:16:31:93:97:6f:3f:f8:cf:34:
                    6e:76:72:d3:19:7e:97:d9:af:9c:7d:df:ff:e0:14:
                    1d:6f:56:cc:2c:0e:11:39:dd:d8:89:0c:40:6f:1e:
                    ed:a4:1f:1e:18:a1:49:5e:3e:f8:2c:02:ce:c4:24:
                    87:96:f1:5f:ff:77:77:3f:61:5f:7c:64:89:61:4b:
                    8a:90:fc:ab:3e:d3:ad:72:0e:1d:9b:5d:a8:dd:71:
                    a0:ca:0e:a0:ad:01:21:46:3f:a2:8e:0c:33:ec:90:
                    49:ee:f5:01:a4:6b:00:7d:6a:c5:12:5c:92:10:14:
                    50:74:a1:54:0f:ae:97:f5:f4:c7:af:54:67:0a:20:
                    46:f3:70:ba:5d:1d:f0:35:e5:19:26:ea:9b:8c:66:
                    53:ff:df:61:a3:64:07:cb:60:1b:d5:b9:8e:d8:3e:
                    4b:1b:17:f4:49:96:20:29:29:4c:a9:0b:b4:ef:49:
                    30:9c:e2:e9:52:53:86:19:8c:e7:c0:46:7e:29:be:
                    54:c8:87:ad:db:fe:a4:15:9b:4c:4a:70:09:5a:f0:
                    a3:e2:47:ae:44:97:11:e4:a2:92:2e:b3:75:34:cb:
                    b8:08:b7:51:42:9e:f8:bc:1a:a2:d6:92:d6:0b:9c:
                    93:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2B:52:FB:DD:C7:99:6E:73:DE:CE:E9:BD:92:C1:82:16:17:C6:FC
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:21:cc:31:98:cf:5a:11:b6:86:4f:d3:d9:52:ce:da:6f:
         a4:4d:05:72:4a:e5:67:41:3d:b6:29:e6:92:25:36:89:ef:34:
         85:56:5b:13:9b:b2:ac:76:f9:97:65:7d:18:91:fc:1b:8f:9a:
         59:08:87:d0:b5:f8:05:41:a0:bd:d4:54:6d:20:66:f7:8d:9e:
         a4:dc:7b:ec:32:01:c7:3a:0d:7e:23:38:e8:83:64:3d:a9:9f:
         9e:97:13:f8:81:0f:39:ec:6e:4e:65:06:b0:97:68:23:19:57:
         fc:35:ed:f4:0c:c4:fe:60:1c:49:d1:cc:39:13:85:1e:f1:52:
         50:51:23:95:5c:af:9e:5a:fa:a4:df:fe:83:3e:61:ed:96:a6:
         74:1f:42:4c:26:d7:e5:8c:62:18:4b:c0:23:a9:b1:7f:a5:26:
         89:ff:15:ce:96:b7:d8:50:52:69:9e:81:3d:50:87:46:bc:62:
         9f:50:84:9e:16:75:57:d1:fa:9a:10:1b:ec:56:1b:0b:fd:6c:
         d8:9a:1b:cd:0e:f9:11:5e:92:1d:7a:70:06:25:8c:43:77:70:
         da:d1:66:de:f9:5a:0e:5c:5e:1a:aa:c6:0e:c2:28:43:93:0a:
         be:b0:93:46:a9:07:ec:34:07:62:f9:c0:41:92:f8:4b:1c:bf:
         34:b5:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:37 2026 by rpki-client