Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          dZQtOTDkL4Da1Q/GOq8IJ8/W4sO3jdxAhLsCuF04y14=
Subject key identifier:   E5:48:BE:9A:67:7A:08:9B:4A:1C:C0:8A:BB:F7:83:F4:4B:EE:D1:23
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       019F92110C4BDDC544CD9EA7C8A0781BAA82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          19EC
Signing time:             Fri 24 Jul 2026 03:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:18 +0000
Files and hashes:         1: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (hash: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: apfNx7NHtVPEjY+Ra9IbXt96mQj7NqGR1ZgtpkEtMNQ=)
                          3: MNQFqrdvbEoxedHfrXynKifNGnY.roa (hash: O31r8g9C5kBDn8OSezJHwFB/Y59lZjW3Z0fIfncmogI=)
                          4: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
                          5: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
                          6: uKVnkxpc55UHCp4G3gmfBYK9lgA.roa (hash: Yl+4aX3AL4iwnArD6mGCgp0IBTVDchipN4aGOMzOCE4=)
                          7: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:0c:4b:dd:c5:44:cd:9e:a7:c8:a0:78:1b:aa:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Jul 24 03:00:18 2026 GMT
            Not After : Jul 25 03:00:18 2026 GMT
        Subject: CN=e548be9a677a089b4a1cc08abbf783f44beed123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:af:ee:fd:93:d9:58:8e:3f:4c:be:81:1e:
                    7e:02:2c:a3:1c:b8:0e:c4:3c:ec:25:16:5f:6a:74:
                    72:a3:74:28:c8:1c:e6:65:61:39:09:90:a8:da:a9:
                    e1:16:28:44:b5:00:60:a1:3c:d4:c9:cf:ac:47:d0:
                    67:ce:b6:fd:df:67:aa:1d:8d:2e:1e:46:ac:68:01:
                    19:41:64:7d:fa:7a:f3:b5:61:d1:51:d5:6b:ad:ee:
                    dd:5b:f6:5e:f9:f2:d4:54:03:2e:ce:e5:b3:95:32:
                    4a:e2:5e:e4:ac:eb:85:8d:a9:f3:f8:63:1b:3d:21:
                    8f:23:cc:99:62:0f:cb:1f:f9:0b:af:22:be:3e:b0:
                    3d:7b:d1:5f:9b:ed:8d:15:b4:29:62:64:78:37:7b:
                    82:4c:bb:9b:20:99:95:55:ec:c3:76:e4:4b:91:60:
                    ae:6b:50:14:67:fd:ee:fc:ae:6f:c1:ed:de:24:14:
                    75:10:50:2a:f1:e3:28:a1:cd:b5:ab:38:8d:aa:61:
                    b4:f2:21:b9:2a:e2:a6:29:e5:77:b1:6d:8b:34:f6:
                    74:f8:88:37:00:37:d6:f8:59:44:2a:83:ce:6e:1b:
                    e1:b4:6e:e0:f2:34:c3:fa:0c:30:71:fb:db:19:e0:
                    c6:1a:9b:ce:29:3e:37:9f:bd:07:c8:96:28:4e:10:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:BE:9A:67:7A:08:9B:4A:1C:C0:8A:BB:F7:83:F4:4B:EE:D1:23
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:a3:dd:c6:04:90:41:dc:a4:4a:31:a9:8f:c5:6d:c4:7f:
         db:0a:14:af:ce:73:da:c0:f0:44:f0:46:51:e1:91:7c:87:20:
         3f:50:a4:7b:b6:cd:e8:d4:f9:c2:e7:cf:25:1b:a3:c9:d6:5a:
         cb:a8:37:66:c8:a3:a7:84:30:c8:06:ee:58:e9:1f:93:d6:40:
         5c:7d:4b:ad:e0:01:88:b7:97:76:13:2c:9b:ac:71:59:e2:7a:
         9c:3b:be:ed:46:ac:30:5c:4a:49:54:7c:cb:fc:96:e0:75:96:
         9f:20:cc:41:c3:79:77:4a:65:9f:f3:1f:e1:3e:51:6f:4b:ab:
         77:cb:74:f6:c1:5b:02:2c:8e:ba:54:8a:db:29:a5:88:8c:aa:
         68:e2:da:cf:5b:14:a4:97:fc:ee:78:b0:2f:9c:00:71:50:f8:
         84:d2:aa:39:1a:ee:aa:ed:38:71:7c:94:fd:4a:f9:cb:02:65:
         82:b4:d6:7b:09:70:8f:66:f2:42:36:ec:86:2c:70:ab:59:95:
         ec:8a:63:01:72:7e:f6:62:b8:af:24:0c:e1:0f:15:ee:43:66:
         e9:d0:d4:2c:65:79:98:b2:0b:47:cf:95:e2:50:28:4e:0d:e6:
         8b:70:ef:41:4f:32:c5:00:f4:06:2b:ab:10:3a:be:ac:c9:bb:
         22:e3:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:17 2026 by rpki-client