Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
File:                     9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json)
Hash identifier:          vkCV59JFFR1ZDCkG44JG6/QYfPi4LuFvuLx6EMPiu9s=
Subject key identifier:   EE:7F:F1:67:1F:F8:82:3A:F0:2C:08:1D:2A:E0:D5:8A:45:1B:DF:D4
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Certificate issuer:       /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial:       019F9135CD4F060E28C59E103DD0D003D7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 23:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:50 +0000
Files and hashes:         1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: L+KTRGN8t0YeBwVmo9V4fGJgjGMhO9BerwvwhLVgdMI=)
                          2: D6pbu6PuaXGUO72aluwouFmWjyE.roa (hash: 8nTR6hgWB05NUmie1kc3rGQpyUGmaI7APNhiLwhFbGA=)
                          3: rcuhAyb47ghJSUkGluQz5xbi7a8.roa (hash: dSp7RJi/mX+RduoQcYjQOlir9QxlgPqiE3UuXIucR2M=)
                          4: tR_zS3A481vfOfnyyYvyFxLHia0.roa (hash: Qhq0h0WmbkiB7Z075UwkzQfNFRsgPnPMZNA9izf97NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:cd:4f:06:0e:28:c5:9e:10:3d:d0:d0:03:d7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
        Validity
            Not Before: Jul 23 23:00:50 2026 GMT
            Not After : Jul 24 23:00:50 2026 GMT
        Subject: CN=ee7ff1671ff8823af02c081d2ae0d58a451bdfd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:0d:eb:81:27:84:f8:19:25:50:22:50:f9:
                    b7:9f:93:90:4e:8a:93:7f:be:9a:b7:84:d7:d7:68:
                    02:66:ba:3b:01:73:02:ee:9d:89:82:02:1b:63:2a:
                    4e:cc:f9:50:16:81:5d:0d:c2:d2:2a:e7:3a:4f:51:
                    c6:cc:e4:41:ab:14:b0:33:0d:86:05:5e:95:01:79:
                    c6:ef:2a:a0:7d:04:90:07:7e:90:23:dc:e7:0e:42:
                    6b:69:16:5e:5d:b4:ad:94:0f:73:f9:33:ac:2e:d0:
                    3b:fa:9f:71:09:41:c2:50:d9:1b:3a:93:b3:6b:11:
                    27:ce:2e:f8:07:b8:7d:63:cc:70:51:34:db:3c:ed:
                    ad:02:4f:5b:28:0d:a7:6e:89:33:d2:35:06:ef:05:
                    27:ef:36:79:91:3f:f5:38:48:70:dc:74:97:c6:61:
                    8e:f4:bc:af:e9:a4:f5:39:3f:1a:25:3b:ef:0c:3f:
                    3f:0b:36:15:a1:15:2f:0b:1c:c2:6d:42:6f:0b:67:
                    95:20:33:d8:fb:fb:a4:62:bc:dd:4f:b7:43:fd:cc:
                    f5:d6:da:3f:52:f1:19:b6:8e:e5:d9:b8:91:2f:13:
                    eb:91:59:1e:f2:cf:54:ef:fa:b1:da:e5:db:fd:8e:
                    43:3d:2e:8a:48:65:4d:a7:1b:c4:43:c8:b5:69:a5:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7F:F1:67:1F:F8:82:3A:F0:2C:08:1D:2A:E0:D5:8A:45:1B:DF:D4
            X509v3 Authority Key Identifier:
                keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:10:cf:fd:0d:98:08:b3:1b:ef:29:03:3b:d4:f1:48:a0:
         c8:9f:cd:8c:dd:18:e7:ad:32:01:0c:6f:82:62:1a:28:bf:be:
         da:f3:3b:7b:8d:8d:4d:26:2f:d5:3f:ce:80:d3:06:4c:08:d2:
         4d:3e:ec:86:1d:a2:e4:b5:b8:31:1e:f6:08:45:d8:7a:4f:62:
         1d:0d:2a:e7:fe:fa:6b:e2:d1:ef:26:ef:0d:83:7b:be:1e:05:
         23:e7:24:68:dc:c8:cc:6a:aa:3e:64:fd:33:f4:d6:41:06:9d:
         50:8d:dd:5f:3b:b0:44:67:1d:73:03:ee:56:6c:6b:a0:25:0a:
         c5:8f:3a:d7:97:e8:9a:8f:99:40:76:50:28:74:e7:00:05:8f:
         1b:46:b8:11:b3:6d:59:ed:76:29:e7:e1:c3:c1:2d:7a:3a:f9:
         4a:0e:a2:cb:57:2b:c6:71:e9:66:7e:f5:1d:17:8c:0b:4b:39:
         88:ab:22:9a:b4:5b:c0:8b:05:5d:e6:a2:cb:39:84:40:00:96:
         ab:33:67:fa:f6:14:ce:80:0d:dd:6b:97:c7:d8:43:eb:d1:75:
         fb:4b:a9:91:69:3d:f7:c8:4d:45:4f:f5:4b:46:10:70:8c:45:
         51:32:0c:83:7c:72:61:ca:c7:d2:d8:4d:17:ea:29:9f:84:b8:
         2f:37:d0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:16 2026 by rpki-client