Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          oDT3e7TI62C8bqZDubwZpt1NsloDeDo2wl1rrcVpMbw=
Subject key identifier:   22:54:4E:30:0D:D6:83:97:39:9C:BD:DB:4C:24:96:7D:8D:7A:91:2C
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       019F92B634174938B372913325925CC135BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 06:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:42 +0000
Files and hashes:         1: 8ki6p7N4UmEmV-0NazqEv7cAQKc.roa (hash: Q0BUMMV+0mfUnsBWl6XxVsO5hGuTsx5iHlZ2d9i6cbo=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: QEUA1BXFJD3Wgvde8NwsBiNboqrc390tOCFNRBz6TBc=)
                          3: Njus34_tWTQbMZlE1tRpeQUdH2I.roa (hash: 87ImyGsbG7v1MN92b3+FnhDyYHAWQQrZK7ULWDILgcQ=)
                          4: _DgxgPBMn4GEtr1HFV4lxED-jk0.roa (hash: 7MO54lxduq+XFWhLRW9Dq64qSqZFXeJN+DNM88s/Oz4=)
                          5: jI_ogoD6SCROAfC2uF5kFRHPxqA.roa (hash: sveu3znN5dPwYIjmbfsqGbK76GO+Tvbu31qn7+7Nv0Y=)
                          6: jvsxNshZlNTMsfGWs2Sh1xRbS4o.roa (hash: qSVicAoSlx92lOm4hijWey1zcFGYeV01I7K4wDaTK40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:34:17:49:38:b3:72:91:33:25:92:5c:c1:35:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Jul 24 06:00:42 2026 GMT
            Not After : Jul 25 06:00:42 2026 GMT
        Subject: CN=22544e300dd68397399cbddb4c24967d8d7a912c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:2d:36:3d:df:6b:bd:c9:29:22:ea:3e:b0:
                    41:52:c1:59:55:66:10:e5:04:fd:28:2a:1b:c5:31:
                    53:9b:2b:10:84:0b:6b:c6:7f:78:3d:bb:b7:80:29:
                    ab:b9:dc:86:8b:f5:f0:a5:ad:77:99:8c:b9:60:22:
                    3f:4e:80:a3:ff:78:60:0b:c4:25:81:78:1c:10:c8:
                    31:f9:bf:32:89:95:1d:14:0e:2f:9d:23:b0:5c:d1:
                    4c:82:66:d3:ed:8b:d5:46:ea:3e:d6:49:3b:43:1d:
                    b6:51:a5:20:46:b6:d8:b5:c8:f1:bf:a0:d9:f5:f9:
                    21:76:57:61:af:75:c6:2b:54:10:31:4b:e1:30:21:
                    28:64:ac:87:46:6b:4a:f9:b6:32:12:13:6a:78:ab:
                    f1:4a:a7:a1:32:3e:eb:e1:ff:f5:26:90:fc:dd:ee:
                    8d:2b:24:0c:c2:78:df:3e:92:02:86:5a:3e:31:4d:
                    6b:40:ae:11:cc:b4:5f:a4:31:dd:db:6e:80:da:8b:
                    b3:d7:ca:48:8c:d9:d6:8b:1a:62:7b:ed:99:e4:ba:
                    b2:2c:dc:87:b1:0d:e6:74:7b:d3:64:ad:4b:aa:58:
                    87:d1:1e:36:e7:dc:29:25:e5:3b:6e:8c:9b:cd:38:
                    e0:67:5b:f6:40:cd:73:f0:c3:8e:f1:53:e3:d4:02:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:54:4E:30:0D:D6:83:97:39:9C:BD:DB:4C:24:96:7D:8D:7A:91:2C
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:ca:2b:02:d5:d2:78:25:a4:0d:a4:59:ba:1e:28:15:bc:
         ed:0d:6a:ce:38:22:67:ea:9d:89:9f:ba:41:2f:f6:f3:a0:67:
         5b:ba:3f:bc:77:0a:89:67:e8:5e:55:82:f7:42:04:e5:5d:d7:
         41:d0:2e:60:0c:14:24:25:33:9d:fa:22:4f:50:1c:c7:16:ba:
         4c:a7:88:29:68:9a:c7:83:6e:06:0f:7f:0f:f1:7d:af:8b:9d:
         45:80:9f:21:cf:e5:b9:60:9a:c4:2f:2f:b9:e1:72:91:10:ce:
         67:b5:93:14:a0:bd:89:1c:c3:7a:06:f7:27:94:8a:5f:4a:4e:
         ad:e2:51:bf:52:2f:f0:9e:7c:e7:08:4d:2a:12:fe:9b:08:24:
         c7:7a:d8:34:06:7e:59:88:f9:fc:5a:73:61:6b:e6:fe:90:49:
         7d:f3:da:1a:a5:8e:26:68:ef:61:2b:b9:34:fb:ba:1d:9c:b8:
         08:5c:a4:ac:61:48:92:0a:6a:98:d9:91:86:7e:ae:9a:4f:75:
         3b:8a:14:94:00:ee:2c:4b:9a:82:1f:cf:4b:87:e5:69:b6:37:
         6c:88:bc:e2:52:1e:15:72:b6:1d:b3:d0:20:52:b7:90:4f:63:
         2c:9a:21:c0:17:d3:23:41:19:80:3f:92:3b:69:59:6f:b4:10:
         22:12:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:35 2026 by rpki-client