Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
File:                     9vSDrNiLUfXUf1d_EBtUV3heDts.mft (raw, json)
Hash identifier:          sS/IYT55amhE1o0y0tY5gsj6jyZZ8B+XTc2soEjPAIA=
Subject key identifier:   5C:8D:E8:5A:15:B2:62:28:62:4A:2A:FF:77:D9:35:3E:A6:0F:54:AD
Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB
Certificate issuer:       /CN=f6f483acd88b51f5d47f577f101b5457785e0edb
Certificate serial:       019F8F7DFFABD855F0BC53BA6C37D3872CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
Manifest number:          0207
Signing time:             Thu 23 Jul 2026 15:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:27 +0000
Files and hashes:         1: 9vSDrNiLUfXUf1d_EBtUV3heDts.crl (hash: XZZejDkKIM09ckIjkyujzzw/t25+xbdSzC1Q5UYqE3I=)
                          2: h9dclcnj73gGMmqKRNemWaDpAK4.roa (hash: mJuahx80L+X55SPmqYQeNyVRCkJnTbE2MlO0Pta3IEU=)
                          3: tTIiXNFmVwT5T0hHiGKIodMu4-0.roa (hash: 1Yst/9/lTuLJaVKmnwJPraD68CwcsXf9gsuFNgo7ggI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:ff:ab:d8:55:f0:bc:53:ba:6c:37:d3:87:2c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb
        Validity
            Not Before: Jul 23 15:00:27 2026 GMT
            Not After : Jul 24 15:00:27 2026 GMT
        Subject: CN=5c8de85a15b26228624a2aff77d9353ea60f54ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:7d:5e:9d:70:17:59:0a:62:42:6b:54:91:
                    6d:83:82:66:57:8e:dd:20:8e:e4:8f:5d:22:6d:e0:
                    78:ca:fc:79:e2:f1:6f:79:ab:02:92:68:1f:f2:38:
                    d7:15:85:7c:48:88:62:57:fd:45:1d:31:7a:f6:af:
                    27:72:ee:64:04:83:bb:b6:a9:11:fa:c1:37:15:1e:
                    a9:b2:00:73:10:ec:4d:7a:39:c7:8d:51:23:47:0c:
                    38:49:3f:79:38:cf:de:30:a3:86:80:98:b6:19:2f:
                    38:52:84:21:bb:51:4b:44:4a:99:92:f3:c5:ea:ac:
                    92:34:60:b8:93:d5:9f:29:47:73:68:e6:25:29:ce:
                    9f:eb:de:17:d1:8d:3d:7d:0f:12:01:1b:67:14:48:
                    fc:7f:63:13:fc:24:89:86:32:47:de:e1:30:c1:32:
                    2e:1b:ef:3d:57:35:5d:a3:c7:35:35:7c:2f:a1:73:
                    c4:c6:71:c4:1a:3c:6b:ef:89:d1:48:bc:8b:39:44:
                    60:43:a3:3a:d9:40:fd:a5:49:1a:1e:00:dc:38:e6:
                    9e:f2:b2:cf:aa:74:b9:bb:c9:2d:8a:5f:c3:5f:76:
                    c9:56:49:53:bf:1a:e0:a6:d6:18:8c:d9:78:d4:80:
                    10:b8:e1:75:9e:a7:63:49:2c:4c:78:00:6b:10:25:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8D:E8:5A:15:B2:62:28:62:4A:2A:FF:77:D9:35:3E:A6:0F:54:AD
            X509v3 Authority Key Identifier:
                keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a5:3b:ee:7a:db:bc:70:cf:0e:cd:3e:c8:63:73:ed:80:5e:
         e2:3c:ed:75:7e:c5:df:b1:bb:52:96:e6:06:9f:84:2f:40:b4:
         5d:28:81:74:9b:b7:f0:4c:d5:d0:03:fd:57:e1:82:2e:74:43:
         09:fe:50:08:f6:2e:43:d3:f5:0f:66:12:7f:64:22:61:14:80:
         b8:4e:bd:14:22:57:4b:b1:00:58:eb:03:b6:ba:a4:ba:54:e6:
         d9:73:17:e5:e0:47:9e:f0:e0:65:d0:5c:4d:f6:20:39:7c:27:
         3f:cc:11:6a:33:7b:a9:19:ea:a8:dd:63:9e:73:85:f0:ad:11:
         d8:9e:89:8b:03:9c:d2:2b:0a:85:c7:ba:7b:c9:6e:2f:5c:3c:
         0b:d1:1d:0b:a8:ee:6d:cd:9d:6b:82:c5:ba:41:5f:c2:75:25:
         eb:db:22:bc:19:f6:99:37:67:12:5a:51:6b:37:7c:02:d8:7f:
         06:12:81:a9:9e:32:4b:36:8b:a6:fe:99:5c:cc:13:88:73:b5:
         bc:72:d4:6e:88:19:2c:58:2f:43:2f:58:bc:7d:30:2e:6a:fb:
         22:d5:bf:4c:27:56:05:41:73:ce:0f:8e:95:12:e5:8d:df:05:
         4f:33:cd:fd:9a:40:b1:fe:96:39:7f:57:a0:56:2f:99:d1:e0:
         72:18:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:13 2026 by rpki-client