Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File:                     9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier:          /BYjXKpa0wD+tyWXYr3fkZ5OO+TI7vMZk2ac+ZX0PvM=
Subject key identifier:   FE:73:53:04:00:D9:57:5E:2C:B7:96:1E:51:81:45:C9:9A:80:3A:E3
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer:       /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial:       019F8FB57BCBC24861F1DF2282372E5D5F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number:          06D1
Signing time:             Thu 23 Jul 2026 16:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:03 +0000
Files and hashes:         1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: nFzx6Rk4u7HdS9OnKatDTOpTejQYoy5I2isDQ7bT6bo=)
                          2: q_PyfNokBeIwV9ZVtxUDykAzbyo.roa (hash: nCsivWX18Ek0Fvcd2OhF9dAgd1gXwooWGtpWmt/HjOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:7b:cb:c2:48:61:f1:df:22:82:37:2e:5d:5f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
        Validity
            Not Before: Jul 23 16:01:03 2026 GMT
            Not After : Jul 24 16:01:03 2026 GMT
        Subject: CN=fe73530400d9575e2cb7961e518145c99a803ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:a8:a8:c4:a6:0c:4b:04:01:5d:b3:e9:b9:
                    f0:6c:b5:67:0c:67:b4:41:7d:31:4a:d4:6c:08:62:
                    2e:0e:b7:82:9e:f8:03:a9:48:ca:aa:0e:6b:d3:c2:
                    d2:6f:f7:47:1c:c2:43:d5:5a:cc:3f:28:30:35:89:
                    9b:5d:9d:76:9d:2e:76:34:75:52:6a:22:3c:28:68:
                    f9:b7:a5:96:28:3c:43:a3:ba:b6:b4:87:b9:cb:24:
                    51:cf:29:6e:ac:f6:a7:1a:8f:8d:44:25:1a:8b:4f:
                    c7:b3:9b:37:01:bb:fd:2a:bb:81:75:b4:3f:ca:9b:
                    d0:9b:eb:62:76:fe:8e:5e:d4:23:b6:5d:79:86:31:
                    e0:7c:14:d9:3d:49:50:a2:aa:7a:04:da:09:7c:cf:
                    f6:5a:41:b3:50:75:f3:fe:f0:83:02:1c:92:b3:86:
                    5a:6a:49:87:2f:06:30:aa:85:48:27:0f:08:a2:f6:
                    f8:a3:c9:7f:cf:7e:ce:f8:a5:12:88:1d:6e:21:d5:
                    25:2e:44:26:b2:c9:50:14:d2:3b:7b:6e:8b:04:69:
                    f1:21:3e:e6:63:26:19:a7:b0:08:c1:57:3f:52:d3:
                    e8:78:df:05:3b:c7:3e:3e:c2:b5:c1:99:18:3c:65:
                    d7:cf:90:7b:20:c4:f4:21:91:02:71:d0:e8:e7:ea:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:73:53:04:00:D9:57:5E:2C:B7:96:1E:51:81:45:C9:9A:80:3A:E3
            X509v3 Authority Key Identifier:
                keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:88:fc:f9:06:1e:03:5e:be:f2:e5:f5:c5:15:e7:ad:f5:0b:
         2c:8d:d0:ec:0f:51:47:f3:f4:b1:9b:d5:ed:bc:dc:e2:45:dc:
         c3:34:4f:f6:e4:b5:4e:12:cd:e6:56:57:c2:8e:99:7d:3f:c8:
         bd:6b:4b:29:06:7c:97:75:01:29:ae:0e:7f:45:06:70:ab:7a:
         f3:5f:fc:35:63:0a:d8:39:f8:64:a2:da:d1:2b:ec:39:c8:b0:
         f4:a4:0d:b4:52:c1:fb:3a:18:82:b0:9b:0b:8d:c5:ac:81:63:
         7a:fc:f1:7f:4c:72:04:93:33:4c:be:50:45:74:9b:fb:56:46:
         b2:1c:9b:5b:1a:80:c2:64:1c:da:31:71:2c:8f:7c:4b:ec:f5:
         22:a4:c7:4e:08:82:8e:fa:6e:65:4a:0c:da:fb:cf:00:a1:93:
         a2:4a:26:1a:bd:9f:bc:a1:d5:62:a4:af:98:7d:a8:f3:67:54:
         7b:f6:00:83:b9:b5:ac:0b:97:e9:4d:df:53:6b:0a:f4:ea:5e:
         5c:4a:4e:5b:bc:e4:dc:a5:57:a4:5d:83:be:11:63:bb:bb:ec:
         57:e5:04:db:a2:03:88:47:94:49:1a:f2:ae:e4:88:0a:ea:ec:
         62:82:f9:11:5f:98:5c:5f:ef:2b:bb:fe:9d:d4:bf:c6:d2:1b:
         8a:3d:09:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:58 2026 by rpki-client