Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
File:                     9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json)
Hash identifier:          L3NVHTlAB0hTg4LzxwfybFWj6Ia6tv663thKDyuSIJw=
Subject key identifier:   B1:E0:6A:80:FA:9F:85:4D:56:2F:A7:19:D6:20:5A:AD:F8:DD:D5:9B
Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
Certificate issuer:       /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Certificate serial:       019F916CEAB38EE6949CE28D384F0F0F886C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
Manifest number:          032E
Signing time:             Fri 24 Jul 2026 00:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:01 +0000
Files and hashes:         1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: /lSd7fwTmbKfyda5RoVNMd/FHpF+JQAzS58wwjajuE4=)
                          2: BzRL5dLKwivSlyjmJMancnc4uqU.roa (hash: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I=)
                          3: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (hash: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw=)
                          4: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (hash: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:ea:b3:8e:e6:94:9c:e2:8d:38:4f:0f:0f:88:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
        Validity
            Not Before: Jul 24 00:01:01 2026 GMT
            Not After : Jul 25 00:01:01 2026 GMT
        Subject: CN=b1e06a80fa9f854d562fa719d6205aadf8ddd59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:04:3b:2c:bc:46:1e:94:7e:8c:f4:35:53:
                    9c:c2:09:79:82:2e:58:ab:a8:97:36:c3:04:dd:6c:
                    d7:a0:2a:a7:46:8f:14:21:9f:b9:f9:fa:aa:55:9d:
                    7d:66:df:0c:17:a9:1a:d7:f0:d7:dd:3e:fa:df:a4:
                    df:7a:12:f2:ae:b7:a1:56:34:bb:44:86:03:5c:28:
                    ee:b7:d7:b6:5b:d6:68:49:bb:13:3a:4b:79:15:bd:
                    7e:67:ba:1c:09:dd:76:fb:00:7b:1a:03:2b:e2:90:
                    d8:f1:68:e9:28:cf:0b:60:ac:92:da:9b:08:ac:39:
                    b9:1e:90:59:e4:7f:e4:ea:d0:fd:69:cc:53:25:d4:
                    36:a1:4d:c5:ad:18:7b:d7:c6:5f:59:e8:cb:d8:36:
                    89:d7:23:9a:bc:ee:30:c5:e2:f7:bd:c5:be:2a:bf:
                    1c:79:fe:4a:b9:41:5d:50:47:6f:6e:f3:b9:6c:10:
                    a7:73:59:c2:81:8c:1a:b9:70:dd:b0:f7:c8:6f:f9:
                    d1:c4:4d:b9:12:87:0e:87:d0:ed:cc:4b:ed:e8:fa:
                    4a:cf:c7:3d:fa:c7:e3:03:b7:b9:97:99:77:cc:27:
                    b1:ee:fd:3c:e6:39:2d:8d:d5:ce:52:6d:ad:d0:86:
                    9f:f2:39:c6:30:02:e5:f1:37:d8:65:c4:84:15:a0:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E0:6A:80:FA:9F:85:4D:56:2F:A7:19:D6:20:5A:AD:F8:DD:D5:9B
            X509v3 Authority Key Identifier:
                keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:82:2e:3f:c0:fb:71:57:75:63:21:d8:af:ed:3e:86:10:
         15:cf:ea:70:6f:d5:a1:9c:fd:5c:46:6a:88:39:40:51:06:42:
         0b:54:35:29:93:da:10:b9:d5:2e:77:88:92:4d:63:21:45:e7:
         ad:52:b4:a4:9d:95:2a:7f:25:32:73:41:9b:c8:3a:57:83:8a:
         e7:81:15:46:03:da:09:58:66:01:6e:d9:10:3a:7f:fb:7d:1c:
         ee:58:1d:ae:fb:7c:f1:37:12:61:e6:dc:da:aa:e6:38:30:a4:
         7b:6c:c6:38:b3:9a:fb:95:f0:ad:ac:25:af:60:c1:90:78:69:
         7b:61:f7:ff:84:71:55:9a:8e:08:bf:2d:98:34:2e:0a:a7:62:
         df:eb:c4:77:e0:33:73:55:d4:b4:74:29:7a:e0:40:da:fc:15:
         1a:21:a5:49:89:1c:c9:9d:aa:88:60:2d:5c:91:c6:a6:10:de:
         8e:b9:0c:ca:9e:af:79:8e:ba:0e:50:a6:24:c4:08:be:dd:fc:
         92:8f:d6:81:0f:63:91:97:67:81:2e:79:b5:29:e0:74:8c:67:
         db:04:e8:f2:8c:f1:f2:32:db:08:7d:8b:90:cd:d1:9d:00:98:
         bf:31:f4:a4:dc:14:46:ca:0c:0b:86:b7:ce:e4:bf:5e:b0:fa:
         c4:c1:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:33 2026 by rpki-client