Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File:                     9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier:          sVmnztCeHEYVlxUWPV0mnmFdbYPtehosLz7Nqn9r6+g=
Subject key identifier:   33:30:9D:9D:DE:72:49:22:83:3E:59:55:B5:8D:3A:71:08:AB:05:5A
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer:       /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial:       019F8FEBB266AFD43E1D2E78897C35B2D24D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 17:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:16 +0000
Files and hashes:         1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: fE2DqEvPbNXdCmYU7Wi1TNIRn04fGA7+yYizPOFIl78=)
                          2: Y6ybWhEjwuda51l0uiaZjIT-fg8.roa (hash: 8LGe+xcRdI8B6zAIoBChynO4rGVdoYzlhKSA0vPLuGw=)
                          3: aEVMMMA5f1UmRI8NYOUQQuTtgsQ.roa (hash: pdfghptkrLhCdjHFzkd4R/q6hTlSpA/AvR6T+/fF+rc=)
                          4: sbz6OVH06vkYwN8qjWyWv5JQ98I.roa (hash: mqPWKkpNLvEdA2xxPfKh+1E+EB8NghsX64s1n44EHeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:b2:66:af:d4:3e:1d:2e:78:89:7c:35:b2:d2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
        Validity
            Not Before: Jul 23 17:00:16 2026 GMT
            Not After : Jul 24 17:00:16 2026 GMT
        Subject: CN=33309d9dde724922833e5955b58d3a7108ab055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:a2:70:5a:11:3f:b0:70:56:1d:94:b1:8d:
                    ac:54:84:42:21:01:31:11:51:17:61:d9:27:f3:8d:
                    3d:b5:e9:1f:91:0d:c8:8a:1f:2e:63:16:7c:de:82:
                    02:27:a2:4f:fa:02:f9:ae:ba:62:26:2e:e9:16:71:
                    4f:52:06:c6:14:e2:0f:89:b8:4e:3d:7a:b3:66:4c:
                    8a:8e:a1:1f:50:0c:56:d3:67:39:fe:bc:5f:77:cb:
                    83:3e:2d:3e:4e:89:19:54:23:ed:f7:23:42:b7:a5:
                    d6:af:3b:cc:88:bb:36:15:43:30:62:98:99:c5:13:
                    44:94:bb:d0:c5:2f:a3:59:1b:7b:70:70:b5:5b:b9:
                    d8:ae:76:a8:fc:a6:be:ca:45:df:36:f0:93:05:6c:
                    42:e0:8d:45:ef:86:ec:cb:bb:1f:ae:dd:71:d4:68:
                    4f:5d:63:7b:cc:b9:ba:80:a2:0e:cf:f4:6c:62:91:
                    63:94:5a:f6:8d:60:d4:9f:ee:e8:f3:63:09:e5:bd:
                    e9:8d:39:09:94:0c:13:4d:83:f3:50:7f:0f:c4:69:
                    9a:55:68:8d:88:e5:70:3c:f4:f5:26:c0:36:07:e0:
                    30:23:71:cb:7f:ce:f1:be:9f:e1:13:26:0b:5f:b5:
                    7d:c0:15:05:07:77:7c:4d:04:ce:c3:45:8f:ff:d4:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:30:9D:9D:DE:72:49:22:83:3E:59:55:B5:8D:3A:71:08:AB:05:5A
            X509v3 Authority Key Identifier:
                keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:04:53:f2:cd:80:c3:7b:bb:4a:e2:7f:ec:7b:51:0d:d8:2c:
         ae:7a:48:9d:d3:53:25:a5:57:d2:c2:b5:4f:6d:57:0b:17:80:
         1a:9e:be:b5:a0:9e:48:7f:d8:d6:7d:45:96:f4:f0:e9:e6:fb:
         01:f1:e8:30:5d:10:c4:7b:0c:96:93:7b:b7:62:13:b4:18:47:
         0c:0e:44:96:d3:4c:55:ba:ed:b4:8f:f0:84:6e:fe:fe:c5:40:
         2f:33:dc:da:ef:d9:90:9d:14:3b:ff:57:00:a0:b6:7a:fb:3c:
         77:5e:4a:4a:b2:8d:c0:2f:22:71:1d:4f:7b:5e:09:73:f5:6a:
         05:88:9d:db:db:98:ee:9e:c7:41:47:28:2e:78:74:8a:77:90:
         99:93:65:ce:a1:67:25:45:cc:cd:f5:24:8f:f0:5a:e8:6b:bd:
         f2:7a:be:49:e3:69:8c:8a:f7:07:f6:6a:cb:79:a8:0a:4c:8c:
         dd:21:a3:e3:a2:6d:50:54:37:9c:29:f5:d1:b2:52:07:43:ba:
         a3:8a:71:b9:80:5d:99:69:71:e0:7f:4d:0d:1d:10:6a:50:3b:
         74:ec:d2:a6:9b:28:a2:9e:f7:e9:69:7c:2e:36:1d:96:a8:4b:
         da:9c:05:e1:eb:6b:84:13:7e:0c:98:b8:ee:ef:f2:c1:71:09:
         4f:da:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:54 2026 by rpki-client