Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          ss6tsUdK6EV4e06nsSrLW1N8p34ElCDPrUgKCYFQBgo=
Subject key identifier:   6B:35:1D:1E:8E:85:24:96:19:2E:E9:D2:B0:0D:6F:27:EE:E2:41:44
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       019F9090A531AAC59493963849867EFF1013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          1A09
Signing time:             Thu 23 Jul 2026 20:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:26 +0000
Files and hashes:         1: 02rcOu2oVgYvFKogVTUuhoAU_Z8.roa (hash: t1BzKV6mreRxe6P7rrGXRTjA+HpmupGRMNWHhpbny/Y=)
                          2: 7aqK71miTASMwabVtsHzpubRHDs.roa (hash: yhSFNY/JY9jo3EQSKl2NTB5DScn6tJax7Q4YrTEPg7Y=)
                          3: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: 38IPAtDtXWqPGeZG4ihFjeZauSyNydm+iSBTXMKm5Ig=)
                          4: Ja_i6Nl_QEf84Cv0hTASmUfByDk.roa (hash: PR6zLbEuwP/MFZVDvzI0MjSOqX30Bqi1dOI8MRuCOng=)
                          5: Sgl0Z64OhrO11r88F-vekHDTFUg.roa (hash: wpZ6eRiAcwvnj+jMwp2huDtJevtVDAQPpwMPlgkG8Ek=)
                          6: VN6p_bTihNH_MdXcvCva6umc71w.roa (hash: hHXGikrxhpHM6seBQ0Nc82OHE5FrPo4aFTc47ssGOfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:a5:31:aa:c5:94:93:96:38:49:86:7e:ff:10:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: Jul 23 20:00:26 2026 GMT
            Not After : Jul 24 20:00:26 2026 GMT
        Subject: CN=6b351d1e8e852496192ee9d2b00d6f27eee24144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:72:84:9b:e7:ca:24:14:b4:0b:92:47:e7:
                    66:8e:8d:4e:15:a1:54:2b:96:2c:11:bb:8b:24:47:
                    45:c3:9a:49:4f:47:02:aa:42:7e:8b:98:01:f3:87:
                    c5:27:1e:28:fe:96:16:45:f9:74:e6:c4:55:5b:b9:
                    4e:5c:a2:d8:80:46:ff:ca:e2:ba:83:cd:5d:84:d5:
                    05:d3:09:b2:de:01:b3:c9:79:13:b6:70:b2:d6:b6:
                    a8:c8:79:86:27:2e:a9:24:0f:d0:4f:ef:d2:ce:ae:
                    ad:1a:ff:ce:68:fc:c2:35:9d:e2:5a:a9:1d:64:6a:
                    25:b2:5d:2b:08:df:3d:1b:9e:95:70:56:42:57:3f:
                    73:03:e7:57:4b:c3:33:ad:01:a5:2c:cd:84:73:30:
                    02:02:14:66:ef:0c:4d:d3:39:63:aa:43:b3:58:5f:
                    4c:dd:c3:05:08:dd:02:6f:f7:2e:47:b8:36:bf:86:
                    78:5e:05:b2:d6:70:1b:50:c5:40:75:92:92:c9:d9:
                    4a:99:1c:a1:7b:c0:ed:b5:4f:0c:58:c9:5a:f7:64:
                    5f:d6:e2:76:10:62:96:c9:f1:e5:e2:a4:e5:f2:bc:
                    c8:ba:32:6a:3e:20:71:67:57:a4:cf:24:f2:12:02:
                    9f:58:ae:54:89:72:85:ba:ab:4c:47:50:19:e3:07:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:35:1D:1E:8E:85:24:96:19:2E:E9:D2:B0:0D:6F:27:EE:E2:41:44
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f6:f6:19:4b:e7:e2:1f:a2:8d:00:7b:23:5c:a5:d1:11:95:
         4d:3f:2e:f6:a7:81:f7:ad:34:14:16:4b:22:7e:34:78:79:ec:
         2b:cf:da:b8:8e:d2:eb:d4:23:d4:b1:06:ca:4f:ae:d4:ec:f4:
         88:fa:79:75:ff:53:50:47:8f:91:56:db:d1:02:e6:33:bb:b6:
         07:3f:fd:0c:e3:f2:42:ca:4d:78:db:59:6f:5c:48:16:61:0c:
         f3:e4:f8:ae:22:75:bb:6c:a2:56:c7:9e:83:9b:ab:53:f2:50:
         dc:6e:97:fa:88:cf:24:4b:ce:a3:a3:37:89:af:c1:7f:fa:b6:
         36:fd:64:7f:42:96:ff:18:e9:6b:bf:6d:20:28:8a:0b:6b:4a:
         97:b7:03:60:b2:0a:c6:6a:82:4f:0f:aa:08:3e:0b:fa:a0:c9:
         30:90:44:40:c4:89:7d:85:ac:6f:54:80:6d:e4:d8:b5:ba:f5:
         ab:d8:7f:52:eb:29:d8:a5:30:aa:9c:1b:af:c7:47:04:94:cf:
         2f:50:45:0f:c2:ab:e7:17:30:14:f0:18:a4:e9:2e:41:12:5d:
         55:69:ba:2a:fe:54:a5:71:da:ab:56:fe:7c:1a:59:83:ae:2b:
         4f:2d:21:d5:ba:a6:10:e5:75:9b:95:bc:05:92:c6:1a:84:6c:
         72:1a:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:54 2026 by rpki-client