Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File:                     9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier:          agCQnbUPpUC+W8/OADQMBA+D//Mle+eWpuboAag9NdY=
Subject key identifier:   25:77:97:74:F7:03:CA:EC:0A:3F:E0:EE:2A:4E:C9:65:F0:3D:4C:B8
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer:       /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial:       019F916C4FECBC97F373F367511F64676F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number:          093E
Signing time:             Fri 24 Jul 2026 00:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:22 +0000
Files and hashes:         1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: OkyyyXkBY15xoz1dvdIo0vg1JtVHSD+AxGi4rTe/zd0=)
                          2: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (hash: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:4f:ec:bc:97:f3:73:f3:67:51:1f:64:67:6f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
        Validity
            Not Before: Jul 24 00:00:22 2026 GMT
            Not After : Jul 25 00:00:22 2026 GMT
        Subject: CN=25779774f703caec0a3fe0ee2a4ec965f03d4cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:fb:c9:99:f0:1c:85:b0:9b:72:19:8a:ad:
                    14:1a:7c:cd:de:6f:9a:64:66:57:0b:86:19:de:a5:
                    47:c1:5b:0d:05:95:23:34:ac:cd:a8:29:93:41:3b:
                    e8:5d:6c:40:75:2a:30:3c:9f:d8:76:15:1c:f2:c2:
                    8c:1e:f7:7d:99:69:15:17:50:60:13:62:08:00:45:
                    f8:98:84:0b:3f:ca:e1:3e:1b:64:5e:e9:ae:1f:5c:
                    2d:10:17:1a:77:0e:0d:79:4b:9d:4d:13:4d:b5:b4:
                    5c:a4:d6:e3:35:60:1d:0a:2e:69:ec:73:2a:20:d1:
                    e9:9d:af:ff:fc:fc:31:a5:38:12:93:7b:7a:14:ee:
                    cd:eb:fe:bf:65:86:08:cc:68:4f:d1:20:82:ea:57:
                    f8:7e:7a:13:5f:d3:aa:8c:3a:03:f6:47:a4:74:26:
                    37:da:02:6d:b5:c9:4d:c1:cd:93:6c:11:ed:18:b4:
                    f8:59:56:8d:24:d4:0a:6c:d9:b0:f4:aa:97:f0:f3:
                    12:75:dd:62:33:89:35:f9:0b:23:54:92:4f:e9:cc:
                    89:a9:40:b9:8f:cb:50:9d:4e:1b:8a:95:eb:03:bd:
                    88:62:87:b2:dc:47:78:af:9f:c8:3d:96:83:00:1b:
                    f8:af:3b:f9:6b:c4:b3:36:61:93:e5:a0:0f:2c:ac:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:77:97:74:F7:03:CA:EC:0A:3F:E0:EE:2A:4E:C9:65:F0:3D:4C:B8
            X509v3 Authority Key Identifier:
                keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:5e:db:88:b8:5e:f9:23:f6:59:dc:76:be:87:59:7d:9a:
         62:12:a7:93:d9:f4:c6:92:b0:04:6a:4c:fb:30:ab:f9:12:57:
         30:27:77:9c:eb:82:40:6e:e4:7d:53:c1:ad:76:bc:af:a4:b4:
         ec:a0:c5:d6:77:d8:e5:95:21:8a:4b:7c:cd:a6:10:0b:a1:77:
         41:7f:9a:d9:1d:b9:08:ed:85:30:52:ab:f7:62:ca:48:49:46:
         6d:85:30:3f:47:16:95:93:dc:a7:1d:95:df:ff:4f:30:c8:49:
         3a:47:c7:0c:16:c2:f7:40:02:59:f8:1e:83:9a:11:76:17:85:
         96:db:49:5d:b7:fc:9a:ae:4c:a0:49:6d:3d:62:76:9b:ff:8f:
         2c:e0:9e:e2:64:c1:e9:f6:62:e4:1f:69:a8:1c:5a:8f:21:27:
         d4:9c:f7:b8:1f:0e:e5:76:a2:9a:1c:04:39:5a:07:61:d5:b3:
         ca:f8:a5:5e:8c:0a:9a:18:9b:ed:8d:4f:b1:ef:68:d7:63:c7:
         4d:f6:54:0b:d7:a0:a5:34:ec:22:ee:3b:e0:f7:ac:02:1a:a9:
         e6:41:25:ac:fc:a2:b4:e2:80:a7:a0:28:0b:77:07:4c:8b:d9:
         66:a3:18:26:64:a0:1c:38:cb:c3:f7:19:80:95:68:03:66:50:
         69:ed:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:42 2026 by rpki-client