Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.mft
File:                     45O5IN8BJJyYW580rQEz6Py4JEI.mft (raw, json)
Hash identifier:          X9JwYZmwsOR7HusK36LMk3qOBRMUIUg3Sv82DlR7Rh0=
Subject key identifier:   88:54:57:A7:04:46:06:8A:13:94:17:8D:3F:86:5F:D8:09:15:B1:0D
Authority key identifier: E3:93:B9:20:DF:01:24:9C:98:5B:9F:34:AD:01:33:E8:FC:B8:24:42
Certificate issuer:       /CN=e393b920df01249c985b9f34ad0133e8fcb82442
Certificate serial:       019F8FECCF37787F2B645E53AABDB1BADF71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45O5IN8BJJyYW580rQEz6Py4JEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.mft
Manifest number:          09
Signing time:             Thu 23 Jul 2026 17:01:29 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:29 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:29 +0000
Files and hashes:         1: 45O5IN8BJJyYW580rQEz6Py4JEI.crl (hash: Xoh9D6yv34CCRTk64WA1FcK0zmKhqjPizyrrRNU9RKg=)
                          2: 9oFy5MWnDJgvTu1V_C5QchqZ9yo.roa (hash: 5AX6MRnHuWcXdrtdnzJjZhgd4c756gQGGy0Ky+HY9n0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45O5IN8BJJyYW580rQEz6Py4JEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:cf:37:78:7f:2b:64:5e:53:aa:bd:b1:ba:df:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e393b920df01249c985b9f34ad0133e8fcb82442
        Validity
            Not Before: Jul 23 17:01:29 2026 GMT
            Not After : Jul 24 17:01:29 2026 GMT
        Subject: CN=885457a70446068a1394178d3f865fd80915b10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:89:3e:4c:dd:dd:72:c8:ce:64:2f:2d:9d:
                    40:90:f1:c4:69:da:b7:6d:4a:f7:94:c9:cd:e7:6c:
                    60:27:be:74:3d:d4:40:2c:cb:ef:00:e3:a9:8d:23:
                    b0:86:84:54:49:71:8a:d4:e8:e9:41:b8:c0:9e:01:
                    58:6a:eb:cd:2f:ad:82:ee:1e:c7:1e:40:cd:8b:2a:
                    b4:0a:e1:e3:8a:7f:73:b6:b9:ba:7c:1f:cd:f0:12:
                    55:c8:f0:80:5e:5b:a0:71:96:b7:fd:9f:09:a8:74:
                    8c:02:90:62:7d:c3:b9:1a:be:ec:09:52:07:84:7c:
                    2c:98:f2:8a:05:a6:e1:80:f0:a3:0b:79:ae:2a:09:
                    d8:07:74:91:31:14:8a:d8:7b:d1:f7:29:15:4b:97:
                    6f:58:10:51:6d:e5:95:34:01:4b:3d:94:66:9f:4a:
                    d8:d9:c0:e8:05:3b:4d:e3:22:58:0a:20:3b:07:f7:
                    3f:3d:df:4f:c3:5f:7e:56:9d:d3:80:76:00:56:41:
                    6a:80:b7:45:5e:60:99:95:2a:a9:66:3b:00:dc:88:
                    89:d4:7e:34:0b:c8:39:6c:6b:9c:95:aa:b3:1f:d0:
                    44:05:ce:57:de:19:3e:64:b9:9d:24:1c:73:16:33:
                    34:77:4d:f6:bc:1b:3c:6d:85:7a:5f:8e:0e:8b:6f:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:54:57:A7:04:46:06:8A:13:94:17:8D:3F:86:5F:D8:09:15:B1:0D
            X509v3 Authority Key Identifier:
                keyid:E3:93:B9:20:DF:01:24:9C:98:5B:9F:34:AD:01:33:E8:FC:B8:24:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45O5IN8BJJyYW580rQEz6Py4JEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f9725f-2255-4991-a530-05da79981472/1/45O5IN8BJJyYW580rQEz6Py4JEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:e6:40:68:8d:02:7a:a0:9b:e4:f5:6a:13:16:25:d2:df:8c:
         15:0f:a1:d9:10:ec:e9:24:e2:61:67:b3:0b:45:33:80:e8:ec:
         ac:0f:36:0d:42:2d:57:e5:42:1d:de:04:89:82:4f:32:78:52:
         28:57:6f:83:39:e2:bb:db:cf:ca:f0:8f:d7:c1:2f:f6:23:87:
         b0:e9:5e:4c:31:88:5c:df:7c:da:0f:17:55:eb:c4:ac:f0:90:
         99:d8:0c:90:52:03:f6:19:a7:fe:23:bd:49:bc:76:3b:03:fe:
         dc:7f:c0:15:1c:c0:c5:bf:d5:c2:4a:22:d0:31:95:5d:e2:83:
         a6:31:1b:65:24:0f:2f:57:07:e7:f0:c8:5b:03:e5:5a:11:29:
         6f:e6:66:1e:e6:7c:dc:e9:3d:c5:4c:68:a6:e1:a7:71:09:6c:
         2c:5d:3f:d2:f8:b7:63:38:73:52:24:e6:c5:c0:49:8f:d8:91:
         d0:e0:57:38:aa:16:17:ba:a6:84:fa:be:94:ef:96:90:17:e5:
         57:5a:6a:d5:b5:3d:09:8e:ed:f8:87:ba:a3:5a:a9:1e:0e:42:
         c3:0c:ce:94:96:52:11:c2:18:c4:15:75:62:54:ca:88:db:d8:
         dc:b6:ac:89:29:ec:51:2c:4c:91:fe:9d:6f:40:08:51:e7:4e:
         01:8e:4d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:24 2026 by rpki-client