Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          QqYtxFVByPQFtdeBXN2nk8TNW+JwwNebfTsUnd/MONA=
Subject key identifier:   23:F2:81:C7:2B:DD:A1:06:7E:45:55:AB:C7:5B:86:D3:A9:E4:CF:F3
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       019F93FFCD61A43571D5603A537D4C3E0D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 12:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:42 +0000
Files and hashes:         1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=)
                          2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=)
                          3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=)
                          4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=)
                          5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: 2mXBBN0lg1tEcfC0DFhZ6ILkiShxPl9Es4lcc5JKLEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:cd:61:a4:35:71:d5:60:3a:53:7d:4c:3e:0d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: Jul 24 12:00:42 2026 GMT
            Not After : Jul 25 12:00:42 2026 GMT
        Subject: CN=23f281c72bdda1067e4555abc75b86d3a9e4cff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:bc:3e:59:9b:46:8a:af:83:8c:8f:a1:53:
                    ef:91:fc:f9:c4:26:0b:32:e7:39:22:54:34:25:65:
                    06:1b:e9:9b:21:b2:04:07:ea:76:b3:63:60:2f:c1:
                    32:95:3e:34:54:13:5d:46:40:88:89:44:9b:0f:6e:
                    16:74:10:77:36:c3:41:15:58:11:6e:6e:ec:7d:3d:
                    7b:d4:10:42:2d:3f:05:75:9a:f9:2b:2d:1f:e8:1f:
                    da:64:40:61:bf:3b:64:61:29:06:c5:29:24:44:9c:
                    63:80:26:73:2d:6a:19:07:0f:8e:38:47:48:4f:a4:
                    d0:d4:1d:ab:25:3a:f4:6b:b9:1f:da:46:45:39:14:
                    dd:a2:12:ac:92:31:6c:f1:b0:eb:a0:c9:db:f9:42:
                    a6:27:aa:6e:ed:21:25:a8:4c:a2:55:70:63:f8:55:
                    1e:e7:6f:87:67:44:9e:38:88:2b:01:0d:eb:1b:bf:
                    ff:33:bd:7d:e7:13:bd:89:0c:c3:51:c3:c0:4c:f6:
                    5f:8f:8d:f6:af:f8:09:59:49:68:9e:01:e0:83:be:
                    a3:92:d4:1f:8d:8a:3b:f0:3a:5c:7f:3b:3c:1c:49:
                    73:02:35:55:74:ab:eb:59:b7:45:c6:2a:e7:c2:8f:
                    70:09:5f:07:b4:67:62:5a:a5:53:d3:aa:40:b7:99:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F2:81:C7:2B:DD:A1:06:7E:45:55:AB:C7:5B:86:D3:A9:E4:CF:F3
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:c1:8b:ba:c9:cd:17:4d:0e:b5:51:ff:73:ea:03:e5:f5:
         1d:45:cd:e9:24:5e:fa:c3:2e:7b:f1:6b:04:fe:9e:43:53:cc:
         4d:a8:b0:63:a8:b2:f5:5d:5b:04:5b:0a:98:fa:fc:cd:15:e0:
         6a:32:a7:5b:fb:fc:03:f0:f2:f2:9c:34:34:d9:ae:6e:ce:a0:
         51:59:5e:91:ec:a1:90:6c:c3:81:31:f7:c4:49:43:0d:e7:64:
         00:cf:24:40:94:a8:77:8d:d3:01:06:99:89:05:2a:c8:4c:52:
         59:76:c8:75:c9:88:47:b8:63:d6:38:3f:ab:03:fb:73:0f:48:
         51:89:c9:ec:7e:e2:4e:43:13:da:41:09:ab:a0:d8:85:de:5d:
         b3:87:bb:34:00:72:67:2e:d9:4e:ad:b3:20:a9:4f:ed:dc:d6:
         36:8f:bf:06:19:12:e6:72:54:e6:2e:04:5d:de:34:aa:5b:93:
         9e:85:dc:d2:76:e3:c0:d0:11:a7:89:a2:21:f1:92:58:1c:ce:
         4c:66:42:2f:f1:a3:7f:37:6a:3d:62:36:ba:64:fb:69:ba:d6:
         c4:b7:ec:4a:13:3f:07:cf:f9:60:21:49:93:ea:af:f3:23:6d:
         ef:0b:3c:7f:34:76:63:5a:f7:56:a4:52:45:be:89:f5:e3:36:
         53:cc:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:09 2026 by rpki-client