Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File:                     v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier:          rfRaqpq3/Q0FsgCNxLyGeiQWLpoWtfXqEV7MtWqf+FQ=
Subject key identifier:   5E:35:2F:24:50:34:B5:7E:B0:77:9A:0D:BA:F7:7F:5F:7B:FF:11:B0
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer:       /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial:       019F935A9BA67BA9139FB9B29A9331DA6305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 09:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:16 +0000
Files and hashes:         1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
                          2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
                          3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
                          4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
                          5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: 6deF/mEhdOeHrqTt06zYrwzMktM1ETY5C7YKfJFVfPU=)
                          6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:9b:a6:7b:a9:13:9f:b9:b2:9a:93:31:da:63:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
        Validity
            Not Before: Jul 24 09:00:16 2026 GMT
            Not After : Jul 25 09:00:16 2026 GMT
        Subject: CN=5e352f245034b57eb0779a0dbaf77f5f7bff11b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:5e:66:13:c6:22:3d:a0:5f:8e:a9:5d:22:
                    94:f4:76:5f:0d:f3:db:ef:5d:17:1f:9b:6f:15:30:
                    32:3c:31:ab:8e:4e:1e:71:2b:ad:a7:38:c2:5b:19:
                    18:28:da:18:6b:dd:73:7f:b2:ab:23:3a:e6:83:8b:
                    84:b4:fc:4c:82:f5:2f:eb:5b:cc:47:d5:cb:95:bf:
                    7f:93:a6:f7:94:9b:bc:1c:14:56:4d:73:a5:3a:8c:
                    15:89:c4:f3:05:29:db:62:59:2b:86:50:ce:0c:25:
                    26:f7:54:da:76:5f:15:84:2d:0a:35:d9:d3:96:d6:
                    84:35:f3:4b:ae:58:de:dd:75:bb:02:6b:d2:9c:ec:
                    ef:f1:85:d5:56:6f:60:56:26:97:a6:b7:bd:5c:d2:
                    66:57:e2:a5:24:9b:56:70:42:84:51:88:4f:97:ce:
                    47:32:b5:10:2d:10:93:b5:7b:52:65:89:a6:f0:f2:
                    32:a1:81:3e:33:03:88:b4:9d:1d:8f:79:18:a4:74:
                    0c:dd:4f:78:4a:90:31:8a:bd:05:f3:8a:38:6e:05:
                    af:23:f2:e4:9d:6c:d8:70:10:a4:db:12:c4:8c:e8:
                    84:52:3b:6f:a2:78:96:26:27:f3:c6:5a:d0:eb:3e:
                    d3:1b:fd:1e:37:4e:12:ac:ea:26:c1:8b:bb:ac:3f:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:35:2F:24:50:34:B5:7E:B0:77:9A:0D:BA:F7:7F:5F:7B:FF:11:B0
            X509v3 Authority Key Identifier:
                keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:26:d4:ff:65:44:df:38:45:12:ef:f1:a4:6e:8f:57:0f:41:
         7f:10:ce:86:55:f3:ac:2b:c0:48:9d:2c:16:2b:08:b8:ba:94:
         24:6c:a7:0b:97:f8:87:10:86:1d:72:22:70:de:39:b7:56:6e:
         63:b0:38:cc:7e:31:87:14:cb:fd:27:be:a4:3e:4a:2b:01:99:
         d0:4b:19:24:9c:f8:7a:76:41:7d:c5:69:99:ea:a7:ae:f3:73:
         9b:ef:1e:51:d7:26:a6:99:f2:d5:ee:6d:81:23:89:4f:68:38:
         28:16:e0:ea:af:da:07:af:28:2a:9a:7f:40:45:ae:0e:c8:04:
         05:33:0d:ba:d5:94:1f:fa:b1:92:94:81:2f:68:e3:35:c7:2a:
         69:c9:d6:7b:47:8f:43:5b:3b:46:07:83:cd:a6:84:06:a2:2f:
         f9:17:f7:b6:6d:95:15:b9:b7:a5:28:3f:a3:aa:a7:7b:51:5b:
         36:b2:f9:a5:3c:66:29:14:2d:5e:05:79:0a:44:f0:b0:bc:74:
         62:f7:13:5b:15:6d:75:6f:ff:8a:c2:e4:93:98:ce:2f:d8:b5:
         22:f9:8a:60:5d:e6:41:bf:c8:f1:ae:e7:23:58:6c:d8:1f:30:
         9d:61:d4:d8:81:40:07:c0:00:63:65:6e:e9:c3:46:0a:be:c5:
         b4:d8:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:48 2026 by rpki-client