Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
File:                     9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft (raw, json)
Hash identifier:          NLwuU1J5kHAZ1fWlWLn4VUBr4N36yjbXnJENRJZBZiE=
Subject key identifier:   CE:A6:7D:E8:D7:6B:93:82:78:E4:15:F0:DB:35:51:0F:AE:91:D8:28
Authority key identifier: F5:34:D5:C7:66:20:C0:E1:E5:F6:21:A2:46:86:98:F8:2B:95:40:BD
Certificate issuer:       /CN=f534d5c76620c0e1e5f621a2468698f82b9540bd
Certificate serial:       019F905A8861E6E2F3B7732546156894BBF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
Manifest number:          AE
Signing time:             Thu 23 Jul 2026 19:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:19 +0000
Files and hashes:         1: 9TTVx2YgwOHl9iGiRoaY-CuVQL0.crl (hash: tVLUNLMGnrtU8F7jn+0PSz2RDR54R8xrhOFcatqZQmg=)
                          2: h29vQ2yuI6yLfEkgxb-spdNM9_w.roa (hash: p7uQCJb1royhyT7w9wDiqUydmZ9HdADqCZN1mAQcvqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:88:61:e6:e2:f3:b7:73:25:46:15:68:94:bb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f534d5c76620c0e1e5f621a2468698f82b9540bd
        Validity
            Not Before: Jul 23 19:01:19 2026 GMT
            Not After : Jul 24 19:01:19 2026 GMT
        Subject: CN=cea67de8d76b938278e415f0db35510fae91d828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:0f:33:f8:b5:3d:1e:2d:4c:05:c7:4c:7d:
                    47:29:b9:ab:ee:34:4a:67:9c:1b:3d:b1:2c:b1:83:
                    6a:79:23:9d:48:43:15:d5:ae:86:d4:dc:d9:29:fd:
                    26:7e:81:09:6d:f0:74:45:25:1e:f1:39:ca:a2:88:
                    4e:4f:6f:60:97:ef:91:68:e8:15:d5:bf:7a:00:39:
                    27:7a:55:e0:e0:1c:00:6a:25:45:ab:b2:ac:94:85:
                    82:be:ac:43:6b:df:96:bb:7a:be:b5:19:27:55:e0:
                    ff:0e:19:9c:fb:d0:0a:cb:c6:87:2d:59:30:88:97:
                    d9:a4:5c:28:e0:71:d5:6c:09:82:cd:20:09:c4:94:
                    9f:94:03:62:83:41:fa:a5:22:4e:4b:45:2a:ea:ca:
                    44:32:53:81:ba:47:1a:41:d9:4f:73:00:fa:7a:ff:
                    f5:ca:60:97:c3:15:d2:1b:21:27:1b:4c:11:3f:99:
                    0d:92:88:e2:a2:a0:67:6c:cc:f3:64:b5:8f:10:34:
                    05:d9:76:5c:12:ce:e8:e7:ac:94:d4:c2:09:51:bf:
                    88:80:9b:94:3a:7f:01:d4:c5:f4:dc:28:b2:79:c7:
                    4f:eb:2f:3c:b7:0d:82:fb:a1:3b:9e:a6:73:c2:80:
                    4a:16:b1:08:f3:06:19:53:7f:e4:e1:5f:12:1b:d6:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A6:7D:E8:D7:6B:93:82:78:E4:15:F0:DB:35:51:0F:AE:91:D8:28
            X509v3 Authority Key Identifier:
                keyid:F5:34:D5:C7:66:20:C0:E1:E5:F6:21:A2:46:86:98:F8:2B:95:40:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TTVx2YgwOHl9iGiRoaY-CuVQL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b22d20-0f30-4fbb-a01f-f7f7d4723b5c/1/9TTVx2YgwOHl9iGiRoaY-CuVQL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:e3:bb:05:d7:bc:ad:4c:f5:79:ba:9c:b7:82:0a:2b:36:
         f5:63:6a:95:79:e2:ce:56:74:3d:ba:a6:a7:a0:30:26:95:76:
         44:41:67:9e:db:23:b7:b9:47:f9:aa:72:9d:8d:50:6a:91:ed:
         0b:3a:f0:21:5d:99:2b:ff:b4:65:1e:23:0e:a2:af:cc:0e:46:
         3d:cb:cb:07:c7:2a:42:c0:7f:03:15:1e:4d:59:23:5c:7a:db:
         5a:f6:a7:b2:a0:02:63:01:58:24:e0:c6:de:8a:eb:03:9e:b3:
         a9:85:e5:ca:8e:34:6f:b0:f8:1c:86:3a:0e:d3:dc:17:9a:b4:
         a4:8b:27:e5:85:d8:8d:67:15:7a:44:c2:1d:19:d1:94:42:f7:
         af:a6:5e:79:3a:d6:99:34:46:0e:9e:c2:6c:4e:04:89:d4:26:
         fd:2d:83:b5:87:79:e1:f7:84:ff:0d:98:6d:3c:d3:e1:04:9f:
         3e:05:26:4c:36:35:1b:1c:b1:55:f8:9f:2d:ee:5c:32:78:e3:
         7e:64:58:8d:0b:b7:8c:45:ee:26:a4:1a:6b:61:2b:91:5c:9e:
         04:b3:bd:c0:05:68:0d:58:46:3f:b9:18:45:09:c8:a8:e7:1d:
         b9:74:9e:de:2d:9e:3d:f6:99:e3:2f:b3:a0:7b:c9:82:3a:6e:
         a7:8e:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:00 2026 by rpki-client