Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File:                     9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier:          aiGptqJAFwdyr/gtCJTBF5eu70YHrKwKx8CnvAMl+3A=
Subject key identifier:   5B:8D:A5:DA:E0:EA:21:FA:A8:59:60:4E:84:1A:76:BF:95:E7:8E:08
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer:       /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial:       019F91DACCD7AAA01A674E30E12D3EDB550B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number:          0A2B
Signing time:             Fri 24 Jul 2026 02:01:03 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:03 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:03 +0000
Files and hashes:         1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
                          2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: FvA0fhOhnOcIkI3yihaewiU7w3Q6z3l/s07upomJegY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:cc:d7:aa:a0:1a:67:4e:30:e1:2d:3e:db:55:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
        Validity
            Not Before: Jul 24 02:01:03 2026 GMT
            Not After : Jul 25 02:01:03 2026 GMT
        Subject: CN=5b8da5dae0ea21faa859604e841a76bf95e78e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:fd:dc:39:20:74:ae:b1:ff:61:fc:78:9d:
                    8e:7e:d0:43:01:ed:44:31:99:3b:62:70:70:35:a0:
                    c2:03:36:d4:09:40:30:30:1f:08:68:0d:98:8d:f8:
                    f4:f8:7d:cf:99:fc:44:96:8b:97:f0:97:a5:48:3f:
                    f9:42:10:b1:60:e2:6f:4b:29:80:03:26:6d:f7:bc:
                    56:74:94:2f:49:12:78:5f:f4:b8:91:4c:4a:1c:82:
                    e6:8d:24:80:bf:69:3b:47:b8:12:03:45:39:c0:73:
                    f9:6e:5d:eb:8b:62:a9:f0:56:62:90:7e:eb:5c:2a:
                    30:85:1a:00:16:49:f5:81:b0:23:67:65:b1:39:2f:
                    e8:8d:54:f4:19:80:f8:94:60:cf:9b:23:88:2d:cf:
                    8a:51:2e:a8:26:28:44:ee:a3:8c:41:8b:7c:7d:fa:
                    40:51:48:54:3f:ff:12:20:60:0d:96:c4:02:c1:22:
                    de:8a:75:27:a5:7d:27:38:0b:da:ac:ad:b6:c8:db:
                    07:cf:fd:b3:3c:9c:91:76:73:65:d6:58:52:95:34:
                    32:17:82:28:31:29:5b:d0:76:c5:9d:fe:3b:50:a9:
                    65:60:6d:16:b2:5d:94:39:1e:f7:8d:29:72:40:6c:
                    3d:51:62:f9:9b:82:5a:9c:a0:fa:8a:a1:9a:6d:e6:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8D:A5:DA:E0:EA:21:FA:A8:59:60:4E:84:1A:76:BF:95:E7:8E:08
            X509v3 Authority Key Identifier:
                keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a0:6f:aa:5a:c6:4b:f7:5b:15:f6:07:02:fa:9a:a1:48:a3:
         5a:7e:97:e6:bd:55:c9:bc:2f:45:fa:5b:c4:48:74:60:ee:44:
         90:d5:c4:30:51:0b:56:cd:d2:49:2f:22:8b:7e:4d:5a:34:3f:
         fb:e9:dd:43:cb:b6:33:c3:7c:4f:e6:b9:de:59:ba:4e:28:f1:
         81:08:90:3f:4d:b0:95:2b:78:09:b5:43:04:35:b0:4e:b9:95:
         b9:6d:72:a2:2b:f0:08:50:af:46:8c:6a:64:f0:0a:93:6e:2b:
         3f:73:37:e6:ff:52:9b:b5:9d:f0:68:eb:7f:05:d5:bd:8d:b0:
         1c:f9:bf:ef:78:6f:2f:b4:9f:01:25:1b:17:6e:f5:7f:3d:c9:
         13:3b:24:66:eb:11:ba:cc:ba:04:cc:2e:56:5e:28:94:1b:d2:
         89:d0:fc:38:8b:94:ac:aa:46:e6:14:70:67:f5:0d:14:43:46:
         cd:62:f8:12:66:1e:f1:d0:98:8c:03:43:44:f5:17:a4:92:3a:
         98:01:20:de:3d:b2:0d:a8:01:bd:ad:45:4f:86:76:b4:4a:e4:
         39:3f:4d:b2:93:97:ad:b9:cc:21:21:1e:8e:44:7f:e3:55:33:
         82:c8:e0:b0:6a:ca:f1:c2:a4:7c:4b:54:61:e1:bf:02:ac:09:
         52:be:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:40 2026 by rpki-client