Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File:                     9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier:          EqpWkhVj93raM/2CPI13hqZeGyehxeHvAVIkLcmrbEw=
Subject key identifier:   9D:33:C1:9B:AE:89:06:1E:0E:E4:D9:C6:FE:5D:94:52:CD:89:06:8B
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer:       /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial:       019F916DA9A4C3DFC77BA7AC0830A49641BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number:          0EF9
Signing time:             Fri 24 Jul 2026 00:01:50 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:50 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:50 +0000
Files and hashes:         1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: Tj2Yhv90ZAeIvxRuQ8pkN0P7bQPv/r48lrySBKFsoQI=)
                          2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:a9:a4:c3:df:c7:7b:a7:ac:08:30:a4:96:41:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
        Validity
            Not Before: Jul 24 00:01:50 2026 GMT
            Not After : Jul 25 00:01:50 2026 GMT
        Subject: CN=9d33c19bae89061e0ee4d9c6fe5d9452cd89068b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:fe:07:6e:f1:12:7c:b2:b7:1a:0d:e8:1a:
                    3a:83:25:f2:09:da:77:3c:0a:76:48:c9:8a:98:8a:
                    fa:d8:79:3a:2c:29:76:53:e4:59:ed:80:0d:94:8d:
                    c3:4d:4a:8c:a0:31:11:2a:a7:83:00:bf:28:16:11:
                    71:43:73:fe:3a:45:be:63:b8:70:07:cd:24:60:51:
                    35:c6:e1:1b:bd:8c:dc:5f:35:3c:7c:c2:09:f9:94:
                    aa:2a:83:ec:5d:46:f3:ff:4d:b0:46:fd:6f:87:f9:
                    49:97:2e:3d:ce:7f:0c:bd:8e:c7:b9:26:a8:a1:7a:
                    73:d8:62:08:a0:28:03:bd:d7:41:3f:b3:1e:e6:ef:
                    d9:6b:71:34:57:b8:8f:a6:ae:5e:3a:e3:ee:df:3b:
                    1c:c0:47:cf:a3:64:4a:d9:16:98:5f:45:14:ee:0e:
                    02:61:fa:dd:16:a5:b6:d6:f6:6a:d4:6f:2a:bc:a7:
                    76:e5:8e:e7:c1:b4:80:fd:3b:26:7c:b2:59:c8:46:
                    9d:e0:6a:75:d9:42:85:9c:1f:b2:af:28:59:51:9b:
                    03:c4:f0:21:00:e7:8e:29:d9:ff:2b:17:74:b4:8b:
                    4f:90:32:ee:7a:00:63:8b:65:54:97:71:ba:e1:ea:
                    e8:70:75:96:98:43:93:a8:3d:4e:1f:9c:20:5f:8d:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:33:C1:9B:AE:89:06:1E:0E:E4:D9:C6:FE:5D:94:52:CD:89:06:8B
            X509v3 Authority Key Identifier:
                keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:47:08:a7:c9:55:88:e0:c3:cf:87:52:55:7d:ed:2b:e7:
         a3:40:d9:af:09:4c:52:1f:c8:2b:4a:c2:03:91:35:e6:80:b2:
         72:29:e2:6d:a7:d9:23:a4:2e:9e:a9:09:03:13:02:98:2a:93:
         47:6e:4e:ac:1b:68:c3:90:ce:68:e6:95:52:a5:15:21:05:01:
         95:9d:83:d3:2c:78:58:63:aa:44:a0:2d:69:21:6f:58:6d:a6:
         d7:f8:3e:dd:c1:c1:d5:15:19:99:e9:94:f8:fd:aa:fa:31:46:
         f6:c6:6b:00:c4:ad:b2:e8:85:b3:6c:e6:30:75:39:ca:40:f6:
         b4:4e:94:fe:c5:03:76:d7:08:f8:34:bb:07:d1:58:b1:a9:68:
         84:1f:24:37:00:3b:77:98:cf:15:ba:60:1e:42:16:11:6c:67:
         f4:6a:d8:22:36:ad:a2:e1:a2:28:3c:43:c6:58:15:1b:c6:54:
         4a:49:f8:69:bb:49:4c:44:f1:da:8d:e5:f6:70:91:0d:14:7f:
         1e:ae:29:48:06:85:c9:9f:43:bf:f3:14:1d:81:97:0e:2b:8c:
         6d:df:30:93:c8:d6:55:72:d1:34:41:ed:ed:a8:8d:34:21:07:
         19:74:7b:6a:66:51:77:45:44:b9:3e:e3:77:45:d1:4c:c5:90:
         77:aa:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:04 2026 by rpki-client