Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
File:                     9E3jbOZUNyHyemiTo7Orf_-eEiE.mft (raw, json)
Hash identifier:          vga2UzS3lkap3gFjFb7FuYWMZ1P0vuiJoxkEJeh3Hbg=
Subject key identifier:   12:8D:64:5E:5E:22:A5:C5:2B:1A:83:D9:F5:84:7A:32:23:A6:2B:CC
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Certificate issuer:       /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial:       019F90230464EA8F56F6D720773FF0ABE1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
Manifest number:          40
Signing time:             Thu 23 Jul 2026 18:00:41 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:41 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:41 +0000
Files and hashes:         1: 1u-gUa9URlrodTmkGb9LRYX3OVU.roa (hash: oC9ByTbYQvO/MlLyyCdsGNzkRESBDij4okyToSMwSRU=)
                          2: 8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa (hash: hIwaksOJP0zxQbZYSD2p0uscCDCl37ZQQd1k8/2OOCo=)
                          3: 9E3jbOZUNyHyemiTo7Orf_-eEiE.crl (hash: ZwsMr8u4CMwuxu1c4Y0eYEnpi6HFASRJhuUVnlQVeWE=)
                          4: H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa (hash: lLlcVWkBzyqFZaScNM4rXUJUhmBYgLuz/mF4DSCZsow=)
                          5: SF34wbOtYdRuApVr6Gux8pIJkSQ.roa (hash: iRP53qSEiGHrITXx04bly+wQA2RkGJTTrL0VEYAoBNk=)
                          6: bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa (hash: ORVCT7FJ02Pf6zwRRTxkzn72Y3WbAChmuKaE2k5xVLE=)
                          7: bya_A4puBY8ZcMoQu4n_j-KniIA.roa (hash: Qnp+qZ0rKbMVjnECifAEcvAP55imofsc5AlVKksg0kc=)
                          8: efrlaKAi_CsVQe9yQF_dyjmBGT4.roa (hash: Ow8jyy8gW2uZjxaG1qOEM9ZeKzJiMT/L9zqHnHOtO8M=)
                          9: kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa (hash: wZlAb2i6Q85EuSipXQW0wySIWm8YuhMljUtSh1EvtjE=)
                          10: xeKZmPgvPMOy0KwEWStwZbewpmQ.roa (hash: FQj3XVymc2AHbwvXpX69Y9LJlgObeqHhy7xHy0+4/mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:04:64:ea:8f:56:f6:d7:20:77:3f:f0:ab:e1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
        Validity
            Not Before: Jul 23 18:00:41 2026 GMT
            Not After : Jul 24 18:00:41 2026 GMT
        Subject: CN=128d645e5e22a5c52b1a83d9f5847a3223a62bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:ae:e3:00:b5:7e:04:24:29:ae:70:d9:a0:
                    08:7f:a8:3e:a9:94:2d:5b:1e:32:79:4c:94:42:13:
                    92:5e:e7:3f:b6:c7:b5:ae:c7:4f:b1:a7:d4:3c:eb:
                    69:87:25:b5:60:a8:74:2d:d9:68:27:9a:0e:b7:d5:
                    13:a3:88:9f:18:45:d9:8e:ed:11:1b:03:ac:07:ad:
                    e5:fa:11:ed:fa:e3:90:d2:18:a5:e1:d0:a1:ed:23:
                    d7:f8:b6:eb:c4:a7:e3:42:10:5e:7a:6a:08:e8:4f:
                    4e:e7:af:d1:c4:ae:8d:a2:48:52:82:5e:2d:ba:6a:
                    cc:e6:a3:85:98:1d:e2:d6:0a:36:bc:a2:15:d7:91:
                    58:0f:ef:18:55:94:df:a5:ac:41:02:0b:7d:15:f7:
                    d0:b4:6a:6f:2c:a3:d8:8b:e5:07:b3:65:49:7b:f8:
                    54:65:21:b7:8a:34:8b:ac:e5:0b:cd:1a:87:4c:66:
                    7f:10:e4:69:af:61:db:cf:ef:d3:42:7f:1f:b8:37:
                    07:01:eb:02:be:ed:2c:4f:9c:a6:81:ed:0d:7b:15:
                    c6:23:2c:f6:20:54:4f:13:ec:4b:c6:22:1a:63:1b:
                    ad:81:43:8e:46:d1:f6:a4:c3:4b:be:c7:94:89:7d:
                    df:f6:54:78:83:52:10:47:b8:c6:e8:e6:25:5e:5c:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8D:64:5E:5E:22:A5:C5:2B:1A:83:D9:F5:84:7A:32:23:A6:2B:CC
            X509v3 Authority Key Identifier:
                keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:8e:9e:bd:68:1d:c5:97:64:5e:cf:81:9f:6a:98:a0:9c:
         10:25:56:10:b4:77:77:dc:61:29:29:c1:a7:aa:92:b1:6b:20:
         d2:aa:36:55:bc:a0:b1:ed:68:10:c3:b5:fe:0e:15:de:42:40:
         22:00:d9:da:0c:94:45:9e:25:62:61:a0:30:44:b6:75:af:7c:
         d0:da:06:dc:64:c1:82:f8:8d:0f:85:92:ea:ae:75:5d:04:f2:
         0f:65:e9:41:eb:0f:3a:ad:74:27:59:90:00:f3:75:3f:b8:7f:
         54:67:15:81:88:86:79:7d:4f:d0:19:a7:c5:a7:73:ad:4d:e4:
         34:c4:9f:77:7d:b1:c3:6a:2f:99:b0:1d:71:20:99:0f:a2:17:
         e8:83:a0:be:a5:f1:b3:60:0e:8f:0f:bc:96:e4:f8:54:b2:27:
         b3:7e:34:b1:50:f5:be:09:e2:4e:6c:92:35:9a:b8:64:c3:9a:
         5c:1f:9c:6b:98:04:a8:55:9a:0e:69:75:d9:d2:54:39:8b:a7:
         b3:64:81:c7:82:58:97:fb:d3:99:87:74:04:1d:b0:fd:2f:62:
         52:fd:9b:35:6e:bd:67:ab:54:28:de:68:24:e1:af:22:c9:36:
         b8:11:07:47:bc:8f:8a:14:53:d1:c0:fb:2d:fe:2a:8d:d6:d1:
         69:8a:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:05 2026 by rpki-client