Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft
File:                     9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft (raw, json)
Hash identifier:          GuJf3FPi3vOqj1qMOirvRmdawWtDMn6rBmpA98JulqM=
Subject key identifier:   59:FB:A0:BC:A7:AB:96:6F:3F:68:27:79:B3:94:14:1B:B0:5F:99:37
Authority key identifier: F6:83:2F:42:A5:CB:A7:96:48:E3:16:97:A9:69:90:0D:7B:61:7D:8E
Certificate issuer:       /CN=f6832f42a5cba79648e31697a969900d7b617d8e
Certificate serial:       019F913556EFDB313D15651B372AF2ADAC0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9oMvQqXLp5ZI4xaXqWmQDXthfY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft
Manifest number:          8F
Signing time:             Thu 23 Jul 2026 23:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:19 +0000
Files and hashes:         1: 9oMvQqXLp5ZI4xaXqWmQDXthfY4.crl (hash: iZ81uyoBbMuMevxPGid5HH2pNNGP68pQ4Bm6BBBSq2w=)
                          2: _QLic1olYUPd_fY2d_h9WrgGPIA.roa (hash: OjCrer3sO5hPLgOKZ7yjVlWStPYb1xzzz03u7geE+lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9oMvQqXLp5ZI4xaXqWmQDXthfY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:56:ef:db:31:3d:15:65:1b:37:2a:f2:ad:ac:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6832f42a5cba79648e31697a969900d7b617d8e
        Validity
            Not Before: Jul 23 23:00:19 2026 GMT
            Not After : Jul 24 23:00:19 2026 GMT
        Subject: CN=59fba0bca7ab966f3f682779b394141bb05f9937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:0a:c3:de:8e:b0:62:27:9a:17:60:82:f6:
                    a6:80:56:d7:05:54:bd:1b:43:58:4e:b5:6b:06:53:
                    5f:f5:14:02:72:19:ba:8a:e8:38:38:48:dc:7b:2c:
                    73:9a:7d:d9:c4:2c:9b:4a:4b:f4:b7:7d:d5:32:17:
                    f5:ea:63:95:d5:16:c0:c7:21:bd:6f:42:25:a7:d5:
                    03:9c:06:d2:77:95:ea:e3:53:7b:64:25:f1:d3:03:
                    d4:c6:51:ca:aa:86:85:a6:ee:65:22:a4:01:a6:39:
                    2b:11:0a:47:36:f2:c6:13:c3:eb:62:4d:e4:0a:7e:
                    7b:fb:e8:db:5e:ab:43:5a:ed:d2:3a:cc:6b:4f:20:
                    34:19:82:6e:c9:68:bf:06:71:03:27:28:08:60:90:
                    10:88:4f:ce:de:e0:1d:45:2a:62:d0:6e:bb:2a:6f:
                    b9:04:12:4c:f4:e1:d9:01:d6:58:e0:d4:5a:04:cf:
                    ae:3d:fc:33:5f:58:fe:a3:11:89:e9:16:71:5a:46:
                    4e:3c:27:a7:c7:31:d9:67:4b:e2:9f:11:53:3b:df:
                    eb:13:41:6a:24:55:6a:ed:b5:78:88:d0:9b:be:cb:
                    e9:47:fa:a1:ce:4e:26:8d:de:49:0c:72:69:13:4e:
                    e7:bd:68:e4:ab:9c:e6:7a:4d:0f:9c:df:89:63:8f:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:A0:BC:A7:AB:96:6F:3F:68:27:79:B3:94:14:1B:B0:5F:99:37
            X509v3 Authority Key Identifier:
                keyid:F6:83:2F:42:A5:CB:A7:96:48:E3:16:97:A9:69:90:0D:7B:61:7D:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oMvQqXLp5ZI4xaXqWmQDXthfY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2f:1d:9b:34:a1:ef:67:37:56:cc:79:de:d4:7b:10:c6:03:
         1c:e8:70:03:45:6b:c8:7e:05:ec:77:26:de:2c:1e:c3:7c:fe:
         d5:3d:d0:f4:d6:b1:93:31:7a:41:53:3a:c4:a5:22:24:96:8d:
         08:86:3c:4d:e1:3d:4b:9c:55:b2:e8:e3:da:0a:30:f5:19:21:
         4f:7c:39:b3:29:52:d9:fc:a7:4b:f3:ea:90:dc:f6:d4:96:ba:
         01:bf:50:14:cb:e1:59:3c:99:19:68:2f:6b:27:18:a6:64:00:
         88:5c:4c:41:89:bb:64:87:b5:ca:2f:98:ca:9b:0e:99:89:6f:
         5e:6b:2b:3e:9a:eb:d9:91:d6:ff:76:db:6e:6d:11:7b:31:ff:
         e5:23:67:9a:6b:60:13:86:64:07:d1:f8:d7:f5:a6:3c:a7:1d:
         04:36:62:4e:8d:17:19:61:4f:85:30:dc:6a:d3:f6:f1:e4:ae:
         c1:96:38:64:ff:84:5a:0a:73:07:8d:91:05:d6:fa:c5:ed:3a:
         de:d3:79:13:18:ea:37:2e:f7:93:8f:d3:c2:61:3c:ce:ce:43:
         f2:21:b9:b2:8e:8f:65:9e:49:b7:d0:29:4f:fa:d3:95:76:fd:
         b5:d6:40:8e:9f:f7:bc:dd:4a:30:46:4d:a5:64:66:c1:57:22:
         d0:2a:d8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:41 2026 by rpki-client