Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
File:                     N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json)
Hash identifier:          oGLbgzyiFag5BBNXrluQkqLhK7SERM0zrpa0dTk5zQo=
Subject key identifier:   78:6F:5F:93:E2:7B:DD:85:5F:2A:36:EA:36:47:0A:DF:03:7B:C9:74
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Certificate issuer:       /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial:       019FAB9A8E6CD9A4B173BDA5E3114E04D34F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
Manifest number:          09B4
Signing time:             Wed 29 Jul 2026 02:01:00 +0000
Manifest this update:     Wed 29 Jul 2026 02:01:00 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:00 +0000
Files and hashes:         1: 9poqEnfuHRxfxLFusMgYmVdKsq0.roa (hash: 9QVM2edMXmY0GvzT6L39yTLCfHgXCLZc8xHTjCz57hk=)
                          2: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: sUStdE84ZigURDVb56v+wGTGvvgl/pBmrNzoCxBh4eU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:8e:6c:d9:a4:b1:73:bd:a5:e3:11:4e:04:d3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
        Validity
            Not Before: Jul 29 02:01:00 2026 GMT
            Not After : Jul 30 02:01:00 2026 GMT
        Subject: CN=786f5f93e27bdd855f2a36ea36470adf037bc974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:40:ce:d2:d8:c0:2a:49:d8:ec:74:78:e7:
                    97:b9:a2:a1:c8:a7:b3:2f:8e:e8:40:49:c9:23:61:
                    6d:89:e8:bd:0f:3a:21:90:87:f9:98:8b:2a:8b:18:
                    21:8e:a4:38:7a:54:3c:64:88:08:48:a6:1e:57:79:
                    e0:18:c1:00:41:db:a9:4c:87:8b:8d:fe:53:7d:f9:
                    b8:ec:dc:06:a8:70:27:b1:bd:54:5f:d3:54:19:e5:
                    36:14:aa:ad:d7:f7:6e:7b:37:92:f5:99:2c:c8:19:
                    83:6e:b7:7d:44:1b:11:0c:91:6f:9e:ec:3c:81:a6:
                    18:f7:0d:63:65:29:2d:cd:6f:c2:19:7d:6d:25:4d:
                    af:7f:db:ca:9e:69:5e:51:c1:24:8e:c9:69:3f:7b:
                    bf:c3:9d:4b:73:1a:ce:9a:89:27:54:b0:c6:c4:9a:
                    9e:70:00:dc:dc:e1:09:53:55:78:bb:2a:3c:25:d8:
                    3e:d6:5f:55:df:b5:79:f9:f7:00:ea:22:28:ed:e1:
                    96:8b:dd:8e:06:a0:d3:63:a6:4c:b8:d3:09:b0:fc:
                    c8:5f:c0:3c:f8:63:97:d6:15:68:6d:75:89:01:08:
                    bc:82:8e:7d:5d:b5:a1:4d:91:b3:93:65:e8:3f:b7:
                    3d:46:d9:3c:88:82:20:dc:ac:c9:f5:21:38:77:74:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6F:5F:93:E2:7B:DD:85:5F:2A:36:EA:36:47:0A:DF:03:7B:C9:74
            X509v3 Authority Key Identifier:
                keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:0f:aa:45:81:a7:65:5e:bf:a0:09:20:d3:ea:aa:ec:ec:
         e2:56:c4:91:c9:17:df:1c:7b:bb:30:16:b5:92:b4:1c:db:72:
         c8:6b:34:32:14:e0:4c:87:3a:2f:f4:d8:47:07:c5:ba:d0:1f:
         18:db:3f:36:ee:8d:97:02:c6:a7:e2:4d:26:5f:ff:f0:f4:76:
         f7:1e:e9:8a:d2:a7:1f:9d:36:a2:a6:36:a8:5f:d3:a2:0a:c3:
         7b:01:f4:e3:32:9e:0c:9c:a3:a1:56:c0:e6:4a:6f:c2:78:9d:
         48:20:3b:15:c9:13:85:5f:57:90:e6:f1:46:21:0e:05:66:c4:
         d8:9c:ae:fb:13:f3:23:69:b9:f6:f5:e2:a0:29:1f:6b:68:6e:
         8d:a3:98:e9:5b:09:61:72:55:84:86:d3:81:dd:d0:0c:b1:17:
         60:14:60:70:f0:8b:59:1d:e2:86:9f:9b:69:9a:8d:1e:54:53:
         fb:70:5d:0b:3b:5d:80:de:f2:25:97:30:5a:9c:f6:10:87:99:
         b4:37:62:c5:dd:3c:85:28:e1:c0:e8:7f:9d:2a:8d:d9:e1:4b:
         2c:96:03:54:4f:fd:3a:e4:a1:e5:e9:01:26:11:4c:7b:ba:d3:
         55:2a:94:59:8e:05:a6:c5:6b:76:38:35:7c:10:c9:20:4d:b2:
         7e:92:d6:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmo5s2aSxc72l4xFOBNNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTk1OTFkNDg1ZmMwZDA5MDJhODliZTg0MThhM2JiMTI3
NTA2YTUwHhcNMjYwNzI5MDIwMTAwWhcNMjYwNzMwMDIwMTAwWjAzMTEwLwYDVQQD
Eyg3ODZmNWY5M2UyN2JkZDg1NWYyYTM2ZWEzNjQ3MGFkZjAzN2JjOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl5AztLYwCpJ2Ox0eOeXuaKhyKez
L47oQEnJI2Ftiei9DzohkIf5mIsqixghjqQ4elQ8ZIgISKYeV3ngGMEAQdupTIeL
jf5Tffm47NwGqHAnsb1UX9NUGeU2FKqt1/duezeS9ZksyBmDbrd9RBsRDJFvnuw8
gaYY9w1jZSktzW/CGX1tJU2vf9vKnmleUcEkjslpP3u/w51LcxrOmoknVLDGxJqe
cADc3OEJU1V4uyo8Jdg+1l9V37V5+fcA6iIo7eGWi92OBqDTY6ZMuNMJsPzIX8A8
+GOX1hVobXWJAQi8go59XbWhTZGzk2XoP7c9Rtk8iIIg3KzJ9SE4d3RCVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhvX5Pie92FXyo26jZHCt8De8l0MB8GA1UdIwQY
MBaAFDepWR1IX8DQkCqJvoQYo7sSdQalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Njc4ZjktOWRmZS00YjM5LWE4MGIt
YzU0YWY5NjBlZjE4LzEvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85Njc4ZjktOWRmZS00YjM5LWE4MGItYzU0YWY5NjBlZjE4
LzEvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfwPqkWB
p2Vev6AJINPqquzs4lbEkckX3xx7uzAWtZK0HNtyyGs0MhTgTIc6L/TYRwfFutAf
GNs/Nu6NlwLGp+JNJl//8PR29x7pitKnH502oqY2qF/TogrDewH04zKeDJyjoVbA
5kpvwnidSCA7FckThV9XkObxRiEOBWbE2Jyu+xPzI2m59vXioCkfa2hujaOY6VsJ
YXJVhIbTgd3QDLEXYBRgcPCLWR3ihp+baZqNHlRT+3BdCztdgN7yJZcwWpz2EIeZ
tDdixd08hSjhwOh/nSqN2eFLLJYDVE/9OuSh5ekBJhFMe7rTVSqUWY4FpsVrdjg1
fBDJIE2yfpLWUA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:22 2026 by rpki-client