Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          5UhJiphsw1xQcLrPnWuOatZuS3u6cchB76lmkewkiHs=
Subject key identifier:   EB:EB:77:C3:9C:6B:0E:CA:E5:AC:FE:6E:C1:2A:77:FE:B2:30:C2:87
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       019FA906D7371610B3AEE5009AFDC00A69F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 14:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:25 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: NkfKW1P6STMNUXnRKS/tTY3i3MPH8aD9b8rCVinKRfc=)
                          2: Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa (hash: CBRZQkgyapVEnN+KlGzYptdXDl00PSWBvuMGdvm4uCg=)
                          3: Lnic-b8RKeW1rpPqbvXKHlom-ys.roa (hash: 2KTr1u+98H46S2uNewgTQPp+snCfpr8r+A46P3ahmR4=)
                          4: QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa (hash: K9uUssgaA9Cw/QN8kWZlExQkvdqZ4stsO6RuK8HpBDo=)
                          5: TyGVkDRU5VuGCHmgtXtvADqB47k.roa (hash: zZ1WNsnAjF4PPiuPy/odw3fOv3vMdCoVvaWlx1hFRXc=)
                          6: qm1N6afKIHDIeVkklPLOLKGaS4s.roa (hash: ewBUJyCJZqBY4ReNaWU+ZIFZCEk2IZ7kEhQ4Bd+n260=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:d7:37:16:10:b3:ae:e5:00:9a:fd:c0:0a:69:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Jul 28 14:00:25 2026 GMT
            Not After : Jul 29 14:00:25 2026 GMT
        Subject: CN=ebeb77c39c6b0ecae5acfe6ec12a77feb230c287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fe:26:cd:9e:1c:13:ca:a2:a1:74:f7:c2:09:
                    8c:a9:de:5c:f6:a9:b7:e9:82:27:bb:7f:ba:a9:21:
                    e3:3d:46:42:3c:55:5b:e7:18:78:76:cf:dd:e3:01:
                    c6:ec:b2:ec:b0:aa:c7:b1:f1:27:3e:62:97:97:01:
                    8d:2a:09:33:c4:ca:11:1a:e9:7f:ea:7e:29:ad:29:
                    87:ea:2d:d8:ad:2d:03:91:61:8f:4e:9c:a9:8f:ed:
                    5b:00:19:a3:8d:e4:09:97:22:4f:9d:64:e7:03:5d:
                    81:d7:05:72:e0:19:dd:3a:3f:9b:8d:41:b8:da:b4:
                    ba:58:5b:40:a2:32:22:31:82:90:0b:58:b0:8e:30:
                    b3:a8:ae:c0:ed:ab:05:11:ce:c6:1c:18:57:d7:c9:
                    0c:12:54:41:bc:de:b2:8b:b2:aa:db:24:00:6d:2e:
                    0c:c6:8d:06:36:16:d2:f8:b5:ac:4b:0a:f2:71:2c:
                    04:a1:2b:f0:f2:12:b0:8d:bd:97:6d:42:8a:52:17:
                    3f:c8:96:93:a6:76:b9:d7:02:1f:2b:32:6d:14:ab:
                    8b:40:16:10:62:75:b1:3f:3f:63:ef:57:b3:27:85:
                    26:4b:97:d9:9b:57:a8:32:34:e2:88:d4:3b:f4:ee:
                    8d:cc:32:55:b9:dc:0f:2b:78:a2:77:7d:34:b6:b8:
                    e4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:77:C3:9C:6B:0E:CA:E5:AC:FE:6E:C1:2A:77:FE:B2:30:C2:87
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:55:57:5a:a8:12:60:3d:e1:ce:48:91:b1:da:42:ce:ca:
         46:47:e4:da:f1:5f:a2:64:fa:63:2c:de:90:7e:ac:f5:80:16:
         db:22:29:35:38:6f:db:e5:34:31:35:ea:ed:41:bd:bb:c4:52:
         38:05:21:6c:ef:9f:73:fc:94:7c:73:cd:17:5c:da:06:0b:4b:
         8c:62:3b:78:24:c0:56:bf:5a:20:f3:42:cf:6c:a2:10:2a:d8:
         fe:19:27:f3:66:e8:a9:e8:3b:66:9a:a9:34:19:e1:99:54:51:
         77:4a:cc:a6:82:3f:b9:d5:b8:f8:d7:91:bb:a9:b4:6c:16:84:
         d0:d2:94:e0:6d:c7:df:ce:3b:aa:6d:6a:89:ab:37:0c:fb:f0:
         3b:cf:cc:15:80:4e:55:8f:e2:40:10:cb:de:e8:66:e5:62:7b:
         ae:67:d3:b1:2e:3b:9f:16:32:27:19:b9:71:5b:de:74:ee:b7:
         55:71:99:96:02:2b:f8:c0:f6:54:1d:70:d2:f4:88:0a:57:98:
         01:4e:18:7d:88:74:42:39:00:46:27:21:55:c3:d2:79:de:bc:
         47:9c:16:c2:95:ba:47:12:4f:66:1d:aa:c7:a6:3a:8d:5d:40:
         4f:dc:15:ef:02:d4:0a:9b:70:88:d6:21:5c:2c:d1:d2:ef:c5:
         aa:1c:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:46 2026 by rpki-client