Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
File:                     9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft (raw, json)
Hash identifier:          ouuCdDU4CHTYl9/slaqdlD0QNK3VlwH34QZmuVnS0T4=
Subject key identifier:   78:FA:62:EE:4F:CE:80:68:C7:6C:DC:A8:D8:8E:40:39:6E:96:07:34
Authority key identifier: F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
Certificate issuer:       /CN=f503b683d74086443bd44e6d92b71776c5c35170
Certificate serial:       019FAC75C080799F05BDE60336765ABD4EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:25 +0000
Files and hashes:         1: 9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl (hash: aY5Rduc2aTHKY/eFRxUAwQUxklDDzeRY39YrY7YM7BA=)
                          2: HTNsugke4MWbq-KA8tY6qGsGFPU.roa (hash: Mi9NVud1o7sRwVPeXhNA2XrKJJxoAf4148gfz5Otapk=)
                          3: JJ3xHddZ0I1G4GC6ngsCT2Z1AKg.roa (hash: p0H/nJ8SSJawvhGyEkFr2hf/MirWYL1XCitw4pi102Q=)
                          4: _tSwCFIyoro2_8fyrvvppEiqvS0.roa (hash: TVivWAxuruX7VGe8Ch5xumfC8p0/dufE200KVqqhK0s=)
                          5: eFymynVjt6vNLX6dgR8AMKIzfPY.roa (hash: HmoMiqC9o5KMCkBBFDS5GyMpNG5AXy7PpIEPOGUNk+k=)
                          6: yPbTPygA04jm5b6RI-fjv8j8p54.roa (hash: Mw7So9/gLa1JzNMQ+Fuh1uffOAeMJx7QSDexSxpXoso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:c0:80:79:9f:05:bd:e6:03:36:76:5a:bd:4e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f503b683d74086443bd44e6d92b71776c5c35170
        Validity
            Not Before: Jul 29 06:00:25 2026 GMT
            Not After : Jul 30 06:00:25 2026 GMT
        Subject: CN=78fa62ee4fce8068c76cdca8d88e40396e960734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:83:86:02:d0:1b:e2:40:f0:f4:97:ae:43:
                    66:cc:e0:e0:95:64:d6:e0:90:cd:82:3c:6f:54:4c:
                    5a:a0:9a:1f:4b:dc:4c:cd:20:60:99:7e:05:73:09:
                    b9:9c:d7:ff:55:e6:ee:97:b3:e9:1f:47:3d:4c:5d:
                    db:90:77:ad:44:26:44:bd:24:c1:0b:25:cc:ac:56:
                    f5:10:e8:9c:e6:f1:61:3d:f3:4f:3f:4c:e8:cf:3a:
                    e0:0a:49:38:96:20:a7:30:f1:36:ad:3e:a4:24:27:
                    f5:fc:ed:6d:d3:47:02:41:24:02:7f:1d:14:ce:b0:
                    77:45:93:11:fe:e3:ba:7a:6f:d0:e2:4a:9c:e7:2d:
                    94:71:b4:a5:42:4c:07:17:a6:c6:01:d2:2a:af:ae:
                    a7:18:57:20:e8:66:d6:6b:ae:fd:42:5c:44:e7:aa:
                    fc:eb:b8:2a:9b:3a:ef:59:bf:ab:8f:29:9c:02:c9:
                    31:65:b5:7a:84:e5:8e:c9:02:8d:9e:4a:cd:a0:8a:
                    2d:bf:a8:16:52:63:72:3b:4e:bf:42:99:68:71:00:
                    e6:58:96:c1:30:82:7c:12:e0:c1:4c:2f:2b:42:34:
                    03:cd:de:ff:12:da:4b:98:b5:47:0d:b4:51:04:8c:
                    3f:b7:40:42:d0:c1:a9:a4:81:c9:5f:86:68:b0:31:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FA:62:EE:4F:CE:80:68:C7:6C:DC:A8:D8:8E:40:39:6E:96:07:34
            X509v3 Authority Key Identifier:
                keyid:F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:74:bb:49:ea:e6:18:cf:0d:4b:c1:f6:4e:0b:9b:40:e6:79:
         59:7d:d7:29:7f:c6:ea:91:82:33:8c:7f:88:23:e3:83:42:9f:
         4f:bd:f4:f7:40:ac:83:19:13:2c:f1:d4:6c:a7:bb:f6:46:af:
         18:42:2d:8a:8d:87:98:30:c5:da:fb:0a:b9:a2:99:ac:e5:6a:
         ef:f5:9a:a6:ac:96:db:ae:8f:0a:d4:2e:f1:40:5d:63:a2:0a:
         49:79:c8:74:c7:1a:65:c0:fa:98:34:c2:d5:9e:a3:d2:88:bc:
         8b:a4:b5:b3:5c:74:45:d3:b4:48:82:b1:89:d5:69:66:98:6b:
         61:06:99:10:1a:ab:f4:60:bb:04:f3:76:87:30:95:75:40:87:
         88:7e:84:d5:47:1e:62:57:64:9b:73:25:78:1e:3d:05:62:4f:
         f0:e5:37:f4:fa:93:88:cb:3e:fd:1a:be:d9:04:68:36:3d:bf:
         37:ec:53:5f:95:6c:5f:2b:e7:54:18:0d:48:5f:3e:3f:3e:77:
         9e:2c:c4:b9:23:af:93:49:a7:9a:bf:41:82:0b:92:00:45:d0:
         9f:7b:67:da:04:c7:49:c5:49:a9:ee:04:55:90:52:ec:27:44:
         14:ad:72:d7:74:09:d1:dd:93:3e:5b:ef:cc:cd:71:c9:ea:c4:
         22:bb:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:06:59 2026 by rpki-client