Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File:                     9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier:          rltQBLOQdiYPNXl4bmoyUhYyrXZmgd0DMpuKedeoUqA=
Subject key identifier:   1F:48:FB:50:86:1D:77:46:2F:C7:D9:76:E9:EC:31:E5:DE:4B:7C:05
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer:       /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial:       019FAC76F0995325AA4950FCE1AB4485E05A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number:          0EC9
Signing time:             Wed 29 Jul 2026 06:01:43 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:43 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:43 +0000
Files and hashes:         1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: /gS+FtuTHqTVuDBKVyfsbFMSj9ULqB3s+K4L/hhYES4=)
                          2: h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa (hash: yzd9rByRC5Jsp/Gy055ZEn4rSEyip4EOwsA55gh4BjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:f0:99:53:25:aa:49:50:fc:e1:ab:44:85:e0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
        Validity
            Not Before: Jul 29 06:01:43 2026 GMT
            Not After : Jul 30 06:01:43 2026 GMT
        Subject: CN=1f48fb50861d77462fc7d976e9ec31e5de4b7c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:1d:8f:eb:65:dc:91:05:87:29:61:60:ac:
                    42:08:e9:6c:54:ba:a6:ef:4b:9e:7c:5c:d1:bd:34:
                    4a:57:84:77:16:7d:bc:46:b1:28:12:da:9c:10:0c:
                    b8:b8:08:46:70:eb:61:57:4c:88:ad:a5:87:4b:9c:
                    b5:05:65:8e:37:42:99:af:f4:42:79:47:e5:5b:04:
                    be:de:1f:43:d7:76:67:bf:b1:ce:2a:04:f3:ed:a0:
                    f9:8f:16:c1:7c:11:c9:ba:12:6e:ba:d5:f3:bf:c0:
                    4b:b3:49:b5:eb:a6:e7:51:14:08:0a:4a:c8:e5:e0:
                    ba:6d:86:b3:ad:e5:98:91:c2:5b:39:b3:35:7c:8a:
                    7d:a1:a4:c3:bb:bd:8f:93:92:a3:f4:d5:25:49:6a:
                    e9:3d:ff:b8:2b:40:9e:28:5a:5c:28:61:eb:3a:7f:
                    55:fb:8e:eb:94:d1:f6:83:7f:64:33:d0:1a:d1:70:
                    e0:2a:12:44:c4:1c:85:d4:9a:cd:4c:80:25:03:49:
                    f8:b1:6d:f0:8a:d6:57:6f:78:0c:1b:36:c3:24:e6:
                    77:fd:0f:93:15:ff:a2:45:03:63:84:a9:2d:ff:af:
                    aa:f3:24:96:75:95:94:9b:83:e2:7a:e7:80:b7:21:
                    3a:c5:e0:c6:dc:c5:0a:f2:0f:43:5a:c3:19:aa:33:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:48:FB:50:86:1D:77:46:2F:C7:D9:76:E9:EC:31:E5:DE:4B:7C:05
            X509v3 Authority Key Identifier:
                keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:be:5c:0d:dd:f5:33:7c:a8:7a:a4:7b:44:67:2f:9a:1a:b1:
         e9:15:3e:45:7a:72:90:9e:3e:81:8f:f6:00:37:e4:6b:cd:9b:
         f2:2e:bb:75:03:4e:01:dc:72:c1:ed:0b:fe:c8:a7:d9:bf:f9:
         3e:93:fb:2d:67:f4:aa:42:6c:2e:39:f6:9d:49:94:46:b3:59:
         77:6f:7b:f3:49:48:85:a7:ae:3f:8d:69:e9:9c:8c:49:a0:01:
         52:d9:01:9a:bb:df:ab:36:c0:96:f4:cc:3f:cb:fa:1e:63:c7:
         6b:dc:f4:ab:07:1b:00:0f:30:d7:e5:7e:79:3a:55:60:2d:c4:
         f8:51:7b:40:a8:1e:b0:81:e4:68:21:6c:ab:39:86:a6:55:12:
         d9:c1:bf:7b:5c:2e:6e:85:59:f6:90:f8:9e:d1:94:d6:cd:1a:
         a3:03:57:72:fb:3e:46:e5:73:39:7d:a9:35:9e:ac:5f:30:8d:
         17:51:9b:e6:a2:a4:d3:0a:ff:3b:7c:26:e4:95:a3:2f:dd:ec:
         6c:e4:64:bb:c7:a1:79:07:9e:3d:bf:36:7d:73:03:40:85:7c:
         6b:6c:9d:ea:cb:58:48:47:3f:3a:1d:6b:b1:65:09:a1:35:b3:
         63:38:1e:8b:0b:b9:85:d7:47:0a:c6:47:94:7f:8c:46:76:c7:
         76:51:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:52 2026 by rpki-client