Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File:                     9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier:          KTW7edCpRc6JSqCVQJOk/1bPqMd8L8Fo0TzTfb+JEUM=
Subject key identifier:   BA:E2:51:0F:D6:2F:48:DC:AC:1A:A2:05:97:8E:98:B5:20:6C:34:A3
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer:       /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial:       019FA97580383428E24F3F3BC963203062D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 16:01:17 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:17 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:17 +0000
Files and hashes:         1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: 6G1PfBlxLdbrhDaKnmscsOxgXd2VQNfg3nxk5ZdT9DM=)
                          2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:80:38:34:28:e2:4f:3f:3b:c9:63:20:30:62:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
        Validity
            Not Before: Jul 28 16:01:17 2026 GMT
            Not After : Jul 29 16:01:17 2026 GMT
        Subject: CN=bae2510fd62f48dcac1aa205978e98b5206c34a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:cb:00:df:9a:d3:23:f9:a6:16:a6:fe:6e:
                    3f:87:52:c5:92:2a:22:f0:01:c0:77:4f:f7:50:75:
                    14:f0:c0:47:92:72:e6:f9:ff:f6:35:9b:5f:8c:7a:
                    c7:8a:91:7c:93:b2:03:1c:a5:61:e5:8c:21:43:78:
                    1a:ad:2a:ff:53:22:34:40:4e:f9:4f:ca:5c:b3:d2:
                    e9:57:d0:54:40:cf:4b:c7:c6:ee:6a:c7:81:8a:ca:
                    12:bb:e9:b5:63:38:c3:5b:9c:d1:e1:32:b3:fd:c0:
                    ce:a5:db:52:dd:97:7a:12:6e:8c:e9:a0:a7:34:19:
                    a1:a3:18:51:6e:da:e9:fc:ee:ee:3d:4b:a8:0a:d4:
                    60:74:b6:87:09:89:b7:f7:b3:ec:56:22:8e:12:32:
                    64:53:e2:63:52:24:0f:09:99:13:a2:2e:71:40:b2:
                    76:2a:59:03:bf:54:de:b5:65:b6:d7:28:da:62:36:
                    53:ea:7d:4e:6b:8c:8f:35:2a:5a:61:14:f4:b8:7e:
                    bb:9a:43:36:fe:98:86:d2:73:66:7f:1d:66:cc:ab:
                    d6:e1:75:ae:56:eb:59:12:ab:05:ad:61:28:4f:d4:
                    8c:25:c7:84:76:6a:35:42:7c:9c:ae:31:ba:05:cf:
                    c6:62:84:d3:be:b4:1a:fa:37:ed:07:f4:e5:75:9f:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E2:51:0F:D6:2F:48:DC:AC:1A:A2:05:97:8E:98:B5:20:6C:34:A3
            X509v3 Authority Key Identifier:
                keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f7:5c:10:04:a5:3c:1f:e5:d5:07:98:e4:88:eb:4f:41:ca:
         4f:35:a3:46:00:39:fa:b2:30:ce:2e:45:57:35:36:0c:16:e7:
         95:7c:82:2a:18:e9:61:47:bc:3c:88:2c:8c:95:cb:15:5e:a9:
         a9:54:dd:25:85:13:55:d6:8b:55:56:f9:60:38:4d:1d:a6:52:
         56:6d:ac:4a:da:2e:d2:fe:85:d6:45:67:45:d7:0c:49:ba:ae:
         51:a9:71:e2:42:ce:c1:3e:be:36:57:7f:a9:35:24:03:b7:d7:
         0a:04:60:43:4f:43:e9:9e:b2:a1:16:0f:1d:42:47:3a:2e:4f:
         65:9c:80:9e:80:0e:07:ba:21:ff:43:f9:72:2b:29:e5:8b:75:
         d2:24:69:ea:81:e8:27:9b:5c:c3:b5:9c:46:9f:88:dc:61:3f:
         56:fa:98:ec:92:8e:be:a7:ac:1f:f7:78:b2:88:7d:c8:47:f7:
         a1:58:c9:d5:ea:99:b7:cd:f0:bf:cd:2e:a2:9e:bf:3a:5d:52:
         28:97:81:ee:bf:fd:34:52:04:96:77:72:e9:c1:3a:a4:37:a3:
         6d:6c:53:20:a4:0b:24:5b:b7:21:32:cc:e7:d8:6d:7e:4f:33:
         c2:9d:76:3e:54:fc:83:8e:48:fd:5e:4d:55:f5:2b:20:5f:f3:
         41:89:7c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:07:33 2026 by rpki-client