Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File:                     9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier:          3XEnRnWiWohddaajaXtpYp7KxvAxCWWscXRlz/micAA=
Subject key identifier:   78:3E:72:4B:95:66:41:44:30:66:B9:D5:FF:D3:D1:81:95:3A:EE:1D
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer:       /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial:       019FA906EBC6CBC2AACC729DA98375C382FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number:          0CE9
Signing time:             Tue 28 Jul 2026 14:00:30 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:30 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:30 +0000
Files and hashes:         1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: ahpph4zVm5Z7OGOKr2JULX+zi7aKEi1nV1yEAksRuN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:eb:c6:cb:c2:aa:cc:72:9d:a9:83:75:c3:82:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
        Validity
            Not Before: Jul 28 14:00:30 2026 GMT
            Not After : Jul 29 14:00:30 2026 GMT
        Subject: CN=783e724b956641443066b9d5ffd3d181953aee1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:c9:cc:78:40:8f:32:7f:4e:ba:32:b8:aa:
                    c4:60:9f:0e:22:e3:6e:38:06:21:25:4e:cf:87:62:
                    ca:5a:e9:df:7a:6d:2e:db:bf:ae:57:14:3e:c7:21:
                    4f:a3:9a:e9:da:46:4c:37:5e:fd:4e:f5:bd:7d:f9:
                    9e:21:1d:0e:96:2c:e2:62:85:fe:78:ac:67:b3:14:
                    c5:8f:06:11:4a:f5:2c:5d:a2:6f:b1:12:11:67:be:
                    05:cb:4b:ff:35:b9:c0:c2:55:8a:a4:cd:6b:be:ba:
                    84:6d:49:a4:08:4b:d5:ed:f1:b8:de:47:e7:d3:be:
                    c9:7b:5e:78:1b:e0:92:6e:34:43:73:de:95:08:0f:
                    64:12:03:4e:7c:a7:1b:76:8e:8c:b8:bc:22:41:ff:
                    88:0a:57:c3:ff:71:10:e1:07:4f:fe:4e:d5:21:c1:
                    4e:69:49:01:33:5d:2a:21:83:ae:92:58:35:99:01:
                    02:43:06:56:19:8a:e4:d3:9d:10:70:9f:0a:91:e3:
                    66:5e:a8:af:54:ff:c9:c1:5e:7c:db:ff:3f:0d:1b:
                    7b:4e:68:19:a2:e8:0b:e4:c7:fc:0d:41:15:e9:32:
                    70:ab:d2:44:36:6c:64:92:31:de:0f:f1:13:c6:1b:
                    99:43:27:7e:91:f4:a3:fa:a5:8c:ce:21:c8:8a:52:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3E:72:4B:95:66:41:44:30:66:B9:D5:FF:D3:D1:81:95:3A:EE:1D
            X509v3 Authority Key Identifier:
                keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a9:7d:eb:ac:80:2d:6c:10:2a:3f:96:13:9f:75:32:7d:f4:
         e1:43:a8:ed:81:13:64:97:2b:6f:41:86:fb:04:2d:f7:af:2e:
         33:de:af:19:37:f4:43:9d:3d:21:7f:39:cc:0d:2f:40:c7:bd:
         1d:97:46:d6:c5:9b:6e:0b:78:24:4f:14:ba:1d:2a:fa:cb:da:
         72:2d:21:3f:a9:4b:35:6a:d7:42:05:70:55:7d:ed:71:24:b5:
         76:09:58:b6:d4:7e:c7:64:86:04:c8:50:77:88:59:23:10:15:
         58:48:e6:7e:b6:2d:3f:34:5f:8b:b7:5d:42:28:88:55:ae:2c:
         ea:30:a1:a1:54:2b:ab:64:c6:23:c1:aa:7f:a4:59:2c:4f:a4:
         33:39:57:54:ff:46:1b:f6:9b:6d:77:95:07:50:7d:d3:4a:a5:
         a4:b7:db:a4:4c:d5:2d:c5:de:71:a6:40:ef:b0:c6:e2:73:03:
         e2:9e:0d:80:36:43:e3:98:79:41:5c:3e:47:a1:6b:bf:89:46:
         88:c9:dd:58:5c:aa:77:a3:29:de:6a:7d:a2:4a:4d:ac:fb:90:
         7f:cd:8a:c0:c0:d1:cd:31:03:c7:c1:24:42:ec:01:bb:4e:6e:
         65:61:3d:35:4a:b8:43:40:d7:6c:8b:37:3a:49:5c:a1:f1:2b:
         48:41:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:48 2026 by rpki-client