Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
File:                     9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json)
Hash identifier:          l1ApEEz1HXu5RMb9ewI8ffB6dIZNb5IJfDiRuMZ9S6I=
Subject key identifier:   BD:BD:6C:3F:C1:CA:1D:3C:FC:3D:E6:37:25:32:E7:34:6C:B9:72:A9
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Certificate issuer:       /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial:       019FA9ABB95045C5DBD81239F1749F06D2EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 17:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:31 +0000
Files and hashes:         1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: dWupjbM/kvvaeLyciOwHGGYEojGUkWT3zHQQJqKsX34=)
                          2: UKATPR0b1kY7oFPVkZYEepDy3LY.roa (hash: CrwvVmRRQkszz0pHbbKO1FTUZbPyR5yvt9U+ujLmXCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:b9:50:45:c5:db:d8:12:39:f1:74:9f:06:d2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
        Validity
            Not Before: Jul 28 17:00:31 2026 GMT
            Not After : Jul 29 17:00:31 2026 GMT
        Subject: CN=bdbd6c3fc1ca1d3cfc3de6372532e7346cb972a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:cb:c4:5b:0f:e4:84:41:e1:49:60:6b:91:
                    39:96:db:dc:2a:03:a0:d2:b9:b3:1b:23:5b:88:b5:
                    ec:5f:16:88:28:f8:45:65:c7:31:50:a3:00:95:52:
                    f1:7c:b0:3d:27:68:3f:f3:16:4c:1d:29:f2:ad:46:
                    ec:5d:89:12:46:7d:aa:93:36:ca:c2:58:fb:f1:14:
                    2b:e1:b3:72:7f:20:e6:3c:7b:57:ee:25:3a:39:f3:
                    be:10:f9:c9:3d:41:1d:cf:d3:86:c5:db:73:30:e0:
                    c1:6b:96:d4:57:7a:e2:bd:20:9a:ff:b2:75:15:ef:
                    b4:1f:dd:c2:59:a3:f0:b4:eb:e8:fe:a1:43:da:62:
                    ce:91:a0:48:76:cc:64:b9:63:9a:fc:c7:cc:76:f6:
                    19:31:7d:55:c5:75:01:06:a1:30:fa:49:e7:99:da:
                    c3:74:24:26:f3:5a:cf:f6:31:0a:0f:c0:1f:b5:54:
                    af:37:e2:b5:94:06:ec:66:0a:54:60:0a:c2:ce:bb:
                    8d:17:b9:53:4e:ee:c3:be:47:fc:09:cc:70:7d:b2:
                    0f:30:06:61:dc:ed:5b:a0:ab:18:94:c9:c7:a1:63:
                    1f:47:26:fc:eb:39:3d:bb:52:e6:64:78:9f:6e:45:
                    9f:32:92:72:0e:d5:94:4a:10:e9:be:6a:6e:44:22:
                    21:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BD:6C:3F:C1:CA:1D:3C:FC:3D:E6:37:25:32:E7:34:6C:B9:72:A9
            X509v3 Authority Key Identifier:
                keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:56:05:70:75:90:07:97:fe:80:15:0a:d3:09:3c:59:5c:
         5b:63:71:bf:c6:43:9e:aa:05:55:41:dd:50:65:49:d6:27:60:
         03:53:39:91:fc:e4:68:10:5d:a2:85:f4:b1:dc:ac:3d:36:87:
         e9:6d:08:2e:8d:89:68:f2:97:83:1d:4c:7f:47:f6:1a:ae:0f:
         35:a1:b3:b6:66:2c:a0:61:4b:4f:d8:9c:64:de:9c:d3:70:76:
         4e:6b:a2:04:93:45:5c:7a:32:1d:ec:90:52:a5:2c:14:e1:22:
         44:f2:d4:d9:a4:49:90:10:18:74:59:f7:00:82:35:aa:1c:1d:
         85:31:4c:2e:20:90:b4:51:16:19:ce:8e:d2:f4:bc:a1:6b:c8:
         bd:e9:37:fc:c1:9a:ba:b3:ca:ed:8f:a6:a4:71:94:ff:ff:68:
         97:ee:b8:1b:e8:9b:17:4a:8a:d3:29:29:2a:c8:7c:09:79:68:
         b0:4e:30:41:50:c6:85:62:82:ba:a6:90:95:31:9b:42:d4:1f:
         2f:49:0b:c5:7d:8e:e2:64:cb:16:91:a3:31:ec:5b:d3:ef:95:
         be:f7:0f:c8:78:4f:4a:43:da:1e:3b:2e:fe:22:84:4d:6c:12:
         96:07:2e:f4:46:dd:c2:3f:3a:60:cb:a3:3c:10:af:c1:35:a2:
         45:91:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:00:34 2026 by rpki-client