Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
File:                     9oBoAaqBnIocqImNFZiUkJzoKCk.mft (raw, json)
Hash identifier:          RxCEMoLuuqcIajHHYsWpVSZBJdXDkXSyr5weONWN04o=
Subject key identifier:   2F:C0:11:FF:0D:4A:F8:87:08:DB:1C:56:7A:2A:E7:B9:14:C1:AE:4B
Authority key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Certificate issuer:       /CN=f6806801aa819c8a1ca8898d159894909ce82829
Certificate serial:       019FAA19D9B5ACB32AFFF175BE64B04D1FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
Manifest number:          E5
Signing time:             Tue 28 Jul 2026 19:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:48 +0000
Files and hashes:         1: 9oBoAaqBnIocqImNFZiUkJzoKCk.crl (hash: 810WeX3cPlKXwiJbFN5z2uC75qsGlmm3apUy5IrYgKk=)
                          2: ystfWuwLG_sjkRPz74-K9kJmCS0.asa (hash: A/Zpc7HU31s0tuJut1dPdLlpZdSrvy9Su9vtCFoJBpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:d9:b5:ac:b3:2a:ff:f1:75:be:64:b0:4d:1f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6806801aa819c8a1ca8898d159894909ce82829
        Validity
            Not Before: Jul 28 19:00:48 2026 GMT
            Not After : Jul 29 19:00:48 2026 GMT
        Subject: CN=2fc011ff0d4af88708db1c567a2ae7b914c1ae4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:76:5d:cd:1e:8b:21:22:84:14:fc:4e:f3:6f:
                    5e:7c:75:77:cc:e5:f3:a5:fb:2f:e5:88:e1:76:80:
                    4c:85:14:93:ff:c3:82:2d:0c:67:a0:a0:c1:fd:0c:
                    c1:90:88:44:dd:3f:12:72:71:75:0f:a2:81:8b:7f:
                    e2:2a:6e:2b:86:8e:08:5a:38:0d:8d:b4:86:66:ee:
                    49:6c:48:c1:f9:0e:ac:2b:13:19:45:b8:2b:c5:52:
                    f2:1d:df:6d:9d:3d:ee:19:1d:72:86:29:84:34:42:
                    7d:22:70:04:6b:ce:0d:45:96:f6:6b:2a:b4:ee:e1:
                    40:04:ae:d1:4d:b7:f1:d0:a9:03:e1:be:76:35:a0:
                    bc:5a:df:0a:a7:8e:63:fa:83:17:26:14:aa:6e:ea:
                    7b:42:d7:47:3e:a8:34:2a:84:88:60:c3:53:ea:cd:
                    c6:14:29:39:3a:f6:08:e4:d2:f3:50:a3:1d:dc:92:
                    cf:e1:76:c8:94:69:50:53:95:3a:23:44:15:00:76:
                    54:3f:47:5e:b6:35:b0:5d:f3:eb:b8:74:8f:1d:70:
                    f2:77:47:ba:dc:ec:b2:f3:4d:37:29:ec:1a:f5:7b:
                    c5:2a:63:d9:38:05:db:95:b6:f6:ba:88:d6:b4:e9:
                    8b:fc:ac:99:6a:c4:7e:f9:f1:ed:6b:37:6e:9a:cd:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C0:11:FF:0D:4A:F8:87:08:DB:1C:56:7A:2A:E7:B9:14:C1:AE:4B
            X509v3 Authority Key Identifier:
                keyid:F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:78:66:2b:4f:80:af:64:c2:e7:5f:29:b5:7f:1e:e5:80:f2:
         07:fe:88:f3:02:77:4c:6c:be:bc:bd:78:e2:6b:d8:57:24:60:
         54:34:39:c6:94:ad:65:ed:80:a4:91:69:96:26:a3:da:77:2b:
         42:61:89:44:aa:6f:e6:d4:ce:af:3a:11:7a:50:3b:19:14:ab:
         ac:b8:19:10:85:c6:9c:9b:d0:81:37:58:ae:9f:02:69:64:7e:
         57:51:9b:c9:13:1d:a1:54:fc:af:a1:fd:fe:cf:9a:7e:97:3d:
         41:10:92:e0:98:57:f7:0f:9c:0d:da:d7:c6:af:eb:3d:e2:f3:
         c1:c4:e3:b8:3e:07:e1:d0:8b:c6:92:ea:cb:e8:a1:87:32:43:
         f8:5d:d2:28:9b:1c:43:1d:9b:49:fe:5c:87:fa:15:2f:80:96:
         b7:15:c2:68:fe:b2:7c:5b:1c:f8:38:3a:b3:34:a9:4f:59:0e:
         2d:13:55:cc:51:6e:fc:8d:eb:96:47:5b:03:02:3f:3c:ce:43:
         fd:88:53:f5:65:e1:05:f0:95:6c:4e:31:ad:6e:a0:eb:3c:d3:
         c2:05:8e:10:1f:cf:9f:e6:41:ca:07:d3:87:d8:8e:c6:ad:ae:
         70:e3:00:12:81:63:5e:36:31:74:d7:73:c4:9f:96:de:d1:df:
         15:01:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:33 2026 by rpki-client