Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          ehb5htC/hE0XkMQshwIqJqb3PRSTBqEjmtiHla0zHEg=
Subject key identifier:   69:45:D7:13:1B:76:79:0E:46:CD:EB:7D:7F:B4:A9:82:B0:DF:34:99
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       019FA9E2DFDA1B2F4AE6CA87023A44B6CBD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          1528
Signing time:             Tue 28 Jul 2026 18:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:45 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: sa7SPVkKhtJZNwKI+QmkLXTK0JT6HPFAKGjtap8cXi4=)
                          2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:df:da:1b:2f:4a:e6:ca:87:02:3a:44:b6:cb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: Jul 28 18:00:45 2026 GMT
            Not After : Jul 29 18:00:45 2026 GMT
        Subject: CN=6945d7131b76790e46cdeb7d7fb4a982b0df3499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:ba:50:9d:a1:7d:d4:f1:8d:ac:21:35:66:
                    32:01:aa:e5:16:a4:0c:67:f3:20:93:46:34:a1:a0:
                    d8:8d:3e:ab:1d:72:e0:5e:e9:1f:09:64:6f:f2:ea:
                    f4:ac:29:a0:34:83:5f:43:82:5f:80:1d:eb:22:26:
                    3a:e7:9b:90:af:f4:d4:e8:73:7b:10:33:f3:07:85:
                    0c:e5:7b:8b:0c:8a:8c:65:eb:63:2a:fd:8d:bf:16:
                    f7:81:f4:29:ea:80:ae:8f:61:a1:83:d0:1f:c7:b8:
                    5f:40:76:77:e1:92:71:d9:a9:3f:35:1a:54:a9:3d:
                    da:d0:58:5b:be:42:47:0f:e5:8a:c6:d2:e2:0e:fd:
                    bb:5e:7c:a1:c0:3f:4a:64:60:95:2a:bf:8d:46:fa:
                    cd:a4:43:a1:67:c4:bd:41:da:88:a7:da:d7:13:fd:
                    ba:e1:95:4d:b4:2b:db:0a:20:ab:5f:71:6e:b4:97:
                    ec:91:23:cf:3a:ac:6f:18:bf:ad:f1:aa:12:ee:8d:
                    85:0e:5a:aa:bf:80:0d:85:7b:bd:9f:40:87:9f:e7:
                    84:02:c6:0b:6f:a0:a1:92:d9:59:02:20:d8:2b:27:
                    c2:cb:d6:cb:c3:d6:8a:bb:88:84:0e:f1:7b:be:3a:
                    24:80:32:17:f1:b8:f1:08:fd:b6:8b:0b:82:0e:44:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:45:D7:13:1B:76:79:0E:46:CD:EB:7D:7F:B4:A9:82:B0:DF:34:99
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:3d:88:35:2d:8a:59:85:eb:02:de:e0:4f:b7:db:8f:88:42:
         1d:5d:9f:ad:2b:be:43:2f:64:3c:34:57:25:60:8c:2e:81:6a:
         ea:37:97:e8:6d:78:36:b8:90:db:cf:40:98:65:d4:e3:25:6e:
         2d:0c:c8:f6:83:08:95:b5:bf:c7:dc:f4:9f:51:6b:79:91:16:
         31:8b:ae:ba:0a:5b:3d:46:56:6b:2e:85:46:6c:4c:e0:59:5e:
         13:47:5e:ba:dc:bf:0b:10:8e:03:97:1f:3d:20:90:50:33:16:
         df:a2:b1:fe:2d:eb:e6:4d:41:d3:4f:f4:f0:54:1e:18:37:a8:
         74:1d:6c:49:cc:59:43:64:1e:37:81:d7:e5:59:2d:5a:09:59:
         cb:f6:71:98:04:20:99:62:e6:47:fe:94:27:a7:3b:fe:95:a8:
         ce:5a:a6:70:c9:4a:5e:0b:7e:bd:1e:ba:20:1e:95:a7:67:e6:
         f4:76:f5:7c:cf:c2:4b:06:9b:57:e3:fe:df:35:fc:78:f6:76:
         56:3c:e5:0a:8a:cc:19:66:37:7e:e9:bf:4d:de:5e:54:db:ea:
         2b:34:17:90:13:01:51:f2:5f:51:b8:96:72:00:9e:83:2d:bc:
         4a:e2:30:db:1c:0b:fb:9f:6b:23:69:72:b2:3a:dc:ff:43:cc:
         ff:89:2c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:50 2026 by rpki-client