Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          aWNZQxnde8Vv+nmYSjuh6S2neslobncASOK7tRYLxcg=
Subject key identifier:   63:6D:9C:23:28:43:1A:40:6E:73:36:6A:2D:F0:9B:23:9E:C9:32:CA
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       019FAB9A5D60385272369A9A66142DDB6E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          063B
Signing time:             Wed 29 Jul 2026 02:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:48 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: ESxf7uzVLXm8XnTNW3nbp6z8oZ4Jg4mIsodePIIiLU8=)
                          2: Q1BIazUMtU491Kfp1prxFz4oeuU.roa (hash: sJo8b2jgePbm04v5Oh4sG6+LqF87DEVfl2ISH3CHQlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:5d:60:38:52:72:36:9a:9a:66:14:2d:db:6e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: Jul 29 02:00:48 2026 GMT
            Not After : Jul 30 02:00:48 2026 GMT
        Subject: CN=636d9c2328431a406e73366a2df09b239ec932ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5b:c1:6b:61:05:6b:fc:b5:bf:9a:6c:fc:2f:
                    d6:89:48:fa:ac:e9:ea:45:ce:f9:fd:33:5d:dc:75:
                    c7:50:4e:0d:8a:19:7f:a7:29:13:b4:3a:6b:04:18:
                    39:d1:f8:4a:da:2b:b6:b5:f7:79:36:ed:3d:d4:14:
                    62:0d:04:6a:d1:37:7c:36:74:f0:ce:96:71:23:ec:
                    1f:ad:fc:95:6f:44:f7:6a:38:41:39:68:ad:03:67:
                    ea:91:76:ae:57:ac:7f:fa:29:94:bf:b6:3a:ec:4d:
                    ff:c9:22:fc:7a:a5:6b:17:69:35:c6:aa:60:5f:12:
                    87:d9:7a:e1:bb:21:88:5b:79:00:77:57:fb:1b:8b:
                    09:2a:93:cb:99:88:42:81:83:86:69:85:b4:26:60:
                    c4:17:ad:7c:89:a8:7f:46:0f:35:3c:11:5e:69:cc:
                    63:e2:79:8e:35:f6:8e:98:15:94:8e:b0:32:d7:0c:
                    2c:6c:e8:6e:28:62:0c:d3:7e:52:b6:7b:30:b3:c7:
                    4a:96:3e:a5:9e:7f:8a:bb:e9:a8:6e:f3:99:2f:f6:
                    4f:cd:a8:80:af:fe:ca:42:10:fa:e8:a3:ca:ed:9f:
                    47:58:4d:32:aa:e8:69:63:27:92:e2:29:d8:bb:8f:
                    b2:1b:9b:e2:43:18:05:9b:c9:fa:12:99:40:c6:13:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:9C:23:28:43:1A:40:6E:73:36:6A:2D:F0:9B:23:9E:C9:32:CA
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:f0:5a:29:0f:24:f4:f4:a8:a2:3f:0e:c0:48:46:fa:94:
         e1:8d:b3:cc:a1:00:b6:12:a1:55:b8:26:ae:6d:ba:03:f1:2e:
         e8:aa:45:3a:2f:27:c5:78:8e:68:da:96:04:20:36:95:91:2f:
         2f:5d:db:aa:57:36:b2:66:be:98:a8:1e:a6:b1:83:35:e0:34:
         27:6b:5e:7f:9e:14:07:15:9e:cc:55:e1:7e:0d:0f:3a:c7:96:
         fd:3e:a2:48:a7:41:09:22:db:bd:99:67:39:9d:e0:72:81:d4:
         e0:b7:b4:25:8a:1b:b3:6a:3e:ca:39:7c:fe:4f:ba:b6:bd:8c:
         c2:a3:82:0d:ce:99:73:e6:53:54:a6:d3:5b:4f:67:32:aa:06:
         1c:d9:85:8b:4c:18:2b:cf:71:3d:64:3f:16:e3:7f:82:fc:85:
         6f:5c:27:fa:65:af:c2:01:69:45:14:b8:04:84:df:54:f5:61:
         96:23:6e:7b:73:ca:75:d4:a3:c3:f4:dd:67:b1:45:1e:a2:5d:
         22:78:db:81:f5:45:fa:62:96:d2:e9:fd:3b:b9:35:d6:c4:43:
         f3:55:5a:a8:be:9c:65:6e:13:4b:a1:03:2f:c0:4c:56:c2:0f:
         5f:c5:90:63:77:51:48:86:d9:3d:65:80:cf:36:3e:c8:ac:89:
         26:4b:e7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:42 2026 by rpki-client