Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File:                     9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier:          BYHptBprMj4RC6tPw8Gw43BUuCUQ6wqV2jRvOcW1BhU=
Subject key identifier:   77:DC:6D:D6:E2:E6:F7:84:DE:22:C1:24:D6:3D:2C:CE:78:E9:06:06
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer:       /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial:       019FAABEFA5424D050FAF32212C934E28DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number:          06D2
Signing time:             Tue 28 Jul 2026 22:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 22:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 22:01:10 +0000
Files and hashes:         1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: 1UhsDR3uwsgKpxBJ1ABJM45kUTpQKZSyjzfU+EVemrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:fa:54:24:d0:50:fa:f3:22:12:c9:34:e2:8d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
        Validity
            Not Before: Jul 28 22:01:10 2026 GMT
            Not After : Jul 29 22:01:10 2026 GMT
        Subject: CN=77dc6dd6e2e6f784de22c124d63d2cce78e90606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:c4:4a:01:d9:a0:93:d0:db:57:e4:ca:1c:
                    f5:24:a7:a5:e2:da:a9:1e:a9:71:fc:96:bf:9c:66:
                    70:6e:9a:8a:91:1a:a0:42:3f:60:eb:ab:99:c8:dd:
                    ee:d8:30:ff:e7:73:54:28:f3:97:92:e5:0a:2e:2f:
                    de:c6:91:9f:0f:6a:5c:45:0e:73:8d:48:06:0b:12:
                    ce:6f:b5:ca:f6:41:c5:15:82:c7:5f:56:43:fb:30:
                    20:f5:7d:1d:b0:31:0c:5c:f5:f6:c1:e4:80:14:6a:
                    c8:bd:20:62:b1:02:fb:30:72:d1:ca:8a:8c:f6:1c:
                    0a:71:70:16:ee:80:1f:3b:57:61:8a:09:fc:e4:87:
                    ff:ea:0e:92:89:5f:7a:e1:61:6a:87:ba:1e:39:45:
                    dc:75:5f:98:9e:ed:61:ec:35:f7:9f:10:ca:92:ad:
                    b0:6b:72:e5:9a:be:fe:ce:75:6e:7e:9b:89:5a:59:
                    31:a5:bb:8c:89:33:c3:d1:4f:51:fc:3f:db:73:7d:
                    04:8d:ca:31:46:e1:50:8f:e2:7c:7f:22:0e:04:d1:
                    0e:b8:5c:d7:a1:c9:00:c6:71:9c:9b:39:10:6a:2f:
                    78:dc:ac:b2:d1:9a:00:38:b7:4b:66:66:a6:ef:ad:
                    18:33:34:e8:39:52:6d:6c:de:87:fc:27:fd:86:a2:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DC:6D:D6:E2:E6:F7:84:DE:22:C1:24:D6:3D:2C:CE:78:E9:06:06
            X509v3 Authority Key Identifier:
                keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:85:79:aa:56:5c:39:ad:81:4d:0c:0d:d0:ba:7e:9c:e8:d6:
         d7:9e:ba:6c:1e:3b:cb:e0:36:9a:de:c5:3f:2e:c0:df:32:c2:
         34:10:e5:f6:ff:e4:23:69:d9:82:d2:b3:12:26:3f:e0:ba:d4:
         40:07:2d:23:3c:2d:fb:33:b5:27:92:c0:86:78:cc:f5:8f:ac:
         95:65:4e:bd:77:d6:bf:56:94:23:87:fd:75:9b:34:07:72:e2:
         9d:e8:61:32:76:ce:66:b0:6c:52:e2:1c:c3:99:3a:94:99:b5:
         c9:13:b9:fb:c4:be:66:ef:9d:a1:1b:58:23:6b:6c:08:32:26:
         d7:c6:72:ba:57:77:81:70:70:d4:fd:de:9d:dc:50:4e:dd:f9:
         03:15:a3:8d:4e:87:cf:7c:6f:97:4d:11:cb:67:3d:0d:6b:29:
         4c:d8:9e:5f:ba:6a:58:a2:4d:e7:42:8f:53:8b:9a:e6:5b:d8:
         d0:94:45:1d:25:7a:4c:25:6d:92:7b:f3:d9:41:2f:a4:83:f2:
         ec:50:c7:9f:8a:52:30:cc:f1:7d:68:3c:2e:70:b3:e7:00:df:
         25:97:dd:35:4e:c2:7f:d7:f4:4d:fc:22:dd:f3:eb:04:7f:22:
         81:51:b2:ec:64:8b:f2:14:8d:63:11:1b:3c:d7:44:c0:5a:20:
         7f:9d:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:38 2026 by rpki-client