Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
File:                     9ONr1L84JXQMkFpnzcFrMBhyqnE.mft (raw, json)
Hash identifier:          kxjt1kEY0b49FlTYwmRPRW50wsxke8pRHT6HRi66bO0=
Subject key identifier:   FC:B7:1F:CD:F7:9C:4C:E3:89:35:CF:07:43:27:27:35:C0:27:66:0F
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Certificate issuer:       /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial:       019FA9ABF703A8F4DD9E2FFC650FD8B08B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
Manifest number:          0110
Signing time:             Tue 28 Jul 2026 17:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:47 +0000
Files and hashes:         1: 9ONr1L84JXQMkFpnzcFrMBhyqnE.crl (hash: moGrwJ+s5xV7XCN950sCaGWwTXg7LWpyw7DwUOdrezs=)
                          2: LLDfBKtlCeW3eI7057StcwRGUvc.asa (hash: FU+roj6w95slO9NnUEl8Tx6t8gdfs68bD1W8S1h/R64=)
                          3: Vr9B-zHNKLHeB8Xx57Kq7jsYtHM.roa (hash: OzngqieZsxcHJ4EZWwYuegusT/oah57Gh4sMFZUQ7jw=)
                          4: YIz6jgPy4T57-v5Y0lRVw2yHO-g.roa (hash: y3YrgdUaOAbn2OQqch9+TXJZirScPNyDivnJKIFz94k=)
                          5: gxhNdT76LUOawd0GerJXEnAbQVU.roa (hash: ViECi6teUjpoYqtJK7rD4xR1mS6VHcPwXBdiN9l6wxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:f7:03:a8:f4:dd:9e:2f:fc:65:0f:d8:b0:8b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
        Validity
            Not Before: Jul 28 17:00:47 2026 GMT
            Not After : Jul 29 17:00:47 2026 GMT
        Subject: CN=fcb71fcdf79c4ce38935cf0743272735c027660f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:05:9b:da:d6:b5:77:00:73:b2:54:db:ea:
                    63:a1:a5:99:da:17:44:8d:ff:53:98:f6:60:3e:a3:
                    43:42:ca:d6:42:77:a1:17:3c:21:35:d9:4f:ce:91:
                    2e:b1:a6:46:5c:b4:66:13:9e:7b:7f:99:bd:c7:b7:
                    e2:e1:e1:04:96:c4:f9:4f:fe:3e:98:a8:d0:0c:2c:
                    cc:e3:3f:1d:d6:01:73:1f:7a:34:fe:6a:bf:00:f7:
                    d9:8d:16:77:c3:c1:a3:26:54:1e:c9:58:ce:62:b6:
                    fc:13:df:6e:91:a2:db:49:e6:a6:ac:77:db:fb:08:
                    3b:63:27:68:dd:76:08:b1:4d:f1:4d:eb:ca:95:a6:
                    03:02:0d:62:f8:a3:17:6f:53:b7:3d:85:b9:4f:a5:
                    67:01:30:e0:75:91:47:51:09:06:cb:52:f0:6e:87:
                    45:23:4e:bc:bf:a1:87:00:7b:eb:7f:6b:9f:dd:23:
                    20:13:78:c7:23:60:03:d8:87:59:8b:cd:eb:63:00:
                    3b:37:68:99:75:3a:38:57:26:3e:fd:d5:ce:fc:9e:
                    93:18:38:13:2a:af:66:41:30:d7:b1:19:bb:67:b3:
                    53:50:ee:4d:88:b2:aa:83:dc:61:85:20:b6:0b:b6:
                    7b:d5:9b:2c:7c:36:84:aa:73:b6:79:f8:73:9f:f1:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:1F:CD:F7:9C:4C:E3:89:35:CF:07:43:27:27:35:C0:27:66:0F
            X509v3 Authority Key Identifier:
                keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:6f:b7:4a:b9:3a:ec:b0:11:99:cc:4d:f5:c9:e1:b9:99:
         b6:a0:46:81:5a:ac:32:46:36:73:53:a6:b9:02:e9:a4:b7:97:
         29:49:bf:0e:26:d2:8b:37:d6:2e:b4:23:f1:8e:28:7b:04:df:
         61:e1:12:11:f5:cc:5a:1d:36:d1:c9:fd:a2:ad:6a:2e:75:84:
         b8:6b:1d:e9:9d:c8:f9:17:5a:de:b5:72:20:8f:bb:83:d1:96:
         14:d8:d7:38:4d:52:29:aa:9b:99:26:af:05:f3:59:45:64:cc:
         5d:07:ae:7f:4b:94:02:e0:24:8f:05:fc:74:4f:22:8d:86:bf:
         65:fe:b6:52:dd:e4:91:03:9a:04:75:37:36:71:5c:2b:43:65:
         cf:fe:5c:82:e0:86:85:31:0c:6a:0b:11:57:68:28:18:9b:fd:
         f2:b5:1f:e8:c1:25:5a:d2:57:8a:d3:bf:95:32:5e:e2:7e:b5:
         02:0e:c8:fc:ae:99:84:44:33:99:83:57:13:e3:43:50:71:b5:
         2b:58:4f:c8:76:57:ad:0b:83:7d:13:95:a5:67:a4:d2:ba:c1:
         85:ea:95:fc:53:b2:13:fc:75:ac:00:59:dc:9d:58:de:09:ac:
         d5:81:e4:dc:f3:67:04:ef:08:a7:93:a9:57:65:4c:70:13:ba:
         b0:05:61:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:57:18 2026 by rpki-client