Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          TXEy1ySOVeHrACw4CKhAccGwGv2fn3iCZZBLEIm2lpA=
Subject key identifier:   AD:59:ED:15:D8:35:F6:CF:9B:4A:1C:F0:20:E7:E3:97:09:03:AA:31
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       019FAA19EDB9DF8F06EA70A7CC0D0C7A0509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          1A0A
Signing time:             Tue 28 Jul 2026 19:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:53 +0000
Files and hashes:         1: 4rHkukJZlmv4as-4xMu4r_3jmNE.roa (hash: +bpTdQ8MOcqEZXfHNxSdTdJOkYSVdHAINcyN0oTieLw=)
                          2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: O4FZiyL1D+kB4oCVsE0T6mFj/hpy0Yx9X/hYPGxO49M=)
                          3: Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa (hash: PlWjmtPxw4OkvYH5bNtiXs3BOmA0kF3dQLpadBG2s+E=)
                          4: GaY0PBVBeo4KpiNFKZ9BeK4puOg.roa (hash: kSV2htK/TB9FGgHOzLvBWeHTLFTLf67Ynu1IuSCMkQQ=)
                          5: cjcmiOtDDlTjyYQyKCJamvURnkg.roa (hash: kI1yDYXFOnMe/2BdFboj81gzmTgi8ptrjeCtHHILCuc=)
                          6: l2FIOzPFvXObRwUNiGKUwkx8yng.roa (hash: U27wT6U0NEvNHvjZg6ZUfLZqVxl9USYItoeoVAzNuao=)
                          7: wdNyk0cj7ZXHBOyRtNKSRHIMVM4.roa (hash: oARchr96uMH1VEdClz/RFIsJnl10GfEYjwsXH9UCt0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:ed:b9:df:8f:06:ea:70:a7:cc:0d:0c:7a:05:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Jul 28 19:00:53 2026 GMT
            Not After : Jul 29 19:00:53 2026 GMT
        Subject: CN=ad59ed15d835f6cf9b4a1cf020e7e3970903aa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ea:ca:49:52:68:af:ec:f0:54:30:fb:16:64:
                    db:21:76:14:2e:e1:6e:f5:26:c0:e0:be:12:00:c9:
                    76:4f:7b:26:63:26:a4:fd:d1:93:1c:12:d6:3c:68:
                    6c:6e:50:f3:d1:be:9f:a1:f2:68:c6:d0:80:1b:d6:
                    75:9c:f0:1e:69:14:05:6b:6b:cb:f7:2e:1f:1f:8f:
                    c1:e6:d8:e3:eb:b9:77:e9:a6:85:5f:d4:47:45:c5:
                    3b:dd:e1:e9:5c:f8:29:e7:fc:31:58:2f:04:74:cc:
                    9d:a8:00:c8:a2:5a:05:10:2c:e2:46:06:d0:6d:da:
                    38:63:f7:2a:0e:c0:c7:66:09:60:f1:1d:7a:0f:05:
                    e5:5f:77:77:b5:91:ff:ac:24:71:12:e6:ff:a1:f1:
                    79:a5:08:cc:68:8a:6f:57:bf:b3:c0:f5:53:d7:b7:
                    3d:cc:ea:48:15:e5:2c:de:67:80:0e:8b:3f:b0:63:
                    1f:ef:38:e1:2f:d7:59:a2:78:9f:83:f2:de:46:8b:
                    7a:d2:b5:30:d9:6a:18:24:89:89:4b:e0:f4:1a:b0:
                    ee:e5:1d:f5:26:b2:f1:19:1b:21:8a:fa:56:50:6b:
                    09:5d:40:b2:31:a0:c0:3b:98:46:b9:a9:95:4e:e4:
                    62:8e:4e:9a:88:4e:32:6e:b5:62:34:23:64:43:c5:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:59:ED:15:D8:35:F6:CF:9B:4A:1C:F0:20:E7:E3:97:09:03:AA:31
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:12:99:42:8e:a7:ad:b2:27:76:a9:ef:c9:0b:ff:97:d8:78:
         ea:68:c3:51:3a:03:d3:56:1a:21:ce:26:e3:8b:fb:d2:e9:e4:
         81:e2:fa:8e:d4:ba:e4:6e:e3:d8:c1:31:2d:a6:4e:e2:7b:14:
         42:13:b2:10:39:c6:d4:7c:ba:c3:44:a9:3c:92:c6:20:43:92:
         03:0c:de:84:e8:61:20:3b:11:e4:a7:25:06:91:4d:37:34:30:
         83:b1:66:76:ac:4a:20:3a:4e:eb:85:24:86:e2:3b:f8:be:c8:
         e7:90:5e:b3:60:14:c3:25:60:05:be:70:5c:e9:bc:98:5e:ce:
         c1:0d:11:0f:d7:cc:94:21:0f:87:8e:96:87:c7:27:2e:30:9a:
         35:70:a5:27:4f:19:09:8c:cf:cc:2e:a8:7e:18:3a:c0:1f:82:
         cd:1e:ec:18:ae:e5:68:80:08:a6:21:9b:e3:3d:ce:bd:39:35:
         44:ba:c8:c3:c9:2d:ed:a6:7a:63:fe:40:1b:1e:06:ac:62:fe:
         49:87:fa:75:54:5e:5f:6b:94:b8:01:27:7d:ff:b1:39:bc:bd:
         75:dd:c6:65:e7:92:cf:12:4a:35:8f:d6:ce:10:0f:06:b0:38:
         a4:aa:1f:af:2b:b1:dd:91:f9:d2:b3:66:b5:86:19:b1:e2:fa:
         7b:fb:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:45 2026 by rpki-client