Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.mft
File:                     c_K938o-FjgkhsCfq0RJDRaizjQ.mft (raw, json)
Hash identifier:          meYXNHYLiR4Y+qpaXaAZU10ysTt2lOFSBPb/MYoAy8s=
Subject key identifier:   5E:0E:6E:51:56:70:89:A9:03:54:86:95:90:EB:5D:BF:CD:2F:AB:9E
Authority key identifier: 73:F2:BD:DF:CA:3E:16:38:24:86:C0:9F:AB:44:49:0D:16:A2:CE:34
Certificate issuer:       /CN=73f2bddfca3e16382486c09fab44490d16a2ce34
Certificate serial:       019FAC7676769D7122C139E6D621F2A3F296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_K938o-FjgkhsCfq0RJDRaizjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.mft
Manifest number:          9C
Signing time:             Wed 29 Jul 2026 06:01:12 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:12 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:12 +0000
Files and hashes:         1: CH28uOspk_mHzp5DTavyhjJKwuY.roa (hash: I+DwlQqKyy5mVdOOcr8qt2Y9GKTDu8zUjqzs2Jm0zb8=)
                          2: c_K938o-FjgkhsCfq0RJDRaizjQ.crl (hash: P2yC5tswj/NkkIFy/xcKzafkOqBpmiOsa/qi8aRUeGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_K938o-FjgkhsCfq0RJDRaizjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:76:76:9d:71:22:c1:39:e6:d6:21:f2:a3:f2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2bddfca3e16382486c09fab44490d16a2ce34
        Validity
            Not Before: Jul 29 06:01:12 2026 GMT
            Not After : Jul 30 06:01:12 2026 GMT
        Subject: CN=5e0e6e51567089a90354869590eb5dbfcd2fab9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:24:05:c1:19:f5:bf:c2:92:5e:29:ea:4c:
                    9f:73:90:14:69:8f:7c:9b:ed:fb:87:60:ae:02:76:
                    2c:13:b7:b4:e8:e1:07:bd:0a:4a:78:60:7f:b8:53:
                    8d:dc:66:c7:73:29:9c:c1:df:38:c0:27:35:33:aa:
                    ea:33:91:ab:52:36:38:50:50:66:81:54:cc:41:1b:
                    f1:f6:82:64:3b:ba:5f:06:b0:fb:b0:09:b9:a9:e2:
                    13:96:39:5a:6a:a6:69:a5:0e:53:00:5a:cd:e6:14:
                    94:da:a8:ac:a6:49:ee:b7:aa:23:2a:ba:c1:76:aa:
                    46:80:ce:cd:8b:f2:7b:b2:41:41:ac:df:72:ee:31:
                    da:41:9c:4c:e9:b9:b3:01:7f:cc:7b:5d:70:76:8d:
                    1a:ab:49:69:b7:7b:54:ca:61:4b:84:2a:29:ce:85:
                    e2:e7:74:42:8b:df:be:8f:ee:65:8e:5a:30:69:19:
                    b5:12:38:21:54:f0:1f:58:94:1d:71:d5:65:bc:82:
                    0f:71:55:68:21:24:62:4d:f1:ad:38:a6:b2:58:97:
                    ff:f2:16:cd:42:12:4a:5b:85:6b:44:f0:2c:71:66:
                    ed:7b:e6:b6:34:4e:cb:45:b6:78:d8:be:e0:2f:5b:
                    23:c9:b1:1d:ae:36:1d:d5:c7:29:80:b9:ee:c4:8b:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0E:6E:51:56:70:89:A9:03:54:86:95:90:EB:5D:BF:CD:2F:AB:9E
            X509v3 Authority Key Identifier:
                keyid:73:F2:BD:DF:CA:3E:16:38:24:86:C0:9F:AB:44:49:0D:16:A2:CE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_K938o-FjgkhsCfq0RJDRaizjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:28:80:c4:ac:13:27:fe:61:7b:4c:14:e9:e6:8f:b1:27:75:
         9c:49:5d:00:35:dc:62:0a:71:30:9e:19:0e:aa:32:50:03:82:
         45:7b:41:38:29:ec:d8:c9:82:c8:d6:a9:05:63:8f:a3:50:98:
         3b:40:b6:77:1a:82:cf:a3:79:53:02:36:c3:18:a5:7f:16:1a:
         17:60:bf:da:b5:47:87:ff:7e:af:48:e6:b1:be:53:7a:7b:1a:
         7a:cb:26:ce:bb:13:80:77:a2:f7:01:cb:88:49:07:2b:d9:7e:
         72:b9:2d:f1:dc:4c:a9:23:c6:f4:ef:74:ae:10:ee:3d:1b:79:
         c5:74:af:d4:93:39:d2:2a:c1:42:f4:15:91:98:81:91:12:ee:
         13:6e:7d:25:6a:1c:75:97:f4:04:35:92:52:82:77:cd:a1:87:
         68:b9:6d:87:d5:90:c6:fa:ea:53:fa:da:4a:4e:38:0a:42:05:
         56:77:83:6d:76:8d:34:65:c2:90:1b:28:ee:ab:1b:5a:b7:47:
         bd:f0:a8:a1:aa:73:7d:08:69:80:39:76:34:7f:20:44:7e:58:
         48:81:20:ab:45:35:ff:5f:8a:c0:16:30:b8:cb:30:cd:cf:27:
         82:f9:a3:82:4e:18:2d:50:07:10:dc:ea:22:1e:9b:95:78:2e:
         1f:cc:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:11:48 2026 by rpki-client