Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
File:                     9mKtW4G4BxPe0-__RCmfzXZfKrE.mft (raw, json)
Hash identifier:          SkgYGYXt9+7p5BBJoHyM0EkHYE7qNjZ7J/qjDs2rzpQ=
Subject key identifier:   D2:DE:C2:C5:72:6B:94:8B:1E:38:25:28:96:38:67:25:DD:FD:EE:BD
Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
Certificate issuer:       /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Certificate serial:       019FA7BDDBDAFA4CA3A4A1AF17CB5F023E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
Manifest number:          0345
Signing time:             Tue 28 Jul 2026 08:01:05 +0000
Manifest this update:     Tue 28 Jul 2026 08:01:05 +0000
Manifest next update:     Wed 29 Jul 2026 08:01:05 +0000
Files and hashes:         1: 9mKtW4G4BxPe0-__RCmfzXZfKrE.crl (hash: sAfNojJvg0ECvvxHpqsh+lmYRVF4y1XP9LDMmJSViLE=)
                          2: RAl96iixqVEN2XfpcyNK_lqQaRw.asa (hash: ivoc/WPTnR4RpjpcihO6ZdK0F36q3tm5FbTsxWrkrRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:db:da:fa:4c:a3:a4:a1:af:17:cb:5f:02:3e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
        Validity
            Not Before: Jul 28 08:01:05 2026 GMT
            Not After : Jul 29 08:01:05 2026 GMT
        Subject: CN=d2dec2c5726b948b1e38252896386725ddfdeebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:e1:e0:ce:61:57:d3:6e:a2:a2:ab:ab:4d:
                    c7:cc:8d:a0:c4:00:b9:ec:dd:cb:22:91:e8:b5:6b:
                    23:74:f2:0c:18:c4:f8:8c:eb:e4:8b:94:b4:06:2c:
                    21:fa:f3:e0:e4:fa:cf:7e:61:39:61:67:59:4b:6e:
                    b0:c9:7f:9e:46:a4:2d:46:d2:e1:d7:e6:4d:ab:2a:
                    ee:6b:9b:cd:25:95:90:a0:12:83:1a:82:d4:7d:6d:
                    50:ec:b7:9f:d5:a1:32:f7:d9:f4:1d:7d:ce:cb:17:
                    fd:bf:b2:db:1e:39:41:70:e1:6c:bf:01:6b:0b:ef:
                    db:f0:87:97:27:82:dc:18:c6:86:7e:2b:24:ea:e8:
                    d4:c2:be:41:2a:2a:9f:7a:78:c3:54:b8:8c:58:9e:
                    d1:26:86:9d:3e:ac:6d:73:31:b6:9b:e2:e5:e6:41:
                    d2:e6:12:ef:1d:ea:54:43:79:76:d7:e5:5b:12:00:
                    e9:08:e3:e1:42:98:12:fd:0c:e7:33:4e:d3:71:67:
                    ae:c2:07:eb:11:49:bb:bd:7a:d5:44:e4:ed:d0:51:
                    45:24:aa:7b:35:17:e8:a0:2e:a2:bd:fa:52:82:56:
                    75:85:66:71:b9:73:8d:7b:38:03:db:45:f3:ea:1a:
                    c7:8b:83:07:98:99:5c:5f:77:e9:f1:09:1f:a7:d9:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DE:C2:C5:72:6B:94:8B:1E:38:25:28:96:38:67:25:DD:FD:EE:BD
            X509v3 Authority Key Identifier:
                keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:be:f2:f9:30:7a:cb:54:6f:aa:2a:18:d2:53:06:87:86:a2:
         74:13:e2:d1:18:23:ba:1e:2b:ae:bd:87:ca:10:d2:93:5c:94:
         c5:a9:ad:b5:f7:d5:f5:42:ad:1b:98:57:eb:aa:7f:ae:fb:42:
         f5:da:5a:64:e6:3e:66:bf:8c:34:ca:bc:5d:bb:ab:e8:0a:b4:
         13:0a:a3:a7:d6:0a:dc:62:e3:9d:23:80:b5:64:d8:4e:ac:8b:
         89:36:c6:7f:e4:ec:36:0f:cd:0d:3a:b0:6e:41:a2:55:94:93:
         fb:e5:e4:98:ae:c7:77:99:be:ca:69:3c:e6:4e:33:f0:91:0f:
         a4:38:9d:a6:85:f3:02:8d:a0:1c:0b:68:2b:e9:f6:3c:9f:e2:
         26:97:26:69:0b:d9:77:34:ab:91:97:d5:43:c3:55:f4:df:3f:
         2d:07:23:ac:33:8b:22:5b:fb:82:56:c9:97:4d:83:7b:4e:cb:
         87:42:4b:4e:fc:34:48:17:a3:9d:a6:84:3b:3b:4c:0b:b5:1f:
         72:55:ee:d1:5c:26:32:0c:39:6a:ef:cd:b7:bc:8e:b0:38:2b:
         70:f5:d8:cb:83:b6:9b:55:58:19:cd:95:2e:81:8d:3d:6a:21:
         84:69:7f:4f:1d:06:2b:19:cc:0f:a1:da:b6:b9:0a:67:5e:f3:
         4a:36:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:36:15 2026 by rpki-client