Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
File:                     9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft (raw, json)
Hash identifier:          mi4jG9ml+KjfLOAoNeMExKJDkMYw+AQV+Wuad+H/ux4=
Subject key identifier:   0C:9E:EB:95:77:21:B6:7D:4E:95:DE:32:30:F4:1F:B4:76:ED:AA:15
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Certificate issuer:       /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial:       019FAA8824440DA111A1442E21A58B875F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
Manifest number:          19D9
Signing time:             Tue 28 Jul 2026 21:01:16 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:16 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:16 +0000
Files and hashes:         1: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl (hash: Sd1aLPYC/hOsIWOvwE31VKr4HIepwmkog9NWoK9qmBg=)
                          2: OPe7lv08wkeFNGsC5xI0Ye-tyS4.roa (hash: 9PRV/BDVo/xjAGp+LIYowfzpqr3ir5eopm9m/HkpD54=)
                          3: dCUiT81Vaet-9SHbpBx8w7tyJ7c.roa (hash: /Xlo9LK8qMOcKnWSF81eE0SjEcTSjPNFikykaWlHLh8=)
                          4: pOIHGUUuOPs9gK6e1Y9l7RwpvMs.roa (hash: SqTKikGbpOYjqCy/UCM9pe/PLZqFgP5MSdKpR876lUg=)
                          5: vMy8_qPow1_oOv83hdNqlP2PfRI.roa (hash: kd+7ZLZl3l6JtCbEUK+6GN4dP0dO+nAVwWVXURI3BzI=)
                          6: zLW6eUC8JGOg-hnvrRo094RNXFo.roa (hash: /s1RytH9WVOyABzMaamurrv26Mpv7C2tjQSbPhnFyKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:24:44:0d:a1:11:a1:44:2e:21:a5:8b:87:5f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
        Validity
            Not Before: Jul 28 21:01:16 2026 GMT
            Not After : Jul 29 21:01:16 2026 GMT
        Subject: CN=0c9eeb957721b67d4e95de3230f41fb476edaa15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:b6:ae:01:89:d1:2d:4c:93:c7:68:7d:3a:
                    fb:ff:c3:ed:da:a5:1a:ff:33:f9:39:37:2c:7b:6c:
                    0c:c6:a8:f9:69:fe:31:8e:77:5d:2f:e5:5f:8a:99:
                    1b:15:a4:b5:44:54:4f:95:67:b1:25:48:8c:03:71:
                    bc:93:0e:60:da:dd:04:ea:33:e1:4b:0c:bf:2d:c3:
                    d0:fa:5e:9f:7c:a4:df:a8:ba:90:c1:70:f2:c1:7a:
                    6e:3a:7f:1f:8b:84:a2:75:a6:6e:85:71:8e:26:48:
                    99:b3:6a:d1:19:f4:11:b3:9e:ab:c4:1b:ff:a1:48:
                    12:fc:3f:1d:3d:5c:b2:45:51:89:7a:11:45:ed:83:
                    22:35:07:ae:d8:10:f2:a1:2a:7d:97:ab:f3:ac:d5:
                    4c:ae:a8:62:95:e4:89:47:e6:20:28:f7:ee:13:1c:
                    39:9e:07:5f:ed:7b:48:76:1c:84:65:c0:ea:56:9c:
                    3a:dc:86:b0:0a:74:98:d2:03:43:f6:d0:83:73:5e:
                    cc:4c:79:f3:9e:6e:58:01:79:fe:ac:f8:73:81:e5:
                    2b:55:00:e2:fe:50:e3:1f:36:dc:8f:81:ab:13:92:
                    59:c3:7a:94:76:18:30:dd:71:e1:e2:c7:bf:d3:99:
                    58:6b:f5:b8:29:17:7e:3c:d1:67:f0:10:64:b3:92:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9E:EB:95:77:21:B6:7D:4E:95:DE:32:30:F4:1F:B4:76:ED:AA:15
            X509v3 Authority Key Identifier:
                keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cd:9a:8e:99:b4:d5:55:6c:21:54:ee:54:d8:96:b7:59:1a:
         e8:1c:e4:ac:86:65:70:1d:1a:14:d3:23:e6:06:a4:81:ed:db:
         b4:e1:cc:54:1f:22:82:f4:12:f0:f2:a2:04:4c:65:d0:c3:05:
         c0:7a:9e:59:6f:1f:23:78:8f:82:73:0a:81:80:24:06:38:83:
         15:d6:00:f4:d6:5c:4a:59:05:0a:c1:39:a9:b8:d1:a1:00:0e:
         46:01:ad:ee:14:5a:bc:50:7b:d8:10:0d:67:81:78:0f:fa:64:
         a3:f6:41:20:7b:52:be:48:13:bb:0f:bc:57:74:e3:59:53:ca:
         c2:8f:ae:15:03:e4:43:b6:a0:e5:4f:a1:4e:11:97:7c:29:b1:
         01:6f:69:bb:81:94:cd:7c:8f:cc:48:0e:81:d5:e0:c3:5e:ad:
         a6:5c:f6:5f:c4:3a:0f:ce:1b:d5:bd:be:b1:e8:5b:fa:ef:4f:
         49:7e:f6:28:25:bf:83:f1:81:c7:52:4e:1e:e9:f4:fc:6d:b6:
         2a:79:38:46:7a:4b:4e:3d:24:21:68:a8:6a:44:e3:af:8e:d6:
         6b:50:2c:62:aa:29:2d:f7:41:66:27:68:51:e5:a5:9e:bb:ae:
         93:83:46:6b:51:98:7b:6a:8d:b5:8d:c7:bc:3f:ac:d5:b1:a7:
         85:6e:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:17 2026 by rpki-client