Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File:                     9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier:          v4pxoGwfIyIsjjHdKqGbKE59MXo7D90eAFd+xchyQDY=
Subject key identifier:   E1:71:8B:E5:F6:5E:15:67:AF:E7:9D:49:AA:D7:84:AE:14:B9:BD:07
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer:       /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial:       019FAA19558233A78E5D7BE912C4525D652D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number:          0F9C
Signing time:             Tue 28 Jul 2026 19:00:14 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:14 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:14 +0000
Files and hashes:         1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: TBH7w9pBdjPLRnYlKmOhu4a3sV0LuLZ/U2PrmRhwxaE=)
                          2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:55:82:33:a7:8e:5d:7b:e9:12:c4:52:5d:65:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
        Validity
            Not Before: Jul 28 19:00:14 2026 GMT
            Not After : Jul 29 19:00:14 2026 GMT
        Subject: CN=e1718be5f65e1567afe79d49aad784ae14b9bd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:bb:b3:d7:30:31:e9:52:70:dd:be:b2:04:
                    10:2f:2f:13:2e:18:39:08:71:f2:7f:3e:33:a9:bf:
                    33:ac:9e:50:ad:60:9e:61:65:32:c3:23:ca:84:bd:
                    13:6f:4b:8b:44:93:8a:14:dd:93:d2:d1:f5:af:53:
                    d4:f2:4b:54:35:34:26:0c:c5:07:dc:0d:02:05:6e:
                    9a:c9:1e:27:ba:0a:2d:18:83:c9:dc:21:7e:1f:5c:
                    95:af:81:e3:c5:4e:3b:16:a9:42:65:31:cb:44:45:
                    2f:0b:f4:22:5f:9a:af:88:5e:a7:41:dc:b9:22:c9:
                    48:cb:5d:1d:3d:2c:c0:aa:28:2d:6f:84:37:8e:a8:
                    d7:76:5d:33:de:4d:30:ca:ea:ff:c6:f9:6c:9d:30:
                    55:d8:80:04:bb:4b:0e:fb:70:68:ff:82:2a:18:14:
                    aa:a7:97:60:3a:df:08:cb:ea:f6:8b:d4:bc:e6:6e:
                    ea:33:f3:cf:e7:16:68:d7:e0:d6:7b:1a:7b:04:0f:
                    fa:48:39:f9:83:d7:e4:de:3f:1d:72:d6:03:1f:1e:
                    f1:b4:01:b4:5c:ce:b2:ca:a5:09:4e:e1:ce:17:cc:
                    92:22:73:12:26:d7:fb:f8:90:16:8a:da:23:85:d8:
                    ba:9f:a7:99:4d:1a:37:68:af:e2:d3:2a:be:cb:03:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:71:8B:E5:F6:5E:15:67:AF:E7:9D:49:AA:D7:84:AE:14:B9:BD:07
            X509v3 Authority Key Identifier:
                keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:96:d9:d3:d2:29:88:15:6f:3d:e2:72:53:11:23:ab:dd:f3:
         40:8d:63:44:ef:a5:6e:60:d5:68:67:b9:d2:0e:e6:fa:d4:53:
         b6:03:a3:2f:e8:6f:c1:42:f4:f4:b2:28:e1:44:14:59:1c:31:
         6c:79:13:d5:7b:13:8b:19:f7:f1:88:aa:73:1b:ca:04:15:83:
         57:2c:fb:52:27:90:49:e6:70:90:88:8d:24:7f:05:36:f7:69:
         5d:28:86:cb:cb:63:9b:50:c0:7d:f4:eb:50:5b:d8:a6:dc:d8:
         7a:ff:a7:bf:60:bf:22:7b:79:4b:ce:a8:bc:38:dd:85:76:0b:
         ae:e0:a5:61:33:2b:0b:59:d3:1f:64:5f:c9:ac:15:7a:ee:c4:
         ac:18:5e:42:29:d0:cc:90:03:04:8a:01:9a:e2:43:c5:53:ff:
         eb:2b:d3:a3:cb:3d:7d:d6:b1:35:25:f2:b1:e0:6f:27:98:bb:
         5f:24:4c:94:36:4d:8b:4c:af:c0:29:3d:24:3c:02:79:06:fb:
         14:70:f5:1f:84:b2:9a:a0:99:95:b3:73:90:99:aa:73:76:cc:
         f3:2e:b3:01:98:df:fe:57:a2:06:4f:5a:78:02:11:a8:d9:72:
         99:2d:98:71:26:80:53:93:2a:e5:91:e0:37:b4:3e:14:24:45:
         2c:32:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:25 2026 by rpki-client