Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
File:                     9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json)
Hash identifier:          8Ai+KoSTotOljFI0DMRAFYP/xJ+FRYaF2rIT+r4J6gk=
Subject key identifier:   94:E3:5D:77:4F:1A:6D:A4:9A:F8:C7:53:C0:8D:FC:8D:A9:ED:84:D3
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Certificate issuer:       /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial:       019FAA50B1905E47DF49170B87F7DCF9D112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 20:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:42 +0000
Files and hashes:         1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: 2Wzo7boRrNh/i1MwdhQXYTt2cLTI8tD3kuebDkHl9bQ=)
                          2: D6pbu6PuaXGUO72aluwouFmWjyE.roa (hash: 8nTR6hgWB05NUmie1kc3rGQpyUGmaI7APNhiLwhFbGA=)
                          3: rcuhAyb47ghJSUkGluQz5xbi7a8.roa (hash: dSp7RJi/mX+RduoQcYjQOlir9QxlgPqiE3UuXIucR2M=)
                          4: tR_zS3A481vfOfnyyYvyFxLHia0.roa (hash: Qhq0h0WmbkiB7Z075UwkzQfNFRsgPnPMZNA9izf97NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:b1:90:5e:47:df:49:17:0b:87:f7:dc:f9:d1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
        Validity
            Not Before: Jul 28 20:00:42 2026 GMT
            Not After : Jul 29 20:00:42 2026 GMT
        Subject: CN=94e35d774f1a6da49af8c753c08dfc8da9ed84d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:71:40:a0:ce:9c:78:ad:f3:35:03:cf:04:
                    b4:d7:f7:c2:a8:06:df:c4:8a:01:16:37:2d:bc:d1:
                    a0:f4:94:a9:78:b5:8f:68:82:a4:99:a0:b3:1b:56:
                    fa:5c:1f:68:38:5d:b0:3a:22:4a:81:1d:a0:3e:65:
                    40:13:d5:b4:5b:19:f5:d6:24:8d:91:e5:6a:74:2e:
                    6e:9f:cf:17:36:3d:87:0d:c4:3a:51:d8:62:e9:65:
                    b9:49:db:73:f5:ab:83:dd:52:5b:80:85:40:ea:0a:
                    cb:c0:83:13:46:f5:97:41:22:60:ce:ad:3f:11:be:
                    0e:98:b1:ed:35:58:22:77:f4:6e:0e:50:5b:7f:05:
                    89:61:af:ba:1a:38:3d:d8:42:38:6d:27:c5:e5:5e:
                    3f:81:da:a0:6a:c1:92:7d:5d:d1:4b:db:cf:1d:d2:
                    ba:14:34:4d:41:0c:7f:0a:45:f3:4a:2e:1d:a0:37:
                    06:c8:f7:4a:66:ef:21:25:ad:60:75:34:6a:3f:06:
                    02:59:01:72:14:01:ce:ff:e0:26:79:ba:ad:84:9c:
                    83:b0:c3:5a:5d:f9:66:55:fc:fd:dc:21:23:0a:b0:
                    b2:30:18:c8:2f:16:55:9c:b1:16:53:57:6d:77:8a:
                    8d:69:dc:1b:32:09:15:e6:cb:cf:3a:74:03:40:be:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:5D:77:4F:1A:6D:A4:9A:F8:C7:53:C0:8D:FC:8D:A9:ED:84:D3
            X509v3 Authority Key Identifier:
                keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:90:08:7e:de:ac:89:7c:14:8f:3a:20:20:62:41:13:a2:ad:
         0d:d7:5b:aa:f5:f3:f1:fc:5b:83:7e:60:10:6d:c1:6d:3f:3b:
         65:96:4b:78:1a:50:36:6d:89:fd:57:96:e8:b2:5b:6c:09:36:
         2e:2c:4a:9a:c3:99:ed:f4:6d:68:8e:2c:3c:b4:1d:51:7c:08:
         3d:ec:f3:f5:20:7e:8c:f1:69:19:c0:96:f7:14:be:af:88:3d:
         f2:1a:e8:ac:cc:55:ca:21:10:1e:d6:88:b6:f3:aa:e4:ee:e2:
         69:79:02:f0:e3:b5:09:9c:6e:aa:c4:02:a4:05:99:38:fc:2d:
         20:92:b7:fb:2e:46:f9:80:73:25:fa:20:60:ff:0e:6f:e2:d3:
         6c:e3:d0:7f:c8:63:67:cc:07:35:bc:a9:68:26:10:80:5e:82:
         61:9c:1d:16:d5:69:d2:67:d4:d8:c4:d6:47:8c:de:0c:df:24:
         92:e2:2c:7b:56:80:db:26:17:83:58:c9:04:8c:1a:cd:3b:50:
         2c:a9:2a:f6:27:b6:bf:b2:d8:69:f3:76:23:f5:57:bb:bf:58:
         e9:b0:c1:c7:15:cc:5a:fe:12:92:4b:cf:08:73:cf:cf:33:4c:
         49:0b:c9:97:2d:b0:8a:69:15:54:eb:8d:48:8a:59:19:da:a3:
         63:3a:35:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:16 2026 by rpki-client