Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File:                     9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier:          J01rQY4yL1mqqqUDy/SBGuLdviD095s+QnCNf8suSGU=
Subject key identifier:   F7:D1:18:12:BB:7E:09:4F:EA:14:2F:94:F5:92:AF:73:CE:78:8A:D8
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer:       /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial:       019FA9078D9CBA83B9907FFB6905A5AC744F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 14:01:12 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:12 +0000
Files and hashes:         1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: 7VY/zOioJ2OxbDDJGFZH8Yf2hzcfwppOeHKO3hzSDZ4=)
                          2: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (hash: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:8d:9c:ba:83:b9:90:7f:fb:69:05:a5:ac:74:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
        Validity
            Not Before: Jul 28 14:01:12 2026 GMT
            Not After : Jul 29 14:01:12 2026 GMT
        Subject: CN=f7d11812bb7e094fea142f94f592af73ce788ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:50:e4:76:ba:15:e9:7a:fd:cc:8e:e7:f0:
                    cf:8c:e4:80:4f:51:e5:a5:9d:2e:3b:ca:5a:84:9a:
                    46:d7:58:d2:a5:fc:59:80:7e:c4:8f:25:aa:7f:2e:
                    25:54:3c:f6:de:fc:dd:da:18:d1:77:e2:01:26:4c:
                    77:b7:a8:17:87:73:9a:6d:5a:c7:01:21:d9:44:25:
                    f8:a3:b8:7a:b0:11:9a:c1:12:f1:28:a3:ff:d1:85:
                    52:af:59:8d:1f:6c:24:d5:09:d5:29:28:96:34:a8:
                    93:2a:02:25:35:a5:91:70:5b:dd:4d:1b:2f:68:2a:
                    73:23:e1:5c:6b:58:c2:6c:08:28:fd:1f:5e:51:9b:
                    33:db:db:36:5f:9e:88:cb:f4:0d:15:0e:48:76:e4:
                    46:5d:f9:2f:15:ec:30:25:5d:52:f6:81:58:14:68:
                    e2:1a:06:59:c9:8f:b5:1e:f3:6f:02:f7:6c:9a:fa:
                    73:e8:02:ce:52:55:6d:dc:83:8f:ae:1b:bb:a4:23:
                    34:ac:46:e0:70:ba:f2:8b:c0:c0:54:d0:48:f8:15:
                    33:d9:02:4e:48:12:19:00:11:04:62:16:01:18:75:
                    e5:79:57:60:59:ee:63:61:1a:e6:f9:47:4e:a9:f0:
                    ae:14:e7:36:57:8d:1a:f5:3c:7e:68:ba:09:7b:f2:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D1:18:12:BB:7E:09:4F:EA:14:2F:94:F5:92:AF:73:CE:78:8A:D8
            X509v3 Authority Key Identifier:
                keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:90:50:29:2e:95:6e:19:78:59:4b:72:11:2b:fe:25:37:44:
         19:8f:10:07:e1:b9:43:b9:7a:3b:b4:82:2b:20:01:0e:aa:a9:
         e2:a1:7c:76:33:f9:e6:ff:16:a3:c3:81:88:69:d7:24:d2:be:
         01:26:50:0e:bf:67:0b:a9:b3:25:ad:4e:79:94:ee:e3:26:66:
         ec:88:0d:32:ec:c7:b6:05:5c:5c:f3:b1:63:ec:13:25:8a:eb:
         5c:08:88:26:35:07:5a:7b:0f:f1:3b:4a:30:ae:ae:98:69:36:
         66:cc:72:19:bb:8a:74:eb:0b:09:d6:b0:5a:1d:55:59:51:e2:
         a4:59:a7:8b:1d:77:58:85:ad:5c:f8:31:dc:2d:60:7c:f7:e8:
         af:fc:87:9d:a6:9f:b3:57:f4:2a:f6:c2:21:b9:4a:73:5f:cc:
         4c:8c:bb:08:6b:bd:5b:48:40:ac:a1:b0:e2:6f:7b:7b:7d:d5:
         fb:c7:79:46:4e:c6:d8:fa:8f:7b:76:db:8f:06:98:d7:ef:37:
         aa:99:72:7d:30:45:a0:a4:4b:93:46:cc:8e:51:29:41:1f:46:
         36:81:3c:3d:68:fa:36:7f:2b:e8:53:a1:8d:be:fd:ed:9f:4d:
         65:71:95:d0:70:3f:a1:3b:8b:e7:8d:60:63:79:40:8c:14:83:
         1a:e2:84:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:45 2026 by rpki-client