Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File:                     v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier:          84/EUlWVPlaSXxhJcH2iu0Cfxqd2DcPJIIK/3IROOOs=
Subject key identifier:   86:DA:2E:82:A9:D4:9C:EE:1D:29:0C:2E:D1:FF:F6:D7:21:13:A1:BF
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer:       /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial:       019FAC76D186A5A8618E5F3E71F884FAE480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number:          19D3
Signing time:             Wed 29 Jul 2026 06:01:35 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:35 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:35 +0000
Files and hashes:         1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
                          2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
                          3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
                          4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
                          5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: AmGULEVx3O9sYFqdZNK5dX6hte+GUTAFUHAucX7NPaQ=)
                          6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:d1:86:a5:a8:61:8e:5f:3e:71:f8:84:fa:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
        Validity
            Not Before: Jul 29 06:01:35 2026 GMT
            Not After : Jul 30 06:01:35 2026 GMT
        Subject: CN=86da2e82a9d49cee1d290c2ed1fff6d72113a1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:b0:d5:2d:2e:a7:ba:ed:67:a7:51:66:16:
                    fb:ba:8b:fa:03:8a:eb:3c:88:a3:60:ae:f6:4f:b2:
                    35:e4:ac:a4:35:93:ae:87:0d:c5:1d:94:fb:e0:4f:
                    75:c3:b4:e5:e8:ef:f0:fe:cf:d8:b9:d0:a7:1b:c3:
                    53:4f:fc:2a:b3:48:df:46:f8:8a:d6:1c:b4:3b:f0:
                    b6:1d:10:b9:b6:70:18:b4:09:ac:eb:5f:a5:68:35:
                    8d:79:68:00:20:37:98:2d:57:d7:26:92:ec:ca:da:
                    a3:75:94:e9:ba:2c:c2:0e:99:a9:67:9e:d0:91:63:
                    b5:9d:c6:cf:6c:77:b4:25:fb:8a:36:04:ca:3d:9f:
                    25:09:34:db:a6:f7:a6:bf:b3:96:14:43:ee:3d:10:
                    71:19:94:85:ca:c6:ac:6e:3a:28:c0:2b:57:68:67:
                    81:87:21:65:d0:b8:a9:a3:00:47:b0:08:aa:80:80:
                    ee:93:7c:6b:e1:f2:aa:48:01:07:0c:42:ca:04:aa:
                    b7:33:50:aa:e6:d2:14:17:aa:96:e3:2d:aa:85:42:
                    f1:91:b0:52:57:51:e1:d7:05:35:3a:de:cf:3c:05:
                    a7:c5:30:4d:7a:ad:39:b6:f7:8e:bf:f2:b8:6b:85:
                    fc:ac:b4:fc:e8:83:c0:8a:d7:f6:aa:95:9d:a8:53:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DA:2E:82:A9:D4:9C:EE:1D:29:0C:2E:D1:FF:F6:D7:21:13:A1:BF
            X509v3 Authority Key Identifier:
                keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1b:94:96:63:92:8b:41:ce:6d:57:f3:bd:06:f0:07:ba:93:
         c6:9a:90:8f:c8:8d:78:03:45:26:9c:5b:a2:7b:30:aa:62:70:
         a8:9a:49:7c:50:20:93:46:5b:53:ff:a3:b6:44:14:7c:70:b3:
         79:24:9d:59:0a:2f:9d:27:23:c4:89:3c:60:6f:d1:78:a7:c5:
         7b:07:e8:3a:88:94:35:75:2e:08:fd:a5:fe:a7:a2:4c:81:68:
         ce:d4:9e:1c:b0:ba:77:56:cc:a0:e8:2a:cb:ca:a4:ec:7d:e5:
         a0:ab:c1:7e:ce:fe:11:83:70:67:4d:f5:99:ef:29:91:fc:b0:
         7e:9a:60:5c:75:67:05:15:6f:05:a2:5e:64:22:78:59:5c:45:
         b9:01:a5:f7:e5:2c:b5:2a:d4:e8:1f:c8:3f:7a:f2:2d:ed:9e:
         48:ae:a9:ff:5e:7c:2c:d5:27:a3:7f:3c:48:63:38:a9:40:92:
         3d:76:a1:65:5f:40:88:5b:d8:e9:11:8d:de:17:fa:96:ca:ea:
         14:09:c0:fb:39:7d:a2:d4:11:5b:fa:78:7f:90:ec:e5:d1:bc:
         88:89:9e:3b:59:01:90:a6:5d:68:14:37:b9:60:fd:20:ca:c7:
         4c:ad:a7:4b:6d:c6:b4:c1:a7:7e:74:57:3b:c1:26:2b:24:ae:
         7b:65:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:21:56 2026 by rpki-client