Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
File:                     9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft (raw, json)
Hash identifier:          Ce3TbLqXSmdjaMy3wky20B1ZT+GvkMiaaCMxum+RG60=
Subject key identifier:   99:DF:A5:53:57:20:26:E6:A9:28:7B:EC:D5:83:F3:F7:3C:BE:7F:4B
Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
Certificate issuer:       /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Certificate serial:       019FA8998D01BE6DD4295E9AF59EA661AE27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
Manifest number:          1599
Signing time:             Tue 28 Jul 2026 12:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:03 +0000
Files and hashes:         1: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl (hash: PYRuJrNAaiDOBWwdvGX3oqJs+Nqbo9hbj6IasWznzJ4=)
                          2: hFSKk4IzyF4-Efez0nBa5DaBlCw.roa (hash: /+dt5HzgoetNaRHNPjUjcWY8nK9kYFZMD5NG+vs6XGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:8d:01:be:6d:d4:29:5e:9a:f5:9e:a6:61:ae:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
        Validity
            Not Before: Jul 28 12:01:03 2026 GMT
            Not After : Jul 29 12:01:03 2026 GMT
        Subject: CN=99dfa553572026e6a9287becd583f3f73cbe7f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:02:1a:3a:aa:75:bc:16:f6:a2:bd:b1:2c:
                    53:09:fb:33:c0:68:cc:40:da:6a:f8:bf:82:af:7c:
                    7e:d5:ca:78:0e:f3:1a:aa:34:bd:86:a5:55:6f:e4:
                    0f:8b:42:9e:12:40:72:11:e0:8e:ac:99:99:0d:b9:
                    52:d0:82:61:67:e9:39:09:6d:08:61:84:96:b6:43:
                    a5:d4:1b:8d:31:fd:ec:03:09:35:71:6a:69:8f:7c:
                    24:91:3b:59:03:e9:7e:8b:32:a7:f1:92:23:1c:aa:
                    46:0e:b9:bb:59:6d:2d:c9:fc:09:02:d3:f8:51:53:
                    9b:48:8b:72:5f:09:ad:ce:0f:12:2f:2b:ac:1c:a9:
                    67:03:31:27:db:f8:e1:90:7d:aa:ae:2a:18:14:02:
                    27:60:f7:14:3d:d8:0e:39:29:a2:34:c0:61:07:71:
                    b5:4e:94:6b:9f:0d:23:49:d9:28:3b:9d:60:63:4e:
                    43:d7:59:47:0b:ad:e2:7d:66:99:8c:2f:5a:3a:77:
                    ac:b7:9b:72:3e:f4:b9:b7:b8:a7:eb:06:e5:fd:23:
                    57:fc:40:6a:88:d0:1f:a5:e5:a1:63:2b:f4:4b:ce:
                    2b:e2:81:90:b0:d0:d4:2e:75:98:18:da:a4:14:4f:
                    b7:6f:29:d7:22:a7:89:26:7f:a1:86:fe:25:d2:0d:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DF:A5:53:57:20:26:E6:A9:28:7B:EC:D5:83:F3:F7:3C:BE:7F:4B
            X509v3 Authority Key Identifier:
                keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:59:3f:8d:9d:82:b0:93:59:51:9c:1e:4b:81:f7:65:f2:3d:
         a7:95:d0:24:be:0b:25:a6:e9:09:c6:1b:df:35:62:56:5c:07:
         f0:bf:af:77:65:b8:3d:80:89:36:ba:dd:99:80:68:1d:37:85:
         ce:4f:fa:37:21:34:b6:f0:1f:f8:5f:74:05:b0:f6:7c:2b:5e:
         25:1d:55:20:b5:20:7d:d0:69:ac:e2:3d:67:c9:dd:62:26:6c:
         b7:7c:cd:64:e5:01:3b:ce:22:14:8f:db:43:61:a3:76:95:95:
         95:ac:96:ae:84:06:35:f1:02:df:f5:81:b1:02:ae:88:e7:64:
         01:37:33:dd:63:53:4f:90:24:79:fb:79:3c:13:0b:99:c9:ee:
         52:4a:02:03:5c:39:9a:f1:1c:cf:6b:b8:af:fb:d9:90:0b:49:
         f8:5a:98:21:05:11:8e:a8:2f:4e:ba:32:dc:a5:b2:8a:50:79:
         60:12:81:15:68:2d:3f:a8:d6:3d:bf:80:b5:2b:db:c9:47:80:
         16:e9:97:cb:ab:ba:b9:00:87:ae:32:a7:50:0f:91:01:69:7c:
         29:3d:bd:80:17:57:d6:31:1a:45:ef:5b:e4:89:c5:35:f7:60:
         55:b5:3e:29:ac:f9:3d:c9:3c:df:1c:fd:5a:6d:14:2e:da:c5:
         ab:fb:52:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omY0Bvm3UKV6a9Z6mYa4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWY4YmNmMmEyZWMxMGY5ZTRiNjMwMmUxYjM1MDlmM2Qw
MzM2ZWUwHhcNMjYwNzI4MTIwMTAzWhcNMjYwNzI5MTIwMTAzWjAzMTEwLwYDVQQD
Eyg5OWRmYTU1MzU3MjAyNmU2YTkyODdiZWNkNTgzZjNmNzNjYmU3ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvswCGjqqdbwW9qK9sSxTCfszwGjM
QNpq+L+Cr3x+1cp4DvMaqjS9hqVVb+QPi0KeEkByEeCOrJmZDblS0IJhZ+k5CW0I
YYSWtkOl1BuNMf3sAwk1cWppj3wkkTtZA+l+izKn8ZIjHKpGDrm7WW0tyfwJAtP4
UVObSItyXwmtzg8SLyusHKlnAzEn2/jhkH2qrioYFAInYPcUPdgOOSmiNMBhB3G1
TpRrnw0jSdkoO51gY05D11lHC63ifWaZjC9aOnest5tyPvS5t7in6wbl/SNX/EBq
iNAfpeWhYyv0S84r4oGQsNDULnWYGNqkFE+3bynXIqeJJn+hhv4l0g0stwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnfpVNXICbmqSh77NWD8/c8vn9LMB8GA1UdIwQY
MBaAFPafi88qLsEPnktjAuGzUJ89AzbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEt
MDBhNzcwNDc3NGUxLzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEtMDBhNzcwNDc3NGUx
LzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFk/jZ2C
sJNZUZweS4H3ZfI9p5XQJL4LJabpCcYb3zViVlwH8L+vd2W4PYCJNrrdmYBoHTeF
zk/6NyE0tvAf+F90BbD2fCteJR1VILUgfdBprOI9Z8ndYiZst3zNZOUBO84iFI/b
Q2GjdpWVlayWroQGNfEC3/WBsQKuiOdkATcz3WNTT5Akeft5PBMLmcnuUkoCA1w5
mvEcz2u4r/vZkAtJ+FqYIQURjqgvTroy3KWyilB5YBKBFWgtP6jWPb+AtSvbyUeA
FumXy6u6uQCHrjKnUA+RAWl8KT29gBdX1jEaRe9b5InFNfdgVbU+Kaz5Pck83xz9
Wm0ULtrFq/tSsw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:52 2026 by rpki-client