Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File:                     9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier:          YdJzC5EipXPF2sctMewWrMQ6TaepZkn97TOBYktghaU=
Subject key identifier:   40:A9:CF:8F:25:AD:CE:8A:97:5C:16:C6:4F:57:4A:DA:11:E0:A9:AC
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer:       /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial:       019FAA88B3EA8D4300274F599D3CE506FB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number:          0F06
Signing time:             Tue 28 Jul 2026 21:01:53 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:53 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:53 +0000
Files and hashes:         1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: F9JqE0VRHib3ishpXA9Z++ftImIPcqqA6RMTy53lzs8=)
                          2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:b3:ea:8d:43:00:27:4f:59:9d:3c:e5:06:fb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
        Validity
            Not Before: Jul 28 21:01:53 2026 GMT
            Not After : Jul 29 21:01:53 2026 GMT
        Subject: CN=40a9cf8f25adce8a975c16c64f574ada11e0a9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:9a:ed:52:7b:c3:22:b9:af:22:03:4f:de:
                    d4:51:dc:31:82:05:04:65:22:9c:fb:5a:2f:52:67:
                    77:42:bf:bc:4d:22:9d:df:2a:6c:b8:f5:fe:74:bc:
                    74:bf:67:61:5b:52:9e:a9:c7:89:92:bc:82:c5:99:
                    5f:09:ca:09:36:23:74:78:b2:ae:fb:01:7c:2b:9c:
                    9e:7c:38:31:e0:47:3d:79:48:c3:03:16:63:47:49:
                    b5:18:74:20:f8:de:5f:f9:db:38:60:85:21:57:dd:
                    7f:48:08:f1:40:87:65:e6:9b:71:04:95:76:4e:fc:
                    bb:6d:d8:81:cd:f4:06:c1:47:81:cb:5f:74:f7:99:
                    00:c8:11:8c:af:b5:91:68:69:f7:ab:db:15:e8:6a:
                    37:fb:fc:5e:85:b8:5c:ff:40:a1:e3:24:d8:34:82:
                    88:c5:b8:ce:8e:0a:55:34:cc:b8:62:a4:e6:2f:fb:
                    59:03:78:d3:af:8e:81:2e:b6:46:58:e4:be:40:1d:
                    6f:59:aa:28:2f:d0:76:e4:f6:7e:b4:09:46:51:26:
                    3e:f1:15:55:31:53:fb:73:34:38:b4:e5:74:e9:68:
                    56:0d:d3:3f:95:cb:79:1e:6a:08:06:97:61:8d:8d:
                    68:ca:ec:67:fc:6c:62:a8:3f:36:cc:a3:c0:c7:d4:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A9:CF:8F:25:AD:CE:8A:97:5C:16:C6:4F:57:4A:DA:11:E0:A9:AC
            X509v3 Authority Key Identifier:
                keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:25:71:5d:b6:8d:84:2f:1a:33:fc:d0:37:9f:77:7d:2e:
         1f:d0:43:01:b3:19:21:02:65:e0:ba:88:37:62:c1:c9:9f:69:
         cd:ec:02:19:86:3f:57:23:5e:24:53:7a:aa:0d:1f:9c:e3:e9:
         84:ac:77:89:d0:64:50:66:39:ff:27:83:c4:25:31:5b:e2:55:
         b3:71:f5:93:04:df:e4:ed:5d:67:f6:91:88:d3:15:81:65:ab:
         e4:5d:a6:c4:ae:5a:37:54:73:8a:16:61:8f:6d:68:58:c3:ba:
         44:23:05:09:90:b1:73:35:ce:1b:fe:39:6f:cf:15:7b:e1:95:
         7a:9a:7b:5d:48:88:c8:f7:c0:56:21:60:87:4d:b7:b1:19:82:
         16:00:25:40:fc:4a:db:91:ac:b3:93:07:05:5f:b3:0f:1c:ac:
         77:26:06:74:f9:fa:a2:0d:92:84:62:81:55:6a:0a:28:e9:37:
         29:38:cd:2a:5c:5a:03:12:2a:c3:93:fa:19:46:8f:06:02:01:
         41:d7:e3:9a:3b:e4:0b:d6:f2:bf:16:65:53:3a:0d:57:be:34:
         29:ee:2b:3f:50:b9:cd:60:66:56:3e:f3:0c:53:44:7c:0a:c2:
         98:7a:91:93:ee:ca:af:95:08:de:c5:f0:19:b5:76:3b:6f:e1:
         15:51:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:26 2026 by rpki-client