Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
File:                     9E3jbOZUNyHyemiTo7Orf_-eEiE.mft (raw, json)
Hash identifier:          pgfJCCtvlEW6qR9bne0WJ2knkb2KJpcdf3dTpNPXy54=
Subject key identifier:   5A:16:20:F8:AD:AC:0A:39:8B:DE:87:AB:96:15:FB:62:6D:38:B4:F0
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Certificate issuer:       /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial:       019FA93DE9E71EF3DBB2BC8B473C1000AEB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 15:00:34 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:34 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:34 +0000
Files and hashes:         1: 1u-gUa9URlrodTmkGb9LRYX3OVU.roa (hash: oC9ByTbYQvO/MlLyyCdsGNzkRESBDij4okyToSMwSRU=)
                          2: 8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa (hash: hIwaksOJP0zxQbZYSD2p0uscCDCl37ZQQd1k8/2OOCo=)
                          3: 9E3jbOZUNyHyemiTo7Orf_-eEiE.crl (hash: d4QO3jfuwlOp42eWTUS6DVJpFUxEtkJaJVXL2pj0zHY=)
                          4: H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa (hash: lLlcVWkBzyqFZaScNM4rXUJUhmBYgLuz/mF4DSCZsow=)
                          5: SF34wbOtYdRuApVr6Gux8pIJkSQ.roa (hash: iRP53qSEiGHrITXx04bly+wQA2RkGJTTrL0VEYAoBNk=)
                          6: bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa (hash: ORVCT7FJ02Pf6zwRRTxkzn72Y3WbAChmuKaE2k5xVLE=)
                          7: bya_A4puBY8ZcMoQu4n_j-KniIA.roa (hash: Qnp+qZ0rKbMVjnECifAEcvAP55imofsc5AlVKksg0kc=)
                          8: efrlaKAi_CsVQe9yQF_dyjmBGT4.roa (hash: Ow8jyy8gW2uZjxaG1qOEM9ZeKzJiMT/L9zqHnHOtO8M=)
                          9: kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa (hash: wZlAb2i6Q85EuSipXQW0wySIWm8YuhMljUtSh1EvtjE=)
                          10: xeKZmPgvPMOy0KwEWStwZbewpmQ.roa (hash: FQj3XVymc2AHbwvXpX69Y9LJlgObeqHhy7xHy0+4/mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:e9:e7:1e:f3:db:b2:bc:8b:47:3c:10:00:ae:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
        Validity
            Not Before: Jul 28 15:00:34 2026 GMT
            Not After : Jul 29 15:00:34 2026 GMT
        Subject: CN=5a1620f8adac0a398bde87ab9615fb626d38b4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:89:d5:60:ef:70:e5:65:5a:d0:3f:0a:af:
                    0e:ad:1d:3d:00:04:16:9d:c1:d8:e7:fd:6f:4b:01:
                    d4:b0:fc:42:04:2a:cc:20:ca:79:12:f3:20:b4:8c:
                    6f:b4:a9:6b:c2:86:02:b6:f4:86:6e:59:22:ac:6e:
                    10:34:1a:b4:6a:d6:4e:3b:6c:30:dc:07:c8:df:61:
                    0b:5f:19:62:c3:eb:08:ef:25:e4:06:5f:2c:ab:9a:
                    45:b0:48:12:df:ef:9f:36:5c:f2:05:8b:20:2e:6c:
                    3c:2c:bb:6b:bf:14:ab:cf:52:78:84:63:60:e0:38:
                    e1:37:e5:23:65:d1:0b:b7:cd:d9:ec:44:0d:13:85:
                    ae:9e:95:72:c0:a1:4f:b0:b9:7d:3f:7d:b1:36:e8:
                    22:c6:c8:b3:7c:c0:3e:d0:26:8b:e5:71:1f:7a:9b:
                    b4:c4:c3:d9:fa:50:18:cc:08:ab:d5:95:52:03:08:
                    72:08:01:30:8c:36:3b:ef:79:dc:1f:18:95:39:25:
                    9e:80:31:82:68:77:e0:e5:29:c2:24:90:92:bb:e9:
                    79:26:76:bf:bd:b1:9e:61:68:c0:4e:20:7f:d6:86:
                    87:7d:44:03:97:00:95:a8:47:7a:54:1a:b5:05:7e:
                    b3:05:4e:dc:98:b8:09:05:6e:7c:37:a1:9b:6f:77:
                    90:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:16:20:F8:AD:AC:0A:39:8B:DE:87:AB:96:15:FB:62:6D:38:B4:F0
            X509v3 Authority Key Identifier:
                keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:64:37:0f:80:85:af:18:b8:e0:42:a9:1e:95:8a:74:b0:7b:
         b3:24:6b:45:0f:d8:82:22:93:f1:21:2e:d9:27:c3:e8:9c:10:
         74:a4:06:89:a8:1d:5f:72:a5:3d:4e:e9:47:cd:bf:5a:1f:2b:
         98:d2:a8:b9:26:8c:13:97:d5:49:c4:a4:e7:80:fa:56:7e:34:
         7b:1e:f2:57:1b:5d:76:86:33:53:fe:6c:ea:19:93:ec:a4:56:
         17:3a:f1:c6:df:53:81:b7:ca:c0:0d:19:88:22:a1:d2:b5:c2:
         3f:2c:7d:f1:98:cc:29:91:52:59:ce:4c:c2:c0:72:1b:e5:01:
         51:68:0a:e7:25:9e:d5:03:04:40:b1:9d:56:79:9c:60:72:f2:
         5d:40:1f:79:2c:86:16:65:c5:e1:f9:9e:6d:ab:9d:0b:38:62:
         79:a9:0c:6e:19:a7:9c:ad:df:eb:e2:6e:bc:52:04:b9:92:0f:
         06:95:9c:e0:33:ed:1d:9d:f2:b7:ca:51:05:67:be:78:0c:5a:
         17:00:1f:bd:4f:df:51:c9:fd:78:bb:26:70:ca:61:e5:ea:9c:
         fd:8a:63:53:45:67:9a:96:3e:7d:17:2d:68:63:71:d8:f7:39:
         9f:24:43:3a:47:a0:96:28:4c:da:89:ce:c0:67:a8:38:0e:ac:
         d1:e3:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:02 2026 by rpki-client