Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File:                     9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier:          +TbjOo3Oc6CbCGdXhbHlqQjAxjl5sAOgI/32VlJyoAU=
Subject key identifier:   D7:26:E1:47:AE:08:D9:00:CC:FF:AB:4A:13:5D:22:4E:CA:48:04:F3
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer:       /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial:       019FA9E28C9ED9FCFA4C7048887AB9B99610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number:          030E
Signing time:             Tue 28 Jul 2026 18:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:24 +0000
Files and hashes:         1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: v0V0Jq0htpQBb4VYL2CjOiSLm5FeOg3DsTVwuw9TAJ4=)
                          2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:8c:9e:d9:fc:fa:4c:70:48:88:7a:b9:b9:96:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
        Validity
            Not Before: Jul 28 18:00:24 2026 GMT
            Not After : Jul 29 18:00:24 2026 GMT
        Subject: CN=d726e147ae08d900ccffab4a135d224eca4804f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:e6:eb:b1:5d:08:f4:e9:fb:78:d7:a9:07:
                    7e:59:a2:03:45:7a:56:0a:a2:0e:7b:9d:96:67:f8:
                    e1:74:a0:ab:c3:cb:5f:2b:f9:91:70:95:eb:e2:dd:
                    f4:3f:d4:94:94:a4:a2:a1:09:25:11:55:12:d5:e7:
                    c7:78:9d:8d:20:04:ce:86:b2:83:d2:8b:46:fc:1b:
                    30:fe:e4:b6:5a:65:4f:4d:8c:7b:cb:f7:47:6d:a9:
                    cc:5d:5b:c3:aa:8a:67:ef:7b:7b:04:75:93:a7:a2:
                    fe:79:da:9d:10:c4:5c:f7:cd:4e:4e:84:48:7e:5e:
                    71:8d:73:02:eb:0f:fd:4a:c1:5a:61:9c:84:07:34:
                    1b:31:7a:31:ef:a1:64:45:4b:d5:6e:be:81:40:e7:
                    99:f4:f2:5e:b8:0e:b0:c4:fa:53:d9:dd:68:b9:b9:
                    3f:4c:c6:aa:9a:61:7d:5c:44:1a:f4:15:0e:b6:2f:
                    be:46:66:b6:54:a7:2e:2b:26:32:74:11:33:8d:b4:
                    c6:7e:39:8d:7f:5f:f9:78:62:49:4d:b0:c8:f2:fc:
                    0a:5b:78:27:dc:54:69:85:28:5c:93:0e:7b:28:4c:
                    78:b9:0f:a2:26:33:51:d0:79:05:55:bf:54:7c:30:
                    34:ec:2d:4b:3b:02:eb:91:1a:e4:36:c8:e5:87:1b:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:26:E1:47:AE:08:D9:00:CC:FF:AB:4A:13:5D:22:4E:CA:48:04:F3
            X509v3 Authority Key Identifier:
                keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ea:47:55:cb:b7:70:8e:98:3f:f2:24:f0:c2:d5:43:ce:f0:
         b2:d1:e7:09:cc:94:08:b4:9d:eb:f6:3c:d7:a6:5a:d1:ef:f6:
         94:32:89:72:c2:20:4b:06:61:c0:a0:19:a1:01:4a:68:a4:62:
         b0:82:e0:73:4e:ac:de:91:b5:49:3b:1b:d0:4c:b0:af:e8:bf:
         ca:25:2d:6e:22:55:60:a3:b1:d6:97:b3:03:f1:d3:4e:ae:dc:
         b9:42:49:35:b8:25:a6:52:7c:be:68:01:ab:2e:f2:83:79:44:
         59:6c:35:23:35:c1:06:88:5c:6f:34:4c:d8:fd:98:52:52:41:
         81:a3:28:24:25:52:57:b5:3c:2d:ea:4e:4e:6a:b3:8e:1c:56:
         85:7d:9e:a6:84:20:db:d5:19:65:0e:25:d0:ae:13:7e:11:d5:
         5a:9f:f5:8c:ed:f2:e3:4d:b0:23:c8:b2:26:3e:97:80:41:a5:
         8b:8f:ab:41:83:40:a3:02:e2:dc:bb:c4:cf:28:75:87:82:d9:
         79:ff:e6:1d:27:da:7b:0a:a4:c8:a1:b9:e4:be:18:b9:20:e8:
         1d:71:94:80:1a:b4:18:dc:29:6d:28:5b:6e:cf:6d:f2:9f:a4:
         f1:4d:15:42:7a:2f:7d:77:8a:c2:6a:0e:a1:d3:ab:e7:f3:77:
         8b:6e:54:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:03 2026 by rpki-client