Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File:                     9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier:          u4pW4puHoW125HimropWCLzNgkeA1ntUQOZSTYtfE+Y=
Subject key identifier:   D7:B8:7D:0F:10:97:D8:81:33:31:A7:02:23:D7:10:D7:B6:2D:62:09
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer:       /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial:       019FA8D0341C3D07436900378C4AF2174C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number:          062D
Signing time:             Tue 28 Jul 2026 13:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:44 +0000
Files and hashes:         1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: eLM0Nm4Ke3MJ399Z6V06M6bAh5JoJ5adWhEJZ0HkBNM=)
                          2: X6eUtYG6Iu_KBouxuW8oA117wgI.roa (hash: PKWNZ6kf/JMcC2o+SX3jrDdlq7cx8CizTYBt74X74JE=)
                          3: YOoAFvb-hpFF9iLyWp19Bt8q4hI.asa (hash: UisOBblx7P2PqVDUk/EETXB1Szxocz0uaBU0SXtiiuA=)
                          4: Zi-ZCMc7U8Y-da92tU5kvn9Xd-8.asa (hash: nXYqjC+Hi2nKeloly1ptUDmdW625318NTGYnF0/9v94=)
                          5: eN33JrW4uE9WYv1qiKiEHTbpfbQ.roa (hash: jV/nUDEGGfrnT9JmJTuWFyFTtbm4P5emFu/rnjcrOOg=)
                          6: xJZbzQfr9Oxhm2_FMaPpOD_JF6o.roa (hash: ipqQ2yYK11hQH4GRmmAyAseGYznlNeYFRLVlXv3h3aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:34:1c:3d:07:43:69:00:37:8c:4a:f2:17:4c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
        Validity
            Not Before: Jul 28 13:00:44 2026 GMT
            Not After : Jul 29 13:00:44 2026 GMT
        Subject: CN=d7b87d0f1097d8813331a70223d710d7b62d6209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e0:7e:93:33:d4:1c:21:38:c6:bf:e2:d4:77:
                    11:76:ef:11:e8:4d:02:8d:72:78:8a:0c:02:04:5f:
                    df:ed:2c:c6:0a:69:04:2b:f0:28:cf:5d:bf:c2:23:
                    c5:0e:3c:54:4c:71:13:7e:1c:d7:f4:8d:b3:7e:96:
                    96:c5:5c:8d:e0:6e:c1:9b:b6:a3:fb:df:80:e3:c8:
                    f7:db:1b:da:47:a3:3a:37:8d:ef:5f:dd:04:62:6d:
                    98:f4:bd:54:ec:03:9c:0c:a3:4a:f8:5c:9e:46:9f:
                    73:1c:6a:c1:b3:7d:ee:32:44:b1:6e:e4:99:97:65:
                    52:ee:28:4c:0c:3e:dd:ef:42:d1:29:dc:4e:8f:57:
                    f0:7b:6a:f2:9b:ed:db:62:2f:43:d7:41:08:d1:1b:
                    e4:b7:03:a2:99:af:05:d5:44:70:bc:05:ff:eb:f1:
                    a7:6a:c7:e3:be:92:75:59:6e:77:55:53:fd:06:b2:
                    5d:04:d0:18:b8:85:64:bf:b3:67:f6:67:91:3f:27:
                    91:94:d1:c2:03:f3:ac:ee:18:0d:36:f0:b0:f6:9b:
                    9d:ec:48:8a:ae:3c:1b:27:f8:1f:01:4a:81:35:92:
                    5b:aa:49:7b:b9:62:02:ff:f4:75:f9:76:da:12:d3:
                    b5:23:8a:81:e6:14:3f:a1:fc:7d:cf:66:70:63:88:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B8:7D:0F:10:97:D8:81:33:31:A7:02:23:D7:10:D7:B6:2D:62:09
            X509v3 Authority Key Identifier:
                keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:17:18:f5:b0:32:ed:e4:ea:8c:4e:83:65:16:5b:54:b6:
         04:30:d8:31:40:27:06:c4:8f:a2:64:e0:9c:d6:44:ef:61:f1:
         ae:e2:01:83:e4:c5:91:27:88:4c:01:fd:a9:5e:74:03:9f:bf:
         83:e5:1b:85:79:cf:31:98:72:66:01:f0:ba:70:33:94:50:36:
         60:40:16:4c:88:81:8a:88:09:94:c7:15:5f:55:5a:78:34:78:
         39:86:bf:2e:11:69:81:0e:e1:12:12:90:2b:18:eb:05:42:66:
         21:88:4f:71:ff:2a:c4:92:b0:48:f1:b6:4d:8f:4b:9c:8a:f2:
         e3:c4:58:ba:c4:31:e5:96:91:a7:dd:1a:dd:a6:27:6b:65:79:
         a8:02:28:ca:a7:76:00:fe:c3:f9:73:85:40:35:91:74:d5:b6:
         77:cd:0e:f7:19:40:ce:3c:26:05:ac:0a:d9:b1:09:9d:12:8a:
         99:22:35:a3:39:f8:13:ee:9e:ee:1b:14:be:44:88:f2:3d:db:
         c0:e6:d8:41:1a:34:b6:ed:12:ac:3e:33:f5:c5:77:ac:1d:6a:
         18:46:ed:65:f4:6e:c3:0c:a4:c0:a6:d5:0d:07:56:31:fc:24:
         0a:ef:46:5e:39:49:98:02:89:bb:d6:66:34:95:07:d0:a9:d8:
         5f:6e:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:35 2026 by rpki-client