Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File:                     9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier:          ovVcBMCcqZTTausFGJWe7Vi8bQwzksJfGCG0tby/9Y0=
Subject key identifier:   9D:B4:77:3D:D9:B8:9F:EE:E2:88:0A:A5:3F:88:3B:B0:31:E1:DA:DA
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer:       /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial:       01A0017007C16060E65ED0DF1D4936AD9EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number:          1916
Signing time:             Fri 14 Aug 2026 18:01:54 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:54 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:54 +0000
Files and hashes:         1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: iohG2OFpeiphFUFfz0a6Gu3t59WzJfBWOMLA50/R7ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:07:c1:60:60:e6:5e:d0:df:1d:49:36:ad:9e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
        Validity
            Not Before: Aug 14 18:01:54 2026 GMT
            Not After : Aug 15 18:01:54 2026 GMT
        Subject: CN=9db4773dd9b89feee2880aa53f883bb031e1dada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:67:a0:51:97:f1:56:c3:66:29:44:8e:67:
                    32:54:82:0f:c0:7a:63:8d:a1:17:66:88:4a:16:84:
                    68:77:04:fb:1d:39:42:1b:2b:b2:9a:3d:b2:c7:a5:
                    ab:79:38:39:46:3e:8b:f4:de:93:37:e4:0c:82:54:
                    b9:00:6c:06:1e:73:d9:2a:2b:11:a0:b0:fb:c2:12:
                    46:d0:c8:bb:08:a2:96:e3:c0:aa:91:18:d9:60:9c:
                    a4:ed:1e:6a:cf:d1:d2:a7:2a:d4:49:dd:ea:ed:1b:
                    e5:9e:ff:3b:d3:71:ff:f0:13:6d:28:61:95:6b:77:
                    8f:b7:b6:38:f4:81:02:36:f4:ff:a4:16:83:2a:d8:
                    d1:6f:fb:b6:57:23:59:45:fe:41:53:38:90:6a:85:
                    03:1d:b6:b8:af:58:4a:b0:7f:1e:db:3b:fd:cc:ca:
                    bd:2d:7b:ca:a9:c2:fc:b4:e9:b2:4f:48:9d:3c:6b:
                    3a:ea:87:16:13:4b:88:72:71:2e:c5:ba:4b:d3:5f:
                    e1:1b:d6:b7:d6:a4:c6:46:cc:cc:58:d4:27:11:2a:
                    91:04:60:76:ad:cc:3b:32:fd:a5:1b:5f:47:05:67:
                    c5:be:cf:90:22:59:20:5c:6f:17:3e:37:11:4d:20:
                    8d:3e:9b:9b:84:d8:33:25:0a:c4:8c:4e:c8:12:56:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:77:3D:D9:B8:9F:EE:E2:88:0A:A5:3F:88:3B:B0:31:E1:DA:DA
            X509v3 Authority Key Identifier:
                keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:38:19:27:47:3a:7c:05:df:7c:11:7b:47:e4:e1:03:80:
         7c:1d:8d:55:d3:cf:4f:11:b2:d1:9e:e4:ae:03:86:12:90:92:
         db:cb:cc:c2:53:0f:c4:3f:43:c5:98:7a:be:0d:8b:61:f8:18:
         68:c9:98:72:a6:8f:a8:7c:fa:8c:37:98:7e:7c:93:93:bf:cf:
         74:c8:10:33:69:bd:08:36:b9:58:09:cf:99:96:5f:73:2f:6a:
         28:14:82:7f:ea:aa:7b:77:bf:d9:b3:b0:db:af:9b:80:e8:8f:
         3c:b5:af:e7:19:d8:a7:c1:bd:55:dd:c0:a0:3c:7f:2a:c7:bc:
         21:bf:f3:39:8b:32:e1:62:c2:be:eb:fd:cd:14:fc:5f:04:67:
         8e:34:d8:07:da:7e:1f:ba:a7:da:28:48:d3:fd:81:29:7e:72:
         61:ec:3f:2d:c0:15:99:23:ed:d7:56:9e:f0:52:4f:fa:c6:2b:
         99:6f:3e:7f:ae:d9:dd:d4:a2:db:62:bc:9c:a6:35:e8:e1:34:
         40:f7:be:7a:3a:40:14:34:64:67:8e:71:be:07:3e:f2:1f:64:
         c2:3b:1d:e5:f3:6c:86:90:06:00:35:62:29:26:05:e5:a6:c6:
         ff:64:e9:fe:9e:4d:1e:08:f0:a1:1d:d4:3f:12:ce:b9:ba:ca:
         f9:10:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:48 2026 by rpki-client