Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File:                     d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier:          PiLWUNIXplPLSe7GA9bxVg8Erc0FzTYUtN6wTgmFrRA=
Subject key identifier:   9A:FC:2E:22:7D:2D:09:78:74:8F:26:A4:26:5C:2B:16:79:12:F8:CA
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer:       /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial:       01A00326733175809DD1EFB8C619E39921B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number:          0F7C
Signing time:             Sat 15 Aug 2026 02:00:46 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:46 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:46 +0000
Files and hashes:         1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
                          2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
                          3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
                          4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: GORVH3CwqxBwtuSogwmope8Itcqxz7H25uqGW9ublKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:73:31:75:80:9d:d1:ef:b8:c6:19:e3:99:21:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
        Validity
            Not Before: Aug 15 02:00:46 2026 GMT
            Not After : Aug 16 02:00:46 2026 GMT
        Subject: CN=9afc2e227d2d0978748f26a4265c2b167912f8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:a8:33:68:1b:30:c6:24:37:ff:7e:56:11:
                    48:0c:e1:5d:b8:66:bd:10:ff:21:98:63:7a:a9:3f:
                    f1:a1:e0:97:cc:00:40:4b:e0:91:84:4a:ca:84:a3:
                    da:72:14:1e:1a:f0:7c:6f:17:74:bd:e0:b2:15:8a:
                    e0:7c:da:fd:59:91:a2:99:01:ed:00:e7:0f:51:1b:
                    03:04:aa:e9:91:b3:ee:d6:71:70:f8:e4:c3:30:60:
                    51:74:3e:f1:c6:e3:05:26:0e:71:69:41:ec:c3:c7:
                    ef:51:e4:b0:b0:dd:f9:6d:0c:8b:31:a9:29:2c:3a:
                    57:13:7a:01:ac:54:ad:ee:3b:8f:f3:4a:23:76:79:
                    63:c2:93:47:74:a2:48:56:f9:cf:7d:35:80:43:52:
                    b2:00:2a:18:4e:79:83:09:db:7c:e7:44:1a:13:8e:
                    66:ab:38:e7:d3:3e:d3:d6:26:4c:75:6e:72:d6:1a:
                    0a:1d:17:e7:1b:f7:28:e7:5e:73:ac:d0:e8:13:7f:
                    2a:0e:b9:ba:01:90:55:93:f1:f3:c9:74:ab:74:7a:
                    a6:c7:0e:ca:f6:37:66:af:02:a5:bb:66:eb:ad:c1:
                    3b:37:c3:5a:7a:8f:aa:95:de:9c:25:6f:6e:2c:81:
                    b3:06:21:56:4d:ac:b9:b1:e1:5d:2b:5b:4d:8b:32:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FC:2E:22:7D:2D:09:78:74:8F:26:A4:26:5C:2B:16:79:12:F8:CA
            X509v3 Authority Key Identifier:
                keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:d0:00:8f:bd:47:1a:b5:29:58:54:24:b6:fb:c0:ac:a0:
         2f:2f:38:3f:bf:b4:03:81:fc:91:41:1d:b3:41:1e:38:6b:33:
         fd:3b:8e:eb:5b:21:2c:09:43:c8:ec:ef:08:c3:f1:99:62:c1:
         f7:4e:5a:e0:e1:04:9f:20:b8:7b:85:0b:0c:95:c7:7b:5c:a1:
         62:05:3f:7b:38:aa:34:95:a1:d1:53:b7:81:70:52:3d:19:1b:
         2a:96:ee:59:d6:1e:70:35:30:46:b2:98:94:59:f4:ef:af:91:
         1c:d3:c9:b5:49:73:e1:2a:39:20:9d:17:1c:ef:f7:d8:44:f5:
         95:fb:7b:88:1a:ec:08:b7:d2:14:2f:f1:15:41:4a:81:fe:0a:
         1d:fb:fb:3c:e6:d7:be:57:88:b9:fe:0c:c4:fa:67:8b:77:5d:
         d8:da:4b:ae:12:6a:31:34:16:b7:a0:a0:ca:e5:20:c5:87:84:
         a2:ae:37:54:c6:7f:aa:8e:41:e2:af:cf:a8:80:d7:00:1b:62:
         b6:a2:41:7b:e9:80:6f:3d:95:af:1f:c6:b4:3b:66:7e:56:2a:
         b7:c4:e3:95:29:22:18:95:d6:f4:bb:db:d2:e4:00:3a:82:50:
         c7:69:5b:50:73:32:9c:6e:db:7b:e3:25:99:5e:77:7b:57:75:
         6f:23:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:39 2026 by rpki-client