Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          GZfaPnzaWsLAc79GI7YR5NZ6v/Lg0ey7kyXnUrgQAXI=
Subject key identifier:   04:F5:81:21:A3:29:BB:FE:DF:E0:01:9C:B3:83:52:33:B8:FB:95:7A
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       019F42ACBBE740C165C49A6329A6F8966248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          19A2
Signing time:             Wed 08 Jul 2026 17:00:44 +0000
Manifest this update:     Wed 08 Jul 2026 17:00:44 +0000
Manifest next update:     Thu 09 Jul 2026 17:00:44 +0000
Files and hashes:         1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
                          2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
                          3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
                          4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
                          5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: O5lHAnVmV7NDpv7QUibOjilQGXPHnqrDIo76cZ7Wt7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 13:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:42:ac:bb:e7:40:c1:65:c4:9a:63:29:a6:f8:96:62:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Jul  8 17:00:44 2026 GMT
            Not After : Jul  9 17:00:44 2026 GMT
        Subject: CN=04f58121a329bbfedfe0019cb3835233b8fb957a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:88:44:de:b6:b0:a9:45:c3:2e:e5:48:69:
                    fc:09:07:cd:27:1e:7e:ff:d8:4c:82:a7:39:38:a7:
                    e7:b5:38:98:dc:f0:a6:b0:d1:5e:b5:be:20:60:60:
                    2f:9d:ed:7e:f7:68:1a:dc:08:b5:8b:39:11:b1:b3:
                    f3:f8:c9:ac:7a:85:ac:c7:b7:7e:86:1f:9e:64:61:
                    d7:52:a8:74:2c:41:ba:80:a9:20:b2:4c:23:b4:f0:
                    91:2d:e2:a1:bc:40:1a:b5:96:b2:a8:3d:bb:67:1a:
                    9b:d1:45:be:f4:39:2b:dd:e2:d9:ed:d2:1b:c7:7d:
                    f8:8c:e9:69:e2:30:71:d7:b1:c1:30:7f:0d:7a:47:
                    29:37:99:d9:92:de:9d:2a:79:fc:ec:53:09:ca:ab:
                    f1:87:df:c2:fc:69:26:0c:bc:07:eb:7b:bd:5e:64:
                    fd:58:38:c2:86:a9:74:09:b6:90:a8:48:41:a2:fc:
                    f5:3a:bd:de:ef:85:e3:1e:0f:fa:81:57:28:8a:57:
                    b9:22:9a:60:99:2b:4d:85:fa:bc:47:de:b4:51:69:
                    51:1b:a1:73:37:41:5a:fb:d3:46:7b:52:e5:89:6e:
                    80:e1:91:e3:20:c0:49:44:fc:46:cd:c5:70:a8:c7:
                    c2:81:6f:d3:c3:7f:6f:eb:b7:39:95:ca:99:4f:b8:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:81:21:A3:29:BB:FE:DF:E0:01:9C:B3:83:52:33:B8:FB:95:7A
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d6:72:41:1e:81:97:f7:45:b4:6d:8b:d1:b2:c3:20:e8:dc:
         6d:c5:b6:9e:7c:0e:21:1f:a6:de:ae:41:b1:0e:33:bd:1e:07:
         3a:2d:51:57:7d:05:aa:ff:2b:fd:d0:d3:0b:7a:b4:48:19:1e:
         9e:8b:04:56:80:eb:08:e9:5f:cc:13:d4:50:4b:e5:0c:6e:7f:
         8c:db:06:73:5a:d8:2a:76:99:2e:b9:b7:08:a4:35:56:a7:7e:
         46:a8:c7:03:84:47:8c:6d:a3:05:e9:f7:87:0d:8b:51:20:82:
         8f:cb:a0:b3:2d:5e:c9:72:38:c2:8e:4c:b6:6c:0d:73:08:0b:
         4c:06:3c:33:0e:71:40:8c:8b:63:09:43:6f:7c:4f:58:de:41:
         af:c7:4d:2e:9f:26:cd:09:bb:96:3a:ec:d8:3a:b1:a5:12:7d:
         0b:7a:b9:7f:7a:6c:3b:00:33:fd:00:10:58:bc:38:c0:3d:1c:
         74:93:b1:47:36:10:29:c3:97:11:95:0f:67:8c:dc:98:c1:8e:
         73:02:8d:3a:cc:5c:4f:dc:2c:a5:2a:dc:30:67:eb:ca:03:a4:
         67:b2:be:d1:bc:96:15:96:49:25:45:d5:94:56:79:30:74:73:
         c5:b8:7a:71:bf:c4:a9:e2:f6:0a:d8:b5:a0:ef:b6:ab:36:16:
         08:d3:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:35:50 2026 by rpki-client