Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File:                     9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier:          O9Ay44e/4djs19cjtY9ioEaCmV/MyUpSyNFtNGqhG0s=
Subject key identifier:   9C:F8:7B:DC:DF:7E:54:00:83:81:BB:2C:74:37:62:D6:C8:75:D0:C0
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer:       /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial:       019F1943518BE1E7E3E4007F13F71D627A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number:          0543
Signing time:             Tue 30 Jun 2026 16:01:09 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:09 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:09 +0000
Files and hashes:         1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: i+7vFd+OAZOaXhpbcAclWk19MwqUgs7GCwgEkBpKVHU=)
                          2: cfgUMJjPHo2HMTWogKTOZFoNb44.roa (hash: 6T+E0hhZ0PL+MJOi66ClH6FGS34xdrKxtztKFTXuFcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:51:8b:e1:e7:e3:e4:00:7f:13:f7:1d:62:7a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
        Validity
            Not Before: Jun 30 16:01:09 2026 GMT
            Not After : Jul  1 16:01:09 2026 GMT
        Subject: CN=9cf87bdcdf7e54008381bb2c743762d6c875d0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:fa:90:a7:5f:0e:05:d4:f1:40:c3:96:f5:
                    5e:e5:24:1c:20:d0:20:65:7b:eb:93:3c:86:29:95:
                    a2:92:b4:be:c0:cd:f9:d5:98:23:98:5b:97:ad:ac:
                    f6:3d:53:89:8c:e0:94:aa:e0:a3:0a:f3:36:10:6a:
                    06:2c:4c:a2:e8:2b:f8:bf:8f:62:be:73:46:7b:47:
                    79:45:d5:dd:be:ed:8a:ff:4e:64:82:8d:71:85:e7:
                    2b:00:62:d0:34:45:e4:6b:ed:ad:8a:5e:8d:3a:92:
                    13:8d:8b:59:b7:16:30:6b:6b:a1:91:75:da:81:69:
                    92:42:27:bf:ec:ef:26:66:fc:f6:8e:f1:c7:35:9b:
                    8f:42:76:d5:fe:5c:9e:bf:b2:da:ee:d4:65:98:75:
                    5f:42:ff:ed:b7:02:c0:ef:dd:fd:b0:2d:17:90:1e:
                    76:29:26:a0:e9:e2:fd:76:38:c6:7e:61:13:68:ae:
                    38:41:bb:3c:4f:96:9c:fa:b0:4f:fe:fe:f3:d4:3c:
                    8a:fb:61:2d:1c:08:9c:95:ae:7f:13:67:6b:4f:70:
                    da:d6:1f:59:d5:4f:a4:25:ef:1c:3c:b4:1a:d5:b7:
                    bd:ed:be:25:8f:1d:ba:fd:de:6a:b0:36:77:b6:51:
                    41:11:2e:0f:74:4d:84:4d:ad:0a:f5:17:90:8f:bb:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F8:7B:DC:DF:7E:54:00:83:81:BB:2C:74:37:62:D6:C8:75:D0:C0
            X509v3 Authority Key Identifier:
                keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:eb:3e:84:f9:68:18:dd:f6:cc:18:48:35:04:86:c5:23:6b:
         f8:0a:d1:cc:c8:90:21:73:76:08:6a:57:92:19:b7:5a:52:53:
         f9:ca:fa:fc:58:f6:06:15:e9:79:16:64:38:92:96:5e:7d:a2:
         fd:0e:fa:1c:a4:0c:3c:a9:60:8a:74:b5:c2:8a:4d:03:e8:fb:
         b7:5d:76:00:86:03:c8:76:e6:2d:55:ac:98:93:0e:d4:86:17:
         ff:df:0e:92:b5:3e:c7:dd:1a:77:29:3a:e2:04:ed:0c:68:a6:
         82:74:3c:5b:0d:32:32:1c:25:70:47:e9:de:4a:ef:5c:c1:3f:
         85:20:5e:16:82:1b:28:51:44:83:9c:aa:a2:80:dd:4e:bb:6a:
         61:a0:c7:d6:fa:5b:39:7d:06:bf:d4:94:1c:07:f9:0e:ea:98:
         c2:e4:8d:16:27:8a:d8:b2:fb:8a:3c:ac:4f:fb:7f:eb:ca:79:
         a8:63:fd:aa:8a:10:68:dc:be:18:73:df:cc:81:20:8b:9b:18:
         a4:c0:9d:df:02:6c:f5:2e:86:c0:02:f8:a6:da:f5:49:25:4f:
         f0:bc:cc:73:dc:07:64:e4:9f:27:8f:e1:28:f7:c8:29:35:7b:
         5e:0e:f1:d2:15:b1:19:7d:9a:92:5e:4a:88:eb:d2:36:c9:a0:
         5f:5c:6a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:25 2026 by rpki-client