Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File:                     9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier:          RRJFg49hNrg3KiJVXSWfY9gPgrBJNd/a/p2i+XMzZ4s=
Subject key identifier:   7C:97:62:A6:CE:B9:9C:0E:63:27:60:A3:83:81:D2:F9:C3:42:8D:50
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer:       /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial:       01A0017026DE8DEBEC23C489A1A13EBAD24F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number:          039F
Signing time:             Fri 14 Aug 2026 18:02:02 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:02 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:02 +0000
Files and hashes:         1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: KmcFipMDvUoGNbppDjkNpoJOpCb7j0IZte+yrGHVAA8=)
                          2: W3uokoIan0bL_6hGsLT2Lc4cFQY.roa (hash: lnmDhnBJ1en6JgsP5wQ9r3eh318nNpbuOqRdtOpx05A=)
                          3: c7-vm7ayWM43onBxMirp6xh4ses.asa (hash: Yn9xC9hv7PLljqa8pOnthNeGkVr/8TT8ccV2WmSMABI=)
                          4: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:26:de:8d:eb:ec:23:c4:89:a1:a1:3e:ba:d2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
        Validity
            Not Before: Aug 14 18:02:02 2026 GMT
            Not After : Aug 15 18:02:02 2026 GMT
        Subject: CN=7c9762a6ceb99c0e632760a38381d2f9c3428d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:05:14:bc:70:ae:48:22:25:b5:cc:4b:ba:
                    5b:97:7b:b6:b6:49:09:d7:9b:02:bc:d0:75:04:9b:
                    12:3f:d7:dd:53:46:2c:20:15:62:5f:f8:ec:81:37:
                    f4:8a:1a:db:88:b2:03:ed:43:1c:02:03:6f:db:04:
                    17:cd:bb:31:15:ea:9b:8c:fa:07:22:c5:c4:e3:02:
                    55:5c:90:ec:5c:36:76:24:93:7b:34:fb:0c:f7:b7:
                    f3:10:ba:8c:45:2c:fe:66:d5:b2:4f:a6:9c:8f:2b:
                    35:3d:63:bb:c5:0b:53:ff:28:2a:c7:ac:e0:1d:87:
                    c2:d8:0e:a5:6f:a2:a2:ca:8a:df:c4:67:62:37:57:
                    9a:41:c9:fe:75:4a:48:7b:ff:e2:40:a8:4d:a1:7b:
                    dc:a7:3e:d0:f9:74:3a:74:30:f5:c1:f6:1e:e9:47:
                    cf:46:3a:19:f7:41:fb:1e:d3:2b:7b:d2:11:40:c5:
                    03:61:d4:63:5c:21:72:52:27:b1:b6:aa:3c:73:65:
                    7f:d1:fd:25:e8:c2:cb:1a:56:0e:85:a0:4d:c3:d6:
                    6b:24:fd:55:29:56:c4:be:63:1f:5c:70:ca:f9:8c:
                    4c:d7:df:92:67:7e:a8:ad:36:2f:63:ca:db:6c:ae:
                    9c:15:db:f0:51:41:48:e2:e3:2e:20:12:0d:5e:25:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:97:62:A6:CE:B9:9C:0E:63:27:60:A3:83:81:D2:F9:C3:42:8D:50
            X509v3 Authority Key Identifier:
                keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e1:e2:5c:5a:bd:70:46:d8:c2:96:9f:ea:95:02:6b:09:28:
         1b:fd:9f:3b:53:67:d3:39:07:72:de:2c:eb:47:41:51:14:87:
         92:e6:26:02:c3:ea:6b:e0:d4:43:01:5a:76:29:7c:ab:5b:4b:
         a7:b9:c2:0b:8e:c6:5a:6a:ab:26:74:82:4a:a3:36:06:f4:3d:
         b9:61:7b:e8:65:1d:fe:48:c9:f6:52:bd:2f:4e:c4:ec:a2:6c:
         ae:93:f6:d5:19:29:de:c7:57:77:20:39:24:78:4e:fc:04:b1:
         9b:23:c0:1f:00:55:63:0e:0b:7c:a9:99:e6:8e:16:aa:44:b2:
         47:b9:d3:e7:11:18:b5:f5:c2:19:36:9b:40:09:ac:52:87:a4:
         39:32:2e:1d:de:39:61:5e:00:23:23:5c:3c:46:ef:e6:53:c1:
         7e:ef:ba:82:e4:dc:e7:af:ed:11:cc:27:a5:c8:b7:9a:16:82:
         9c:3b:ae:56:3a:96:8c:36:12:ea:3b:14:5d:fd:d8:71:7c:e7:
         3a:c5:3f:03:b8:23:85:e0:5b:2b:04:0f:bf:0a:68:57:d2:49:
         52:c0:c9:cf:22:80:dd:8c:52:05:11:a7:a3:ef:25:3e:c5:96:
         34:20:d0:61:8a:af:17:03:15:00:07:79:d9:54:ee:41:8c:0e:
         a7:77:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:28:23 2026 by rpki-client