Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft
File:                     9p-l-dnGtwOCJB6WGgrglnJcD3c.mft (raw, json)
Hash identifier:          QuHGOUVwAN9i/B26/2P63lxEmgvI2jQZx3urFFo6x+Y=
Subject key identifier:   A8:B0:3F:4D:A6:18:C8:52:08:DC:44:6D:7C:DE:B8:DD:12:1F:DA:17
Authority key identifier: F6:9F:A5:F9:D9:C6:B7:03:82:24:1E:96:1A:0A:E0:96:72:5C:0F:77
Certificate issuer:       /CN=f69fa5f9d9c6b70382241e961a0ae096725c0f77
Certificate serial:       019F66F112C8AB3AE666DC4EFF1F6717D43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p-l-dnGtwOCJB6WGgrglnJcD3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft
Manifest number:          DA
Signing time:             Wed 15 Jul 2026 18:01:42 +0000
Manifest this update:     Wed 15 Jul 2026 18:01:42 +0000
Manifest next update:     Thu 16 Jul 2026 18:01:42 +0000
Files and hashes:         1: 9p-l-dnGtwOCJB6WGgrglnJcD3c.crl (hash: ozXdJJgmCpswj3vEc6fzu5L6hRKRvyVU1Qq+zhX4wGg=)
                          2: HmlJTSh98j2b4r1IpFlj1CVeIc0.roa (hash: E16zHYKL/NoTKgyVCojIMSFHddr9iDrUl04ERlr6eDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p-l-dnGtwOCJB6WGgrglnJcD3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:66:f1:12:c8:ab:3a:e6:66:dc:4e:ff:1f:67:17:d4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69fa5f9d9c6b70382241e961a0ae096725c0f77
        Validity
            Not Before: Jul 15 18:01:42 2026 GMT
            Not After : Jul 16 18:01:42 2026 GMT
        Subject: CN=a8b03f4da618c85208dc446d7cdeb8dd121fda17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:be:f3:9e:99:ad:d7:59:0a:02:f4:cb:87:23:
                    d8:38:6a:65:ec:c4:1f:54:20:6d:fd:9a:2a:d7:22:
                    77:d1:34:bc:d8:89:a4:77:9c:5b:ff:92:93:a2:f8:
                    30:f6:fe:bd:33:41:24:c6:dd:d2:bf:a8:06:0a:48:
                    9a:17:df:f1:fd:bd:8d:55:f2:a2:d4:56:87:07:e2:
                    48:6c:11:9d:00:82:7c:a2:c4:3e:a2:db:9e:9d:35:
                    4d:85:4e:93:d9:3a:94:36:48:94:84:cc:8e:8e:ca:
                    5d:e0:c2:6b:ee:72:10:ba:dc:53:b7:32:67:c1:9e:
                    9c:5f:29:ef:05:98:7d:e3:9a:cb:a8:06:3e:12:2d:
                    e2:1c:92:58:d2:8c:c3:17:df:d7:9b:b1:d4:47:c3:
                    6c:a1:89:8c:23:aa:7e:7a:a4:ea:b9:13:70:28:f2:
                    4c:84:e6:b8:d7:5f:b2:0d:2a:a4:83:83:7b:38:c7:
                    9c:05:0e:c5:d5:56:20:76:33:b1:74:99:50:19:a4:
                    28:6e:c8:c5:53:33:68:4a:3f:01:40:ff:d2:3a:97:
                    e3:d4:11:68:44:a5:cb:95:98:8f:9b:6c:50:df:37:
                    f6:ff:cc:4f:63:ed:27:5a:38:76:34:4c:49:41:9f:
                    52:b3:40:0f:a5:2d:57:54:7b:a9:c7:94:cc:a4:1f:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B0:3F:4D:A6:18:C8:52:08:DC:44:6D:7C:DE:B8:DD:12:1F:DA:17
            X509v3 Authority Key Identifier:
                keyid:F6:9F:A5:F9:D9:C6:B7:03:82:24:1E:96:1A:0A:E0:96:72:5C:0F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-l-dnGtwOCJB6WGgrglnJcD3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:02:bb:99:ce:60:4e:23:b3:e1:85:ad:04:fd:e0:c3:a9:8e:
         9b:dc:f3:b7:a2:05:a5:49:34:26:2a:6b:97:23:96:1c:c2:80:
         bd:5b:4b:7c:c8:94:6f:63:ea:f3:69:7a:87:30:fb:50:44:1b:
         3a:f5:0c:a6:77:cf:48:1c:98:57:de:d6:02:e8:29:84:9a:49:
         bf:6e:dc:82:dd:da:24:cb:d2:f8:e2:7d:31:45:cf:62:1e:ae:
         57:ae:06:3c:89:36:4b:e6:ac:0c:7e:29:91:8b:e8:ba:dc:e5:
         03:e9:40:a6:74:e8:e6:ae:a5:26:95:5e:32:7b:1f:d5:35:58:
         32:5e:f4:1c:cc:3a:d0:76:2c:c7:73:2c:b7:2e:54:cb:ba:f0:
         80:50:3a:0b:fb:b6:b9:6e:33:31:66:52:b3:af:4c:bf:9a:45:
         b2:e0:41:dc:33:e2:b9:3a:b9:8a:df:d7:fe:21:e4:aa:f8:65:
         69:d3:1f:6d:05:f0:8a:cc:96:31:0e:8c:8a:dc:af:70:cb:52:
         09:de:52:07:6e:54:7d:25:9f:1d:b3:c2:36:78:6f:4e:0f:85:
         15:90:8a:53:67:81:9e:47:bd:82:2e:19:2c:57:9b:8c:28:2d:
         f7:ca:ac:a7:91:a4:d3:5c:a2:55:6b:3a:58:09:61:7c:02:e3:
         3a:c4:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 19:53:07 2026 by rpki-client