Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File:                     9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier:          H26kzEE781iRJpCPjLbS40EISlfSha1BcU0zTaQICTc=
Subject key identifier:   C4:11:3C:3A:E9:FB:96:AD:1C:0E:F4:9A:B1:5B:B0:02:0A:53:E4:69
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer:       /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial:       01A000CA7395A8C7C4913A9DDC49C06BF289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number:          17F5
Signing time:             Fri 14 Aug 2026 15:01:02 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:02 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:02 +0000
Files and hashes:         1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: 8xootvCVIJa7zwGfWgPEJ5sZE9n1nZW3krKoV/OvCYI=)
                          2: UEAaPo6VUETHn6B0u4mE40cQPvI.roa (hash: oDl/sgYlJlPoPDa6gI6+975HLzl7ybSw7kcsMPOBkCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:73:95:a8:c7:c4:91:3a:9d:dc:49:c0:6b:f2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
        Validity
            Not Before: Aug 14 15:01:02 2026 GMT
            Not After : Aug 15 15:01:02 2026 GMT
        Subject: CN=c4113c3ae9fb96ad1c0ef49ab15bb0020a53e469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:39:d2:3c:4c:06:94:96:39:81:20:06:5e:
                    c2:0f:24:0a:fc:db:9b:01:78:4d:1c:20:61:4c:36:
                    bd:1e:cf:d5:39:37:f6:e3:4b:b9:f1:9d:c5:1f:65:
                    86:7d:0d:16:c9:cb:25:e8:e2:87:3e:b4:46:8e:ba:
                    75:ef:22:92:2c:64:84:80:97:a8:f8:5c:88:ad:d1:
                    77:da:f1:4e:48:26:c9:f3:9a:50:20:d4:72:96:f0:
                    85:8a:19:24:2d:75:5f:d2:c5:7c:75:82:e9:af:cc:
                    cb:ea:67:f1:5a:fb:a5:2b:85:17:d4:a4:fe:c3:42:
                    e5:78:12:c0:12:e5:07:13:1c:23:45:93:be:6c:91:
                    a3:63:78:45:d4:f4:e9:e9:e5:7c:96:02:13:4e:c3:
                    c0:9a:8f:32:68:f7:d6:60:ba:d8:98:bf:d1:63:d9:
                    a9:ba:c9:95:d5:52:9f:6a:f4:d7:b2:a9:be:43:8e:
                    ce:cb:1b:90:65:3f:47:07:e1:ad:ed:61:db:e4:e6:
                    7b:d2:c3:be:19:c1:b2:77:24:01:40:e7:65:dc:12:
                    e3:7c:9f:77:61:07:54:99:c1:ad:f0:10:3d:cb:8f:
                    a9:f6:2f:44:f1:d0:bc:0a:d3:a2:d1:0e:13:4e:0d:
                    32:d2:9e:63:20:0f:39:a8:e0:5e:50:30:78:8c:fd:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:11:3C:3A:E9:FB:96:AD:1C:0E:F4:9A:B1:5B:B0:02:0A:53:E4:69
            X509v3 Authority Key Identifier:
                keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:14:5a:63:f5:6f:44:de:43:8d:f7:6f:0c:7e:9a:72:94:00:
         5b:8c:d3:91:b3:9e:80:ab:9e:98:8f:47:68:4e:41:72:90:97:
         be:04:20:b4:2b:a9:5d:04:8c:bd:61:63:c1:bc:f4:cf:86:e7:
         fc:fc:43:6b:e2:0a:0d:3c:47:89:c9:db:eb:ab:47:87:61:3f:
         e4:c9:7f:11:ad:9d:7b:53:0e:1c:f1:b7:b7:59:2e:98:f9:6c:
         49:50:9f:b5:c4:1a:88:35:b7:c1:9e:a8:71:5a:2a:bd:3a:a0:
         72:ed:ea:cb:00:e9:07:10:86:4e:98:91:65:6d:6c:e9:9a:df:
         a2:3a:bd:16:83:dd:00:63:5f:a0:91:21:2a:b1:4b:19:93:92:
         26:e6:85:d5:8f:0f:46:e5:f7:10:4b:7f:2d:98:88:cf:f5:fb:
         9a:a2:7c:87:99:8b:59:ff:ea:87:0c:5e:d8:94:70:1a:20:0b:
         86:43:95:44:75:38:18:51:e7:62:d7:5c:dd:28:8c:76:40:e3:
         84:e1:ce:34:a2:c5:1f:43:af:a7:96:de:a2:d3:bc:f2:c5:c0:
         f8:96:8d:23:88:5a:f9:65:f6:8d:9c:6b:28:14:3d:99:63:c9:
         0e:1c:3f:9e:89:8e:bb:8c:05:ce:c0:e6:62:fd:c5:a3:8b:ee:
         d8:03:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:03 2026 by rpki-client