Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File:                     9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier:          Og6vkuEo++8/fp6yTfkxc7Og5bnuRuZUwWO+G8vM8Xk=
Subject key identifier:   E1:88:E9:D6:A3:02:BE:93:5E:18:DD:02:13:B0:E5:E0:77:E2:07:B4
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer:       /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial:       019F9EF16E41842099029C6465CEA163CAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number:          122C
Signing time:             Sun 26 Jul 2026 15:00:50 +0000
Manifest this update:     Sun 26 Jul 2026 15:00:50 +0000
Manifest next update:     Mon 27 Jul 2026 15:00:50 +0000
Files and hashes:         1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: DctcOZQ23llDv033A/U91h+J83eUETfre0EKr9LHSnk=)
                          2: Ue9DIINKYrGn1tdejFEb6gztPV4.roa (hash: c1z5wiNQ531GjFPY2V7nJM/EQVknOfa3Q0UMyTLhXdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:6e:41:84:20:99:02:9c:64:65:ce:a1:63:ca:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
        Validity
            Not Before: Jul 26 15:00:50 2026 GMT
            Not After : Jul 27 15:00:50 2026 GMT
        Subject: CN=e188e9d6a302be935e18dd0213b0e5e077e207b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:20:d9:c8:e2:33:78:73:ca:9b:a0:55:a3:
                    29:43:87:84:13:68:f1:2f:bb:3f:78:8c:1b:9a:a2:
                    04:77:f9:ec:21:e7:e8:79:8c:b3:28:ef:57:f2:ce:
                    fc:6d:b8:b4:89:27:de:28:03:0b:c2:a1:17:78:bf:
                    80:c5:ed:f6:a9:be:8e:4b:f6:2a:9f:a4:5b:ef:36:
                    93:f0:62:8f:fe:a4:10:09:1d:a4:9a:a6:71:81:fb:
                    a9:c7:57:2b:80:33:8c:4f:95:3c:58:8c:14:28:67:
                    61:51:f4:17:2a:fc:c4:4c:16:2f:4e:5d:ea:9c:d3:
                    37:35:da:fc:b4:ef:cb:cb:a2:2e:dc:48:bb:b1:c6:
                    ab:9a:e7:6e:3a:72:fe:3a:a2:98:7a:7b:eb:ba:65:
                    97:39:9a:35:b8:c1:6c:c6:7c:eb:b8:83:e8:f5:4d:
                    3b:91:c2:56:26:7b:06:85:84:53:f8:d4:a7:4b:e1:
                    ca:4e:11:bd:9f:9c:80:62:83:71:21:2b:3a:48:43:
                    64:66:e9:9a:46:03:55:37:c7:6c:1c:3f:a1:bc:da:
                    f6:f4:85:4c:1e:ae:15:f0:48:12:45:61:f0:82:d2:
                    b0:a1:dd:ba:29:d6:d5:ad:6c:f1:9e:4c:71:3a:8d:
                    b9:37:bc:67:fb:27:02:8c:a2:1b:fd:38:39:2e:b9:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:88:E9:D6:A3:02:BE:93:5E:18:DD:02:13:B0:E5:E0:77:E2:07:B4
            X509v3 Authority Key Identifier:
                keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:06:6a:53:05:80:d0:87:84:de:c3:d9:3e:e0:35:27:05:90:
         3a:b8:69:b3:4d:ee:37:5e:a8:75:fd:9b:ad:82:47:a0:68:fb:
         82:ce:a1:03:7e:9c:42:e4:0b:c6:2a:a5:1e:2d:41:7a:4b:dc:
         f2:14:a3:88:5d:e9:0b:a0:6f:99:b0:ee:2c:32:73:c1:59:84:
         89:62:41:9f:ec:55:ad:c2:c4:52:4c:69:47:b2:54:73:5b:53:
         57:13:1e:ac:76:b6:96:05:fa:56:22:1e:93:72:78:f0:fc:06:
         fd:df:26:41:ec:88:74:b1:cc:3a:26:bf:cf:b0:61:62:f1:3a:
         9a:d0:28:de:cb:e0:ef:9a:d0:e5:71:29:ea:9e:e0:9c:9e:6b:
         5f:40:aa:16:6c:35:f5:18:5a:3f:33:ae:ee:48:31:1f:72:58:
         06:e7:34:ea:45:ff:98:8c:9d:e2:46:8e:19:c1:dc:7a:45:55:
         9a:e0:a9:b8:07:0e:ca:b5:45:02:57:7b:9d:28:13:7d:db:50:
         62:3c:b1:15:88:58:f8:ec:f8:51:37:41:7b:09:eb:06:13:b0:
         16:19:ce:a7:48:a6:c2:09:e0:51:b4:fc:1b:0f:f1:07:f7:4d:
         9c:dc:ed:4e:fb:bd:be:b9:9a:6d:5b:99:41:70:a2:50:aa:5c:
         2d:61:b0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:13 2026 by rpki-client