Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
File:                     1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json)
Hash identifier:          lzyo2F8fbxjRncJAck8NiILXQl6SDfdlf4rYQX2O7ac=
Subject key identifier:   0A:C9:EB:0A:B2:22:92:74:05:E8:2B:E5:DC:FE:00:ED:73:6A:A5:9C
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Certificate issuer:       /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial:       019FA0A8A6863F7509607C46C6DBFB908F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
Manifest number:          08D6
Signing time:             Sun 26 Jul 2026 23:00:34 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:34 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:34 +0000
Files and hashes:         1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: deQal2F+1cWdWedp/pgEvax4BgVPUEmGpx5ToU2ymp0=)
                          2: LHIeUVA9wsCM7bmZaVgrPaNNziw.roa (hash: NBcTepDFdXpBgX4qPundU4bCWFb04yiAHriwN4bBQ7M=)
                          3: LvfTa413By2E_F6yYl2dyQqtQ6g.roa (hash: r8Aaf6zbkZr6mR+oKR2km59CiVJuLPU3L/XJZeMBCjE=)
                          4: ZdKh3a8XEvF05LVjsi9wkRymFVg.roa (hash: NE20D4V8pCaAFdHiKB+G1Vp2zobKDlYDSABykJAJbXM=)
                          5: _vmewA9W8DyxXaiP_EZ3cz5dROk.roa (hash: SjnU2OshL4XrUnyu6qZvohhXfN1UkCVyA6v9bEVIxns=)
                          6: fyIb0V5JX6E2tpy_vgKc70A0lK8.roa (hash: wDxZOpTMpfURcZbXhtIPr6kc1LLTPvdz01nZUdR/Qy4=)
                          7: wmVWvi9LFM_1oIUpxrvxMv6hAgI.roa (hash: hSBrwEq4pKXZOmKjFY4p3+D6mzIcmXDbJLyGmD3u4sQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:a6:86:3f:75:09:60:7c:46:c6:db:fb:90:8f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
        Validity
            Not Before: Jul 26 23:00:34 2026 GMT
            Not After : Jul 27 23:00:34 2026 GMT
        Subject: CN=0ac9eb0ab222927405e82be5dcfe00ed736aa59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:34:53:02:b2:ff:8c:6d:89:d4:4d:70:61:06:
                    79:54:e1:61:17:fd:4c:f2:1a:70:3b:2a:af:ce:72:
                    8f:e2:c9:61:b7:39:0e:aa:f5:0d:2a:58:28:b4:0a:
                    14:92:1b:ec:f1:71:2c:dd:48:a4:a5:c7:ea:36:4f:
                    32:50:5c:b2:18:b4:f3:7e:48:3e:b6:ce:5c:e1:d2:
                    9e:b1:1c:01:c4:49:64:e9:0e:3b:86:02:69:3d:b3:
                    a6:73:80:f3:03:9b:39:b3:4f:47:a0:59:5b:62:ea:
                    85:17:fc:d7:e0:70:cc:f0:d5:5d:d8:31:56:8c:a9:
                    9c:1a:69:f2:42:13:24:31:ef:57:23:11:7a:66:18:
                    29:40:cc:84:a2:d0:71:25:4d:a5:70:ca:fc:58:39:
                    83:99:66:81:34:05:06:93:fa:75:a4:04:ac:96:7c:
                    44:fd:ac:ad:68:55:50:b7:03:a7:0c:da:12:00:ff:
                    10:9d:3d:3a:54:f8:01:15:20:e6:7e:a5:db:58:76:
                    ff:a6:84:8b:90:8b:35:bc:ca:6d:9b:58:b1:68:79:
                    21:cb:3b:33:ee:00:18:bb:a7:fb:60:57:08:29:b9:
                    f3:ae:99:15:15:78:01:01:a4:bc:ee:04:63:ab:90:
                    18:b9:2a:07:58:74:07:d3:23:ca:5b:b7:f2:56:1f:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C9:EB:0A:B2:22:92:74:05:E8:2B:E5:DC:FE:00:ED:73:6A:A5:9C
            X509v3 Authority Key Identifier:
                keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:22:2f:21:20:7d:38:7e:97:e3:f6:49:af:a1:09:34:f4:72:
         f3:25:13:98:e6:b2:21:9d:46:2a:fc:87:4d:7d:4c:06:c0:ac:
         6e:0a:2e:cf:7f:24:a6:16:18:03:0a:e1:c2:d3:97:12:5a:29:
         8b:cf:c6:01:09:73:e4:e6:62:8c:1f:19:30:dd:4a:75:07:5b:
         70:28:51:b0:e8:6a:d3:05:97:54:97:84:05:17:d8:1d:7a:0c:
         c7:00:12:be:14:85:20:44:6e:36:e2:61:87:f1:57:4c:96:98:
         11:d7:ea:07:f8:e9:0e:43:25:31:08:37:85:f9:17:fe:1d:dd:
         7f:28:75:98:d4:7c:20:d6:14:6d:7b:c6:5c:d5:06:b6:1b:35:
         38:cc:c7:bf:c3:a7:bc:f6:08:2b:e1:6e:e1:0b:9e:ff:75:90:
         d2:90:60:16:51:0a:1b:a4:cb:f8:f5:0f:02:ae:98:98:b1:b5:
         63:5f:60:31:d4:f0:90:54:8f:95:09:d0:cd:d1:d4:96:ad:d0:
         0a:8d:a8:ae:4d:5f:53:10:1f:04:5f:ec:a4:80:bb:86:52:af:
         4a:c7:4e:b4:76:1a:9a:a1:39:da:b8:39:4e:51:65:2a:44:7a:
         84:c1:21:ae:44:77:5f:e4:b9:1e:76:57:82:af:36:26:ea:4c:
         50:93:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:21 2026 by rpki-client