Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File:                     9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier:          zh8lYE+uaw9/jLQDSlB/vQRphflxXtWFcexrWXRMOn0=
Subject key identifier:   23:85:B3:EF:99:2F:54:3D:7A:48:0E:22:AB:91:24:11:83:A8:C1:C4
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer:       /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial:       019F17C2FF544A9E10C8714C6AA9EDB49296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number:          1985
Signing time:             Tue 30 Jun 2026 09:01:23 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:23 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:23 +0000
Files and hashes:         1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: wbJV6nn/msSbyoImzC6iRqpwKSoVN/6asucMUAhaxf4=)
                          2: LDyfR2ZtnYNbloHwNFDlP56jAsw.roa (hash: inTNdVNnUzE3++ozBBAiNTKzryuD+atj6L3dBuSWD7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:ff:54:4a:9e:10:c8:71:4c:6a:a9:ed:b4:92:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
        Validity
            Not Before: Jun 30 09:01:23 2026 GMT
            Not After : Jul  1 09:01:23 2026 GMT
        Subject: CN=2385b3ef992f543d7a480e22ab91241183a8c1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:a5:b2:80:a6:7f:6e:49:1a:23:da:8f:c0:
                    1b:72:f1:be:9c:6c:26:76:c6:95:29:df:8e:fc:85:
                    32:f5:df:b0:18:66:2d:eb:e4:65:d7:b7:03:fb:47:
                    a9:c8:42:91:2c:63:05:b3:90:b9:c0:52:6f:3f:55:
                    69:72:61:b2:18:88:2b:95:30:f0:18:bc:e3:60:0f:
                    0c:f6:01:46:ee:d8:2e:0f:74:66:aa:9c:71:c0:8a:
                    27:59:39:1e:d4:cc:8b:07:42:c6:8f:7a:1a:f3:ee:
                    fc:75:66:b3:99:63:b8:92:3c:be:23:1d:db:98:d1:
                    da:c9:09:c3:6f:03:8e:d7:0e:fd:96:af:19:c5:4f:
                    81:ad:61:df:5d:00:c0:cc:0d:c4:b8:46:fb:fe:f4:
                    50:62:e3:95:26:3e:1e:b5:6e:45:d4:4e:32:0d:c6:
                    f6:98:22:61:82:74:97:40:f3:fc:74:10:b3:1b:3e:
                    ac:16:01:fc:13:fd:fb:78:cb:23:dc:0b:86:89:0b:
                    15:5f:28:05:75:7a:ed:9d:bb:88:ff:b9:8f:9f:31:
                    82:c1:4b:1e:14:d4:8b:93:2b:93:86:e2:be:34:b6:
                    f8:bb:ad:f8:15:31:fc:c8:83:f2:ea:a0:44:ea:19:
                    6b:93:c1:de:5a:30:c9:37:83:cb:39:a6:3d:f8:25:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:85:B3:EF:99:2F:54:3D:7A:48:0E:22:AB:91:24:11:83:A8:C1:C4
            X509v3 Authority Key Identifier:
                keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3f:56:80:1f:54:a2:ca:f2:f2:a8:11:d8:9d:bb:84:e1:8b:
         ab:ab:4f:fb:7d:0c:6d:5c:e3:1c:3e:cf:f9:5f:95:a0:2e:0b:
         40:c3:81:55:21:db:bd:56:84:95:fb:1d:f6:c0:ba:8f:c7:3e:
         da:cb:c4:64:c7:5b:f6:84:12:dd:22:bf:c0:c3:0e:45:13:fc:
         e2:31:cc:7a:f5:c9:ef:d0:6b:ab:1e:a9:60:e0:6e:85:76:2b:
         7f:7a:f8:bd:8e:b1:c2:73:ca:bd:9d:ba:da:a5:6e:96:04:a5:
         04:29:ee:0d:21:58:9b:b6:57:28:62:fe:57:4d:cd:fc:3d:08:
         04:ba:8c:46:80:bc:4c:ca:b7:33:bd:6d:48:94:10:ef:64:a3:
         b5:dc:45:e3:1f:4d:46:c3:03:71:40:ac:6b:17:db:b6:4b:a2:
         05:fa:ec:4a:6a:20:dd:a2:d2:d4:c3:47:59:c5:97:e0:0b:86:
         2f:92:a1:c5:aa:66:b0:a7:d9:a3:4c:91:cb:05:4e:66:6d:53:
         40:2a:6c:e7:bb:2f:be:cb:3e:09:a8:24:c0:45:04:ca:38:86:
         af:9f:77:21:4e:c8:e8:a2:18:c4:0d:92:0d:3d:d5:8f:15:46:
         e0:4c:e3:81:b8:6d:40:21:9d:e0:66:f4:73:dc:f4:59:7b:83:
         90:5a:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:56 2026 by rpki-client