Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
File:                     91anOU_9JyHWClrS6Saj0OHIu3k.mft (raw, json)
Hash identifier:          +buh6LYrS4X03sEySbavTnLrXe+CGrD724iJ16UTbNk=
Subject key identifier:   B1:D7:C0:F2:76:D1:97:E5:E3:FA:9C:56:70:2E:A1:1C:3A:43:58:31
Authority key identifier: F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79
Certificate issuer:       /CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
Certificate serial:       019F83E854C938B3A7F60126255FA5B0F0FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
Manifest number:          39
Signing time:             Tue 21 Jul 2026 09:01:09 +0000
Manifest this update:     Tue 21 Jul 2026 09:01:09 +0000
Manifest next update:     Wed 22 Jul 2026 09:01:09 +0000
Files and hashes:         1: 91anOU_9JyHWClrS6Saj0OHIu3k.crl (hash: 7h3+rv7vwH5/Wz3kEvk14snGEPTWxaqMi2D0KHibMGM=)
                          2: UE3rL7zpaLm2SNTNuQ_P2WzZEmA.roa (hash: xmWFoDrPk0aUWmQMRX8ayV7sBUWalQjY9fCBxeyV5bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:e8:54:c9:38:b3:a7:f6:01:26:25:5f:a5:b0:f0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
        Validity
            Not Before: Jul 21 09:01:09 2026 GMT
            Not After : Jul 22 09:01:09 2026 GMT
        Subject: CN=b1d7c0f276d197e5e3fa9c56702ea11c3a435831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:08:72:50:8d:23:1c:cc:63:a0:0a:1b:a8:
                    50:78:29:97:60:c4:eb:6e:e8:7c:89:0b:23:58:4a:
                    a5:e9:49:c8:de:fc:d6:f7:3f:19:0f:98:88:ea:05:
                    41:ed:c6:3e:e9:4c:31:2a:ab:11:95:a4:98:a1:d7:
                    d7:6c:b2:b8:d0:32:9f:81:88:69:0e:d7:f5:28:ec:
                    f4:c3:82:e6:4d:f3:e4:22:41:fe:0b:66:c6:d4:66:
                    24:4a:50:76:79:ff:43:1e:39:cc:75:f8:08:50:94:
                    87:bc:06:e7:54:0f:23:84:65:58:8a:0d:67:b7:28:
                    bf:89:a4:36:b6:2e:ab:3e:92:bb:18:2d:50:dd:14:
                    4c:d1:e1:b3:d8:69:0b:65:93:34:da:ac:55:b3:23:
                    e4:01:ba:b1:62:94:f3:02:64:87:bf:d0:14:12:e1:
                    46:cb:be:b5:1b:97:61:d5:3c:a4:91:b0:8f:66:5b:
                    ba:88:02:f3:5a:1a:a2:62:2c:67:c1:16:2f:ce:16:
                    49:71:c3:7b:1f:4a:4d:52:d4:6c:95:6e:69:56:36:
                    b0:d6:69:bc:f2:23:07:99:c1:33:d9:da:ca:e5:d5:
                    d5:77:20:de:63:83:89:f4:64:75:6d:1d:0b:b6:66:
                    a8:09:2c:64:a6:4f:eb:99:8d:1d:6e:7a:b0:53:41:
                    5a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D7:C0:F2:76:D1:97:E5:E3:FA:9C:56:70:2E:A1:1C:3A:43:58:31
            X509v3 Authority Key Identifier:
                keyid:F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:74:f6:8d:e0:06:d8:d7:51:1f:1e:5c:36:44:3b:72:bb:8f:
         d0:ba:2b:be:bc:86:c5:77:2b:04:bd:0c:b0:54:b9:19:d2:ae:
         66:f9:96:57:b1:55:df:6f:91:b3:cb:90:62:d1:17:2d:c5:36:
         96:6e:d5:66:b9:ec:ad:54:20:26:f3:05:4e:0f:9a:7b:54:e0:
         38:e6:94:90:b1:bd:d1:90:31:55:5f:2c:6a:c0:f6:71:c1:89:
         f4:c2:a0:5a:f3:40:de:d2:bb:b7:43:3b:b9:92:ad:0e:c3:a8:
         0b:f1:df:a8:e5:19:4a:8d:65:58:20:c9:a6:b8:b0:52:fb:7b:
         5c:3a:44:9f:92:41:fa:57:1e:7c:54:70:e6:dc:c2:8e:8f:95:
         ca:40:5a:d1:a4:91:2f:ae:cf:af:b9:84:e9:e8:2c:db:11:2c:
         0b:19:2b:60:5a:4e:96:12:6d:d7:57:21:55:28:b0:05:79:ae:
         d0:29:a8:3f:d3:eb:84:15:e2:73:9a:3d:53:cf:92:2f:25:95:
         68:1e:4c:9f:da:33:d2:fb:00:fa:e3:d7:6a:41:d4:27:99:52:
         aa:08:b8:a2:b2:7a:6f:55:a7:9d:9d:c0:3f:2a:b8:08:47:06:
         23:15:48:58:b3:91:8e:7d:38:bf:33:08:a9:f0:2e:66:75:91:
         96:bb:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:34:07 2026 by rpki-client