Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File:                     _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier:          vCnkfYTVl5+xN3fjPFCa7ufri5Nz2dEs8weuznP5Kms=
Subject key identifier:   9B:70:3C:C7:B0:34:E1:9A:70:AC:2C:27:F7:F6:D6:57:CA:D6:3B:0D
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer:       /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial:       019F9EF19DB8E026384D25CA9648FE87E456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number:          0972
Signing time:             Sun 26 Jul 2026 15:01:02 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:02 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:02 +0000
Files and hashes:         1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
                          2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
                          3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
                          4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
                          5: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
                          6: EXs9LISjCQhWAd2HiIWm-im5__w.roa (hash: n4sN98ePnVDPSJNxRYiTwCAYAV7AFkIT151+9zv8WsM=)
                          7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
                          8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
                          9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: KrUWET5wQKOfV7tIepRP3ebw/JRh3b5xaV7MfpcwDjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:9d:b8:e0:26:38:4d:25:ca:96:48:fe:87:e4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
        Validity
            Not Before: Jul 26 15:01:02 2026 GMT
            Not After : Jul 27 15:01:02 2026 GMT
        Subject: CN=9b703cc7b034e19a70ac2c27f7f6d657cad63b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:51:ee:29:8f:9a:18:b3:cb:79:ab:6e:a8:
                    06:01:a7:2d:35:bf:79:17:2f:76:64:03:7a:14:82:
                    75:dc:54:14:af:6e:49:4e:2b:6e:5a:a2:05:25:d9:
                    78:7a:1a:af:2e:60:89:76:19:ed:35:ff:c3:77:23:
                    ad:81:62:f3:78:b2:c8:fd:98:12:13:3c:fc:9d:9e:
                    3d:8a:0b:37:df:f8:10:68:3f:1e:a2:6b:ed:ec:77:
                    9b:2a:35:6e:7f:60:c3:bd:20:f8:8e:4a:37:ac:d5:
                    c9:c9:28:25:e8:3c:ed:f3:50:8e:a5:84:f6:df:c3:
                    5d:21:8c:dd:d8:67:78:d5:ca:c7:85:b1:72:b7:48:
                    f7:8d:5e:ba:80:44:dd:08:2d:5a:d8:1d:c6:d4:55:
                    25:a4:01:0f:be:43:7a:64:1a:ef:2c:40:56:79:09:
                    3d:1f:fd:ff:e8:04:7e:1c:7b:ab:6d:7d:8a:63:82:
                    5e:25:19:11:08:c8:29:f7:97:86:e9:d6:85:b2:6e:
                    62:bf:82:92:44:0a:40:7c:7b:6c:81:20:ee:36:f1:
                    00:42:b2:66:0b:73:d2:11:e7:df:1a:1e:8d:00:8f:
                    81:c0:79:13:03:3f:9d:b8:1f:f7:2e:2e:6a:fb:98:
                    c3:fa:0b:fe:ab:50:99:fc:37:63:f3:f5:c2:3a:55:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:3C:C7:B0:34:E1:9A:70:AC:2C:27:F7:F6:D6:57:CA:D6:3B:0D
            X509v3 Authority Key Identifier:
                keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:6e:26:65:5a:67:03:9b:f9:fb:20:a0:72:57:62:3b:d4:
         0b:b4:0f:45:1c:56:14:f7:09:a2:aa:95:cf:d1:ea:ff:2e:41:
         9e:13:c0:2b:fe:b1:06:1f:fe:3a:0a:54:9f:6c:cd:5d:7f:a8:
         47:a9:74:a5:6c:16:5a:f2:3b:c1:3a:67:67:b3:7a:ac:29:8f:
         ea:b3:ca:1b:8b:7f:8c:ea:90:57:cc:4d:d4:e9:6a:7a:ca:90:
         29:c0:72:cf:25:cc:23:d5:b9:c3:99:77:61:0d:89:ab:86:d1:
         df:67:9a:ab:bb:24:8e:07:cd:f4:fb:a4:13:a6:d3:fb:95:fd:
         27:3a:70:70:9e:03:18:7f:58:a4:de:4f:08:9a:2b:8f:b3:cb:
         69:6b:7e:ed:34:44:52:bc:8f:73:8b:a7:7f:df:5f:86:74:a4:
         69:c8:48:0a:b2:c1:8b:00:84:fc:f0:82:39:54:5e:d7:b0:ad:
         09:ef:ec:1a:5e:56:ce:21:a4:42:9d:29:fa:63:c6:21:a6:dc:
         6c:8c:9c:bb:8a:80:e9:1d:8e:f8:97:f7:9b:aa:72:a6:20:11:
         c3:67:21:a6:ab:cd:03:f2:b9:2a:e3:b5:df:90:cc:c7:82:d9:
         a4:56:45:63:c6:b7:75:cf:13:40:0e:6c:56:69:72:67:ac:03:
         0e:0d:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:23:54 2026 by rpki-client