Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File:                     v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier:          X7ouxxKVbzx7jWRz/K7SswQQgh2HVprWaOD8Pq6kMdQ=
Subject key identifier:   DB:71:FB:13:EB:01:C9:40:FE:33:DA:1D:4B:E6:8A:88:A7:D2:75:CD
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer:       /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial:       019FA0DFBF399320F86ABD787E4FE040B567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number:          19CD
Signing time:             Mon 27 Jul 2026 00:00:45 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:45 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:45 +0000
Files and hashes:         1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
                          2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
                          3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
                          4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
                          5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: 247xkPw9dSpXHbpeTMSTuE47GGqInDd4SpH6TqcF9rU=)
                          6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:bf:39:93:20:f8:6a:bd:78:7e:4f:e0:40:b5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
        Validity
            Not Before: Jul 27 00:00:45 2026 GMT
            Not After : Jul 28 00:00:45 2026 GMT
        Subject: CN=db71fb13eb01c940fe33da1d4be68a88a7d275cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:cf:ff:66:eb:af:83:8b:c1:2c:91:81:cd:
                    8b:1e:69:9e:cb:eb:f8:58:b5:65:b6:ba:23:72:49:
                    b9:11:54:42:84:56:72:8e:2a:a3:1a:72:d3:59:72:
                    50:da:11:1c:59:43:3f:8f:7d:47:bc:49:51:e3:f1:
                    f2:f7:ff:9c:f6:b3:9a:b0:c3:f8:f0:00:3b:f5:5c:
                    0b:54:f7:bc:3a:e9:0c:9e:a7:60:51:cd:6f:5e:2a:
                    e0:62:8c:18:0e:71:92:0c:04:d1:a4:52:50:04:47:
                    0f:3a:40:8e:93:73:9a:67:a1:91:25:50:ef:bf:6b:
                    5b:f9:42:d2:d5:10:6a:73:81:f6:b0:f6:26:87:9b:
                    01:d8:91:34:9b:12:28:95:d5:8b:ac:6b:99:36:91:
                    4b:98:2d:b2:ca:2a:6c:8d:4c:3a:5a:4d:c8:6d:2e:
                    9d:71:90:d4:fb:2a:02:6b:54:68:c4:da:e8:f4:c7:
                    1b:77:3e:05:07:38:82:c2:6d:37:20:29:ea:56:c7:
                    1d:58:97:d5:8e:ab:c4:78:bf:80:31:13:88:3e:8f:
                    5c:ef:ba:d8:1c:3f:f7:1a:67:bd:dc:b5:99:d9:0c:
                    ca:20:e3:7f:1e:e5:23:44:dc:c1:bf:a1:1f:2f:97:
                    25:9b:1b:0a:24:7e:38:1e:2f:e6:e5:ea:56:ea:ee:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:71:FB:13:EB:01:C9:40:FE:33:DA:1D:4B:E6:8A:88:A7:D2:75:CD
            X509v3 Authority Key Identifier:
                keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:34:75:99:aa:e8:4f:08:5d:6d:41:00:4c:84:53:13:5d:4d:
         f2:0d:2a:14:87:a0:82:1b:d7:1e:ad:7f:f5:a9:3b:6f:50:ef:
         55:9c:86:15:c9:21:51:75:69:fd:17:aa:5c:91:3a:3f:01:79:
         f4:48:bb:34:ee:9c:4f:5e:69:8d:f4:e7:97:fe:e9:94:5b:32:
         f0:15:18:a8:93:be:d2:43:ca:ad:79:2a:4c:13:36:e3:3d:31:
         cd:2a:f9:33:02:b3:6c:66:4f:2f:05:b5:bd:c5:48:93:51:9f:
         ef:88:1f:81:6c:5d:2b:3f:ee:0d:02:c0:e9:05:26:1b:f2:30:
         1b:76:36:d7:04:40:02:6c:6f:98:83:4f:e2:51:0a:4a:04:64:
         00:a6:dd:d0:3a:f1:8e:50:55:44:ed:cb:25:79:8b:a5:78:b6:
         67:82:e1:64:02:13:ac:e6:6e:15:51:bb:79:8a:e7:84:d4:ae:
         09:04:9a:6c:28:39:06:6d:52:56:27:1e:28:f1:59:86:46:6e:
         b2:bb:d9:0b:72:6b:21:ed:d7:c4:8c:d5:6f:39:e2:8b:fd:4e:
         4a:14:05:2d:9d:ea:df:0a:84:2f:86:2f:13:42:bd:9b:e6:b0:
         b8:87:16:ed:5c:68:26:be:fc:93:64:dd:7c:5d:5a:35:78:54:
         73:5d:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:06 2026 by rpki-client