Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
File:                     9E3jbOZUNyHyemiTo7Orf_-eEiE.mft (raw, json)
Hash identifier:          uRuOZD7wLTWHRqEJfYYtgypkIZWc/nlV/HQddckQHYA=
Subject key identifier:   E0:65:06:9D:00:9B:78:89:EC:67:E3:EE:6F:6F:50:BD:89:8C:F6:56
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Certificate issuer:       /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial:       019F81F934E0FEA246DCEAF7E0195CB651AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
Manifest number:          38
Signing time:             Tue 21 Jul 2026 00:00:20 +0000
Manifest this update:     Tue 21 Jul 2026 00:00:20 +0000
Manifest next update:     Wed 22 Jul 2026 00:00:20 +0000
Files and hashes:         1: 1u-gUa9URlrodTmkGb9LRYX3OVU.roa (hash: oC9ByTbYQvO/MlLyyCdsGNzkRESBDij4okyToSMwSRU=)
                          2: 8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa (hash: hIwaksOJP0zxQbZYSD2p0uscCDCl37ZQQd1k8/2OOCo=)
                          3: 9E3jbOZUNyHyemiTo7Orf_-eEiE.crl (hash: iwa9yDePUB5GTsSgpbwz8sJwGiUVhogg7hZn1RU4pgA=)
                          4: H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa (hash: lLlcVWkBzyqFZaScNM4rXUJUhmBYgLuz/mF4DSCZsow=)
                          5: SF34wbOtYdRuApVr6Gux8pIJkSQ.roa (hash: iRP53qSEiGHrITXx04bly+wQA2RkGJTTrL0VEYAoBNk=)
                          6: bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa (hash: ORVCT7FJ02Pf6zwRRTxkzn72Y3WbAChmuKaE2k5xVLE=)
                          7: efrlaKAi_CsVQe9yQF_dyjmBGT4.roa (hash: Ow8jyy8gW2uZjxaG1qOEM9ZeKzJiMT/L9zqHnHOtO8M=)
                          8: kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa (hash: wZlAb2i6Q85EuSipXQW0wySIWm8YuhMljUtSh1EvtjE=)
                          9: xeKZmPgvPMOy0KwEWStwZbewpmQ.roa (hash: FQj3XVymc2AHbwvXpX69Y9LJlgObeqHhy7xHy0+4/mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:f9:34:e0:fe:a2:46:dc:ea:f7:e0:19:5c:b6:51:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
        Validity
            Not Before: Jul 21 00:00:20 2026 GMT
            Not After : Jul 22 00:00:20 2026 GMT
        Subject: CN=e065069d009b7889ec67e3ee6f6f50bd898cf656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:cb:4b:92:33:ec:f9:53:5e:12:d6:4c:c8:
                    c2:d7:c3:30:93:e3:de:50:69:28:36:18:04:b5:0e:
                    cb:0c:60:d2:21:1e:60:7f:e8:b1:33:48:83:68:28:
                    d2:2c:05:8a:1f:11:25:ca:0f:c3:35:df:ae:13:a2:
                    f8:73:56:13:e5:e7:c3:88:a4:e7:5e:e7:58:97:84:
                    9b:16:a3:73:5e:3e:98:90:82:5b:03:59:6d:dc:a2:
                    86:b2:75:0a:9b:6a:5a:66:34:27:6f:a8:18:3f:82:
                    dd:25:db:32:b9:fc:27:26:df:a2:46:05:ed:b6:16:
                    47:d3:fd:bf:cb:e2:81:c0:2c:2a:ab:2f:86:25:b5:
                    5c:5f:0f:dc:b2:f4:ad:e8:fd:e7:41:06:4b:19:20:
                    ea:fb:63:a2:f4:82:51:44:e7:f4:6c:b4:e8:3c:c2:
                    d2:50:74:9f:24:a9:9f:62:b8:f1:e8:76:e6:6e:75:
                    52:d3:f4:03:b4:7c:8f:22:14:05:12:0d:04:0d:c1:
                    59:10:cc:4d:7e:d5:4f:aa:a6:43:b2:02:fb:b3:5d:
                    cb:91:47:07:4f:99:20:ca:0a:00:23:cf:7e:76:a2:
                    c0:98:18:3b:cb:c0:50:d0:ef:e1:6c:b9:65:81:6a:
                    fa:2c:28:d0:6c:53:9f:b3:d6:f3:bd:12:58:c4:c4:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:65:06:9D:00:9B:78:89:EC:67:E3:EE:6F:6F:50:BD:89:8C:F6:56
            X509v3 Authority Key Identifier:
                keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:92:dc:40:d3:41:b5:b8:7c:5a:37:81:82:d3:91:a8:02:2d:
         07:d7:39:3c:ea:87:89:ac:a3:78:74:d6:ea:09:7d:fd:7e:10:
         06:7f:60:5e:19:40:ec:e2:6e:f1:12:06:12:40:cf:56:39:4f:
         64:ce:f0:4b:14:85:14:18:04:9c:17:91:a7:94:5b:75:fa:bb:
         7b:6e:e3:20:8a:29:16:5c:65:9d:51:c5:64:4e:7e:48:c5:5b:
         11:3e:cd:58:4e:3b:ef:5b:de:a3:57:73:2f:0b:3d:fb:e5:57:
         15:58:32:b0:3d:f1:19:35:b9:ac:57:91:73:f2:6a:30:a9:7e:
         1e:57:5c:1b:07:b7:b6:0c:87:61:fc:48:92:e6:ee:60:0f:79:
         57:c4:f3:d3:db:e0:fa:d8:f5:d2:f3:d6:f9:1d:7c:aa:82:fd:
         9d:d6:0b:bc:0d:58:8f:7b:b8:95:bc:45:4b:6d:bd:29:3b:60:
         26:a4:89:2b:24:f2:ed:b0:cf:8c:f9:a7:02:7e:27:3b:ad:ed:
         fe:e5:74:93:29:b4:9c:e5:99:4f:23:0e:35:15:a2:03:64:52:
         1a:29:5f:06:a4:f6:45:78:8b:ad:95:69:1e:80:99:8f:38:ec:
         ec:1d:5a:32:f3:79:c4:70:04:da:ff:fe:e8:41:1c:93:28:4e:
         7e:4d:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:41:17 2026 by rpki-client