Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
File:                     9WR7mt8n-vd9-AgsVVG3N1asPe8.mft (raw, json)
Hash identifier:          vshNyzVXzNvpohQzVn+dT9yR6C5QZlsy0bqKWyR1WEg=
Subject key identifier:   CB:82:67:9E:1E:A0:74:D8:46:8E:40:19:65:2C:C4:2E:A9:F4:AF:FA
Authority key identifier: F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
Certificate issuer:       /CN=f5647b9adf27faf77df8082c5551b73756ac3def
Certificate serial:       019F129C4ED2B505D5D695ED274C71690B47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
Manifest number:          0110
Signing time:             Mon 29 Jun 2026 09:01:01 +0000
Manifest this update:     Mon 29 Jun 2026 09:01:01 +0000
Manifest next update:     Tue 30 Jun 2026 09:01:01 +0000
Files and hashes:         1: 8L86gshlVnRWr5gdY2DjZCCezS4.asa (hash: YjYfeGlfl/t841MtUmbFSM8G4/SKtO5ZfDYqZpGqHMA=)
                          2: 9WR7mt8n-vd9-AgsVVG3N1asPe8.crl (hash: 9487r8OOn7TadinZ1ujs8x2h+3b04hJP5AivfmAGon8=)
                          3: kcx511HkgH6_p24UHLo0MXG7V-A.roa (hash: dNUOg34buyXeNE8RHao0TAiuQSfhv2tTmHDrugM/EPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:4e:d2:b5:05:d5:d6:95:ed:27:4c:71:69:0b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5647b9adf27faf77df8082c5551b73756ac3def
        Validity
            Not Before: Jun 29 09:01:01 2026 GMT
            Not After : Jun 30 09:01:01 2026 GMT
        Subject: CN=cb82679e1ea074d8468e4019652cc42ea9f4affa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:07:84:0b:9f:db:f1:42:f0:57:78:19:f2:
                    87:5d:c9:4c:71:57:c5:ba:12:7c:1a:e6:b5:20:8a:
                    b3:1e:0f:37:d8:a0:d8:57:51:de:bf:d0:fd:41:5e:
                    f1:7d:41:6b:79:14:04:d7:4c:d3:55:59:6e:0e:62:
                    dc:68:6b:0f:59:b3:4e:ec:24:37:6a:1e:9c:e6:82:
                    5c:79:62:41:23:43:2b:d4:95:81:d8:d4:7b:0f:38:
                    86:2d:d6:5e:31:8f:cd:f5:12:46:91:c5:0b:01:45:
                    e2:05:20:4d:d8:83:32:67:a4:cf:5e:3a:cd:7a:5d:
                    ab:36:22:25:2b:ba:35:40:68:8c:15:e4:3b:28:fb:
                    e1:96:c8:ca:91:8e:4c:52:8b:14:77:bd:a9:03:97:
                    1b:0c:a3:db:4c:a8:d2:9c:52:d4:61:ca:27:46:64:
                    bb:92:72:53:93:4a:ef:66:4a:79:ed:38:4b:ef:69:
                    6d:2b:9c:ce:1d:d0:ff:26:f5:cb:6c:5d:a3:54:7b:
                    c6:cd:9a:fe:08:bb:e0:54:c4:a6:29:2e:c6:9b:0f:
                    c1:1c:60:d1:3e:d3:07:57:18:18:49:ec:8c:33:d2:
                    39:94:2b:0d:7e:17:99:63:a6:bc:79:20:00:0b:bf:
                    7b:68:2b:5c:1d:71:4b:16:cb:19:fc:67:ce:47:1f:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:82:67:9E:1E:A0:74:D8:46:8E:40:19:65:2C:C4:2E:A9:F4:AF:FA
            X509v3 Authority Key Identifier:
                keyid:F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:85:20:59:4e:f6:90:44:78:01:da:7d:62:3c:10:81:94:e5:
         4c:fb:1a:e4:f3:e8:94:a8:71:da:43:2c:21:21:20:88:c1:5b:
         51:82:2f:30:3e:9c:50:d7:45:58:9d:a4:da:f3:9f:b8:b5:f9:
         fa:e4:e3:56:2b:aa:c1:e7:67:7e:b6:ad:7f:c2:82:72:47:64:
         30:50:52:72:b4:0e:fb:72:48:63:0c:cb:5f:f1:6f:a0:bd:74:
         29:81:5c:8a:de:36:e9:88:7c:ce:da:ad:f5:95:72:b0:95:f3:
         da:fa:17:ad:17:6e:09:35:99:af:25:fd:c6:62:59:ab:3d:a9:
         8d:e5:25:ef:53:c5:cc:2a:da:e3:3a:f0:b9:3f:d4:41:33:22:
         28:00:16:f3:2c:ea:c3:69:2a:3f:40:f2:4e:6a:a1:89:33:50:
         fa:22:a4:ef:89:14:1d:f7:95:c5:4e:d1:1e:e4:cd:ef:4d:56:
         80:7d:94:1c:08:f9:cf:12:f4:77:8d:ac:76:1d:13:ab:f7:ee:
         55:83:42:2a:b3:4a:e2:c8:8d:92:36:89:5d:37:25:bd:6f:86:
         01:4c:59:7b:d3:14:4c:f4:1d:22:51:96:50:f4:2c:e8:fb:c0:
         e5:91:7e:92:20:ba:aa:a9:8e:a9:ce:f0:be:a8:70:45:31:5c:
         f6:dc:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:05 2026 by rpki-client