Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
File:                     N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json)
Hash identifier:          z6kiNZ/MnLQsgM1jYQ5fooJHUqZAJy6fQ9T8EQN1BlQ=
Subject key identifier:   C9:0D:23:BC:42:46:38:EB:F9:F4:2B:56:6A:5F:CF:A4:BA:A9:BB:9B
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Certificate issuer:       /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial:       019F18D6D819E8C6A97056ED84E0373F5CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
Manifest number:          0968
Signing time:             Tue 30 Jun 2026 14:02:40 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:40 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:40 +0000
Files and hashes:         1: 9poqEnfuHRxfxLFusMgYmVdKsq0.roa (hash: 9QVM2edMXmY0GvzT6L39yTLCfHgXCLZc8xHTjCz57hk=)
                          2: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: s5zRU5oCmC+2zigrx4sVoBDZjOc+v/b93QB5G+cLTzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:d8:19:e8:c6:a9:70:56:ed:84:e0:37:3f:5c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
        Validity
            Not Before: Jun 30 14:02:40 2026 GMT
            Not After : Jul  1 14:02:40 2026 GMT
        Subject: CN=c90d23bc424638ebf9f42b566a5fcfa4baa9bb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:85:fe:df:21:9a:53:b5:24:4a:6d:c2:20:
                    e2:88:c8:53:20:d1:35:b4:99:51:b1:48:4a:f8:23:
                    d6:6b:c4:8d:5e:b3:b1:7b:96:a9:27:a2:66:cf:77:
                    90:a5:e2:97:6b:74:4d:18:b3:bd:df:d9:af:f6:90:
                    b6:bd:94:ea:78:a7:25:1b:b5:a1:3a:06:6d:d4:53:
                    57:10:7b:9b:db:73:bc:bb:7b:8b:b2:48:2b:9d:f0:
                    85:17:86:5e:be:68:8a:6b:34:6c:5a:e2:d1:f4:5b:
                    1a:35:21:74:4d:95:be:9e:7b:1a:0e:b7:51:40:1a:
                    45:10:05:e7:e9:96:a2:e2:ae:e9:c0:2c:11:45:58:
                    f6:72:94:be:f6:d7:74:27:97:68:76:fe:c9:bb:78:
                    9c:67:00:50:10:ee:26:ff:1f:51:2d:16:7f:2f:59:
                    2d:68:76:80:27:a4:97:f6:cd:9a:ae:e4:70:d7:09:
                    51:4f:65:43:e4:60:bf:87:86:63:04:4a:7a:f1:bd:
                    9c:ec:7a:57:86:bc:75:97:37:37:cc:9b:12:16:13:
                    e6:35:eb:0d:ca:44:80:c6:19:c0:31:16:f2:9d:7d:
                    3d:fd:53:04:02:77:e7:07:2f:82:85:58:af:ed:fb:
                    74:43:94:ae:4f:ba:c8:b6:36:7a:26:2a:71:a0:6d:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0D:23:BC:42:46:38:EB:F9:F4:2B:56:6A:5F:CF:A4:BA:A9:BB:9B
            X509v3 Authority Key Identifier:
                keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0e:c5:d8:b7:89:d4:9f:6f:4b:62:2f:9f:72:25:05:87:1d:
         1a:60:b0:ce:ed:f4:e4:f9:5b:79:4c:85:03:61:ba:46:70:6e:
         89:31:67:ed:1b:ba:cc:23:1f:33:56:0f:e4:ac:6d:fc:3c:0c:
         a8:99:4d:b0:83:2d:7d:75:69:20:6a:33:09:eb:b1:e5:a7:e4:
         0b:43:d5:03:a2:cd:d6:58:27:ff:dd:ef:8e:31:a2:8d:68:05:
         49:4d:d2:9f:34:b7:42:71:cf:98:79:7e:23:e4:fe:d5:76:08:
         36:0d:91:02:0a:4c:52:53:c7:f3:43:93:f6:21:ca:39:b7:21:
         bb:c7:81:ce:39:be:8a:64:02:a3:d6:37:b9:97:d3:53:9f:89:
         f0:ad:42:23:03:69:b1:5d:4b:7f:bf:da:16:2a:91:7c:73:e9:
         ab:0e:03:2a:9b:65:cc:af:b4:02:93:0f:27:70:3e:a4:69:8e:
         4d:ea:1b:89:64:bb:ee:f0:28:56:71:43:0b:a1:b9:bb:08:0d:
         63:e6:f0:69:90:28:1e:b9:5d:c6:5a:51:a5:e4:05:74:e0:fd:
         a6:75:8e:32:98:d9:0a:16:39:58:8a:2e:56:11:48:42:c5:1f:
         30:47:57:4b:98:88:d5:cb:a1:1f:96:da:a6:08:76:44:77:b5:
         10:29:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:38:33 2026 by rpki-client