Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          xjQ1N8PGLrNmQ/g+CJEPQTk0zF99TQb7clgLJkTwgMQ=
Subject key identifier:   5F:3B:E8:3C:A2:4B:54:8A:0B:57:53:CC:02:D9:9D:A8:85:E4:64:F3
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       019F18301C98BF714B23FAC2AF19DA476B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 11:00:33 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:33 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:33 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: C1xNXLLL2dRKF7tNdEIv9qKvCLez/+WcPMbxFdr5eNM=)
                          2: Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa (hash: CBRZQkgyapVEnN+KlGzYptdXDl00PSWBvuMGdvm4uCg=)
                          3: Lnic-b8RKeW1rpPqbvXKHlom-ys.roa (hash: 2KTr1u+98H46S2uNewgTQPp+snCfpr8r+A46P3ahmR4=)
                          4: QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa (hash: K9uUssgaA9Cw/QN8kWZlExQkvdqZ4stsO6RuK8HpBDo=)
                          5: TyGVkDRU5VuGCHmgtXtvADqB47k.roa (hash: zZ1WNsnAjF4PPiuPy/odw3fOv3vMdCoVvaWlx1hFRXc=)
                          6: qm1N6afKIHDIeVkklPLOLKGaS4s.roa (hash: ewBUJyCJZqBY4ReNaWU+ZIFZCEk2IZ7kEhQ4Bd+n260=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:1c:98:bf:71:4b:23:fa:c2:af:19:da:47:6b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Jun 30 11:00:33 2026 GMT
            Not After : Jul  1 11:00:33 2026 GMT
        Subject: CN=5f3be83ca24b548a0b5753cc02d99da885e464f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:cd:6e:62:48:6a:2f:62:6d:7d:82:db:eb:
                    d4:df:a6:23:45:a5:37:14:4f:47:77:b1:50:41:21:
                    d4:0a:ca:99:61:c1:e3:98:52:19:f9:0e:2e:37:0a:
                    17:7e:8a:ba:95:36:a0:01:0a:02:cd:f1:4e:96:5e:
                    38:c4:cc:00:b6:23:85:56:cb:68:25:21:3e:33:4c:
                    18:55:fc:c5:2b:c0:63:8a:9a:1b:e0:3d:ed:9d:a9:
                    eb:a4:18:ba:cc:07:73:6d:b1:aa:3f:d4:f4:b2:92:
                    da:50:b5:1c:24:53:c9:2f:f7:61:15:55:9e:bb:c7:
                    a7:8d:e1:8d:fe:b1:e2:d6:03:aa:f7:0e:4e:01:06:
                    73:d2:85:a4:2b:55:8a:bb:ae:0e:f4:78:16:94:d5:
                    e6:2d:46:92:60:45:00:0d:fb:60:37:eb:a9:31:35:
                    be:46:00:e3:9f:fb:57:99:f3:a4:3e:c2:c0:0d:82:
                    18:5f:20:e4:7d:7c:14:bd:0f:fb:6a:de:14:78:83:
                    79:3a:fa:c5:fd:18:26:90:e7:e5:95:3b:02:c6:bf:
                    b3:58:15:8c:36:c8:6d:99:f2:e7:7a:b2:ed:1d:ce:
                    1f:8d:c1:00:bb:df:14:f6:e6:5e:63:32:79:4d:df:
                    6c:a5:8c:bc:a4:77:65:f6:67:2a:00:ea:9a:c0:f8:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3B:E8:3C:A2:4B:54:8A:0B:57:53:CC:02:D9:9D:A8:85:E4:64:F3
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:45:88:d2:5f:9d:47:95:f5:b8:65:94:81:f7:bb:c2:6e:11:
         f4:91:17:dd:ed:84:16:51:95:06:a6:ef:e6:1e:f0:36:22:32:
         21:d8:f5:3e:7c:71:23:4f:19:15:2a:16:6a:96:c1:84:5b:ff:
         04:c2:85:f1:f5:43:b4:25:3c:6d:81:fb:3c:b2:4e:65:ec:7f:
         91:4a:89:aa:b9:cc:aa:8b:e2:1e:d0:84:b0:ac:2c:66:23:47:
         59:f1:10:87:39:ec:b3:a7:13:b6:d7:6b:0d:82:2c:78:78:dc:
         c9:b4:91:c7:b4:55:3b:d1:10:c2:c7:9d:17:60:aa:a7:47:f6:
         eb:e2:cc:7c:02:62:52:0f:d0:3b:73:ed:5f:4a:01:34:95:62:
         0b:29:b6:5b:b0:9b:43:c3:28:d8:25:57:25:ef:a4:92:08:14:
         7a:bc:06:bd:f6:b8:9a:22:61:0b:ff:45:76:9a:ea:06:a3:c0:
         86:eb:9c:0d:5c:cd:3b:9e:05:53:05:5e:62:8e:20:9e:f5:87:
         9c:7f:54:1e:df:d6:a7:ac:3e:23:cd:da:f8:a8:e2:be:25:45:
         e6:dc:d2:18:76:af:fc:64:70:98:32:2f:c5:c4:65:46:e5:93:
         b6:f1:94:9f:39:2a:3f:f5:b3:9e:3d:54:04:82:93:f8:77:2a:
         d0:02:6a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:11 2026 by rpki-client