Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File:                     9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier:          tloPQWJrYp+IyVvS2En0OFQyWtyoSednw5lwQcEd2l8=
Subject key identifier:   8F:B9:F7:5C:E2:09:55:EE:F5:15:D9:99:95:CB:C9:B4:EF:6E:8C:BB
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       019EB845B7C6378127DBFE123D251B91B5DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number:          08DF
Signing time:             Thu 11 Jun 2026 20:00:37 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:37 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:37 +0000
Files and hashes:         1: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: p57UoHdRoiW2Os7iGFcCdqNUHZ3ohVS1JRzfE91M2r4=)
                          2: DTajfEiYAfwU9wznkihFnvtM700.roa (hash: 0NM6zYcwmQ05W0Dcf5q5e1n9JwwtYJ2TI/Zem3bjahI=)
                          3: ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa (hash: 5I9TJRb3cc5VhsKq+pB92ABihn+aPu3v2b27S765Sxc=)
                          4: YHFA4JQJT_w-qOyv1tdQo99hP7U.roa (hash: bzABHukn/tUJxV914JpkLB2MX+U4A40WKsjCRa7w6mI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:b7:c6:37:81:27:db:fe:12:3d:25:1b:91:b5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Jun 11 20:00:37 2026 GMT
            Not After : Jun 12 20:00:37 2026 GMT
        Subject: CN=8fb9f75ce20955eef515d99995cbc9b4ef6e8cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:a0:c0:38:59:28:d0:a2:44:42:15:93:be:
                    bc:ca:c8:1a:9f:85:40:cc:18:85:41:35:f2:21:2d:
                    dc:fc:bc:56:bc:fa:6f:b1:75:ba:63:02:21:b1:ae:
                    f3:75:b4:f7:8f:91:02:67:b0:2a:c8:16:97:e8:e4:
                    4d:ff:38:32:12:db:da:09:7a:bd:74:e0:73:e6:4e:
                    aa:86:4c:30:47:af:3c:a5:9b:05:1e:fb:06:85:9c:
                    f5:dd:bb:dc:b2:4a:69:7c:9d:82:7d:12:35:87:1f:
                    72:80:cd:44:86:14:2a:98:cd:22:ae:45:21:03:2d:
                    2c:a5:6f:aa:e0:1c:46:f9:bb:ca:b4:3c:a2:6e:e8:
                    3c:73:a2:74:aa:7a:66:46:16:ac:b5:43:f3:b0:33:
                    08:31:2c:af:f8:bd:35:8a:f7:54:84:f4:4f:2c:ec:
                    9d:d9:b7:28:a3:1b:45:7d:5c:4f:be:a7:b3:f1:d2:
                    a9:20:2b:8c:05:01:98:40:21:e9:81:23:86:03:7c:
                    8a:0e:2d:8c:58:aa:a6:30:2a:1f:eb:0c:8a:2f:e8:
                    67:19:2c:28:6d:aa:3e:27:18:fe:6d:d4:56:ac:3a:
                    25:29:41:49:22:53:63:df:6f:04:9f:08:f6:bf:97:
                    7e:d7:22:15:63:35:66:ca:b2:90:fd:cb:cf:b4:88:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B9:F7:5C:E2:09:55:EE:F5:15:D9:99:95:CB:C9:B4:EF:6E:8C:BB
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ca:12:dd:4b:00:8d:d7:53:10:40:a5:38:13:85:70:eb:54:
         87:71:d0:9c:7a:d5:81:07:99:13:80:f5:fc:50:50:0b:3f:de:
         a4:c2:f1:d7:d0:ee:1a:64:3d:2d:d7:2d:db:fd:6d:38:88:ce:
         f9:a2:e0:8a:7f:c8:14:06:38:99:00:0a:ba:85:b2:fd:70:c4:
         f0:2d:56:72:f4:41:c0:07:39:82:99:b8:89:1f:c5:07:c1:4c:
         e1:f2:fb:4f:85:4e:0d:06:f4:1f:72:93:8a:70:24:78:a8:97:
         b9:0e:9b:6b:04:0b:00:0e:13:5a:18:05:60:37:d9:2f:f9:cf:
         4d:9a:88:bb:83:d4:84:25:bc:ac:f9:88:e4:c9:87:6a:1b:b1:
         e8:a8:c2:bc:4f:6d:e5:ae:3a:22:39:6a:96:1a:cf:d8:61:dc:
         35:b0:df:f4:6b:d8:05:02:07:b1:94:75:dc:3d:45:09:28:a3:
         74:3e:e1:0b:c4:ab:93:52:85:7a:8b:80:4b:12:3e:28:44:59:
         c9:71:ba:ff:35:a4:ff:66:7c:86:3e:85:4f:0b:de:e4:73:8f:
         09:dd:96:59:b2:d0:a1:53:3d:da:9e:80:14:e8:5e:8c:4a:b4:
         18:f9:61:68:aa:9b:02:93:8a:62:4c:25:9e:99:60:72:3d:b9:
         47:13:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:07 2026 by rpki-client