Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File:                     9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier:          FT6tXsjCjkn4fxMSsDJG8k/Em8c6i5Pd29Zbul7nsNQ=
Subject key identifier:   85:90:94:69:35:19:32:9E:84:EF:A5:7F:44:CD:63:F6:8D:3A:5C:44
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer:       /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial:       019F1377C8BC6878B1BC8C528F001AD80DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number:          0DBE
Signing time:             Mon 29 Jun 2026 13:00:44 +0000
Manifest this update:     Mon 29 Jun 2026 13:00:44 +0000
Manifest next update:     Tue 30 Jun 2026 13:00:44 +0000
Files and hashes:         1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: vp/kMmXW9bLBnH7Yb1gmhr/O42troK/lNQdQqBSQRPY=)
                          2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:77:c8:bc:68:78:b1:bc:8c:52:8f:00:1a:d8:0d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
        Validity
            Not Before: Jun 29 13:00:44 2026 GMT
            Not After : Jun 30 13:00:44 2026 GMT
        Subject: CN=859094693519329e84efa57f44cd63f68d3a5c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:14:45:3d:b5:c9:71:ba:d1:cb:36:41:33:
                    c7:a4:eb:73:d7:dc:de:a6:8d:d2:7b:10:18:58:5a:
                    48:cc:4e:5c:82:34:f9:ce:ed:42:1e:93:be:22:21:
                    11:0f:59:e3:20:ce:b7:34:a1:c7:4e:13:ca:bf:c7:
                    62:0e:2f:d1:65:ea:89:c7:90:f5:b6:8c:4d:23:f8:
                    af:9b:bf:06:80:de:26:1a:ab:1a:3d:ae:eb:ae:97:
                    cd:f1:45:b0:37:11:f8:f4:ec:f1:e9:45:0f:a6:97:
                    b5:f8:7d:92:97:4b:2d:27:31:45:cc:72:78:5a:9c:
                    f0:48:19:5d:0f:d7:28:cf:80:0e:8b:c8:cb:2d:00:
                    58:fd:30:39:da:b0:46:43:db:dc:c5:ea:06:7b:08:
                    ea:af:3d:6a:2f:05:02:4a:39:88:6e:7f:0d:06:df:
                    c1:66:ab:ac:68:37:1f:f7:a1:14:93:c2:87:fb:8b:
                    20:2e:b7:ad:35:58:3e:0f:2b:ac:8b:af:09:b0:32:
                    85:f0:24:96:97:3a:d5:f0:d4:fc:42:1a:7c:39:90:
                    ed:44:60:1a:f5:31:fd:27:1d:fc:8b:eb:12:fe:ee:
                    0b:a8:f3:f9:97:92:02:7d:e3:5d:5b:25:d0:a9:e8:
                    0f:0f:05:0e:f4:a9:6f:99:01:c5:0d:27:06:f1:c5:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:90:94:69:35:19:32:9E:84:EF:A5:7F:44:CD:63:F6:8D:3A:5C:44
            X509v3 Authority Key Identifier:
                keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:eb:f8:98:4f:af:9b:97:67:b7:01:39:56:32:ad:13:12:
         ec:75:94:df:ff:fd:21:a8:71:cd:3a:f4:25:6e:9e:ec:7c:32:
         f5:2d:39:ea:37:17:fc:16:15:cc:ed:3d:a2:af:be:85:53:8c:
         4c:6b:56:75:2b:47:26:c6:f2:8c:63:2b:77:e0:dc:d4:e3:c9:
         4e:85:43:23:b7:73:41:20:44:99:0c:0a:6d:17:33:2d:3f:21:
         8b:a9:d7:11:0c:8e:3d:63:d7:fa:b2:65:16:1a:7b:c9:d6:0b:
         b8:0e:88:9a:62:be:bc:de:e3:e2:62:32:12:b8:64:27:9f:62:
         92:15:a6:74:53:32:78:80:4d:29:50:6b:91:ad:f3:f8:76:db:
         25:c0:1a:a4:9e:79:a9:4b:eb:15:c5:10:ab:df:4e:ac:c8:35:
         ec:e1:69:cb:89:d1:88:45:74:ef:f8:5e:77:32:12:df:07:86:
         70:fa:75:46:81:da:0d:5f:c1:f0:bf:c8:ef:09:f1:b3:86:30:
         d5:55:c2:b4:b9:9d:24:6a:0d:cf:ed:e0:82:6b:4e:67:82:f2:
         d9:3f:71:33:d4:b5:69:6b:b0:5f:11:ba:36:27:c7:10:5c:c5:
         40:87:75:7d:e5:01:21:4e:18:16:bb:9e:bc:86:2c:01:4e:38:
         86:87:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:43:08 2026 by rpki-client