Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File:                     9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier:          0v5ptU4H9QcSxMQY+B9yWvDzjsp39PHD/1XswDg1n4k=
Subject key identifier:   30:6C:59:13:C8:4A:1D:B9:AA:EA:85:78:AE:28:6A:88:FC:8E:0A:F0
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer:       /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial:       019F183085C37DA0B9DBE57E07DEAA7DB7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number:          126F
Signing time:             Tue 30 Jun 2026 11:01:00 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:00 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:00 +0000
Files and hashes:         1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
                          2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: zmrUx1wzeZgpp6SZOKZ29BjnSb4sCJ/5o5PMX/fmzJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:85:c3:7d:a0:b9:db:e5:7e:07:de:aa:7d:b7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
        Validity
            Not Before: Jun 30 11:01:00 2026 GMT
            Not After : Jul  1 11:01:00 2026 GMT
        Subject: CN=306c5913c84a1db9aaea8578ae286a88fc8e0af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:4d:21:01:b8:b1:cc:b1:cd:ee:28:50:61:
                    b3:f9:f7:13:b9:e8:0f:8d:a8:19:e3:67:b2:23:99:
                    da:75:1c:de:75:16:c3:8a:c2:a3:47:09:e9:1e:64:
                    45:59:c4:c7:bf:8c:60:6a:a8:de:30:26:d9:2b:ad:
                    5c:36:54:fa:77:c9:0a:08:96:d1:a7:3d:90:ee:a2:
                    90:dc:dc:1e:74:3d:1d:df:e4:cd:0d:0c:85:8e:f0:
                    d0:9e:c8:c5:e1:fc:b9:df:90:db:21:ea:b3:e6:5a:
                    ce:21:b6:12:e8:fc:36:19:2e:35:8f:c8:22:93:1b:
                    d7:66:56:32:1a:86:52:9b:42:58:78:a0:30:03:93:
                    28:7f:84:1c:9b:bc:1f:43:7f:5c:a5:51:ae:04:33:
                    8a:e6:9d:fa:63:b4:34:c2:b8:dc:b6:84:4c:16:62:
                    20:c6:37:37:84:60:ed:e2:55:de:3e:96:20:b1:33:
                    c4:f1:5f:ea:f7:54:bd:56:8d:a2:3f:18:1c:a8:a2:
                    1a:37:4d:e6:3f:ac:54:09:e2:33:90:01:28:9c:5b:
                    18:89:bd:f2:34:a5:ab:0b:80:6c:13:c2:7b:fd:9e:
                    d7:98:3f:99:3a:6f:67:7b:c2:46:b5:ed:86:71:12:
                    2c:34:62:53:66:8d:3d:bf:77:5d:9e:c7:65:df:6a:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6C:59:13:C8:4A:1D:B9:AA:EA:85:78:AE:28:6A:88:FC:8E:0A:F0
            X509v3 Authority Key Identifier:
                keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8b:8e:3a:29:bb:72:24:2f:09:c5:d8:bb:25:fc:45:30:f2:
         0d:5e:a5:89:6a:a0:0c:c5:5b:86:bf:3d:0e:51:e0:b2:91:4c:
         04:71:ba:00:76:52:45:36:01:de:af:6c:24:bb:39:15:aa:76:
         45:9d:e0:a8:04:7f:1f:d9:14:6c:4b:b5:ef:0f:60:fb:d5:c7:
         88:0d:7c:74:5b:ee:bf:ca:80:31:1c:5b:6e:76:3f:83:a1:42:
         01:96:59:1b:14:0e:a9:b9:f3:71:29:66:40:39:d1:13:95:d0:
         b4:91:39:b6:2c:97:96:86:2a:ec:99:53:96:83:75:06:f1:ab:
         19:59:79:61:4c:04:aa:e4:fd:09:c5:cd:fc:1b:48:86:ee:29:
         20:6c:4d:56:36:ca:c5:55:41:e1:78:b8:fd:74:e4:87:97:b7:
         bc:1b:0b:c8:38:f6:f4:78:86:ec:63:f3:f7:8f:01:66:80:27:
         48:8b:0e:14:d7:2a:f8:03:18:a4:2b:7a:bb:7e:7e:3c:44:70:
         02:64:5d:5c:1f:dc:73:7e:12:8c:6b:25:40:1d:00:32:5d:6c:
         07:e4:fe:89:9d:b5:37:c2:4b:07:73:56:5f:9b:f6:43:05:a6:
         c8:b9:7c:29:ab:68:34:ee:f0:73:a3:22:4b:13:c5:44:a0:c0:
         5b:cf:aa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:17 2026 by rpki-client