Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File:                     9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier:          oyub0PHjmxc6hmySIt9w7hnzPAoXwA1m7ITfBZEHf8Y=
Subject key identifier:   D7:41:F5:8D:5C:B5:FB:0F:02:B1:E8:29:78:5E:91:16:D5:73:05:20
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer:       /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial:       019E3072D58909CD5E892705F2E3161BCADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number:          11F7
Signing time:             Sat 16 May 2026 11:01:32 +0000
Manifest this update:     Sat 16 May 2026 11:01:32 +0000
Manifest next update:     Sun 17 May 2026 11:01:32 +0000
Files and hashes:         1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
                          2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: EXYTuUG4pcybgrojdRFSUPbkv+udTmkw+cgenDMT8yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:d5:89:09:cd:5e:89:27:05:f2:e3:16:1b:ca:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
        Validity
            Not Before: May 16 11:01:32 2026 GMT
            Not After : May 17 11:01:32 2026 GMT
        Subject: CN=d741f58d5cb5fb0f02b1e829785e9116d5730520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:37:e3:29:5b:1b:b6:d6:4e:2c:17:15:05:
                    68:67:31:0e:96:93:c0:7c:ae:dd:c6:c1:80:2a:f7:
                    5b:26:ea:c3:da:fc:4f:fc:a1:07:bf:c1:be:19:41:
                    3e:8c:3c:b2:a3:e1:4f:31:ae:2b:97:30:31:e9:17:
                    29:02:d7:dc:96:64:4f:a1:3a:d9:45:9f:c2:e3:3d:
                    a5:9e:15:cf:2e:8f:1f:ec:05:a0:96:76:a3:15:1f:
                    a3:78:bc:4b:00:05:ca:5b:46:96:c7:c1:51:99:57:
                    56:1b:2a:30:a7:8b:66:43:1c:85:80:87:2f:64:49:
                    ed:d9:1a:69:e4:0f:9d:98:34:2c:ae:0f:7e:99:9f:
                    aa:ac:11:11:f8:03:64:c9:42:d1:7d:0b:cd:18:42:
                    bc:16:d7:eb:a2:05:fa:a0:10:27:59:28:78:63:fa:
                    a0:38:bd:8b:15:7c:b4:fd:37:8e:2d:a4:0c:15:cf:
                    f7:79:3e:8a:0b:b4:0e:23:43:99:8e:51:56:bb:59:
                    75:a8:3a:9f:81:c6:49:cd:e8:37:33:df:e3:38:68:
                    0b:0b:74:b2:15:88:d8:7b:4a:5b:2a:0e:b8:fd:a9:
                    dd:4f:6b:ff:4c:b5:be:5a:a6:4e:51:99:16:a1:7b:
                    23:a6:32:0a:f2:b5:79:09:1f:e8:da:46:b3:51:71:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:41:F5:8D:5C:B5:FB:0F:02:B1:E8:29:78:5E:91:16:D5:73:05:20
            X509v3 Authority Key Identifier:
                keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:58:b7:1c:8b:ee:71:22:f5:ec:cf:6f:89:24:79:8c:b8:65:
         fa:47:01:f7:e1:be:18:21:86:e3:00:f6:7f:96:a4:32:30:82:
         39:0f:20:d8:f5:ea:e8:a3:f9:cc:91:a3:2b:41:f5:a2:0f:c7:
         62:01:cc:65:fc:6a:be:1f:f7:52:2b:92:ff:f3:37:93:eb:df:
         85:4a:58:84:21:8d:ad:2d:d6:0c:90:a4:93:b7:fe:4a:37:15:
         0c:aa:3b:a7:7d:a4:32:37:e7:86:6a:91:73:ec:19:e4:28:60:
         24:a9:60:0c:3d:f2:90:97:2e:e7:e3:17:fb:18:b3:b0:57:80:
         fb:d8:f0:42:37:96:fb:d1:1d:1a:88:67:c9:f3:0c:e2:1c:b5:
         56:49:e8:8d:e1:90:26:62:ce:0b:6d:bc:95:15:8c:72:fe:59:
         40:88:62:e9:ff:19:dc:64:0c:29:5e:15:88:3d:57:89:6a:3f:
         49:16:89:a6:e7:9b:e4:b0:62:c6:1b:e3:56:fc:bc:66:38:33:
         b7:dc:c1:ad:49:fe:d8:e6:cb:68:19:21:d5:49:49:2c:0d:c8:
         56:9e:33:c1:3d:93:e4:6b:38:1d:ad:af:27:6b:1c:73:c0:59:
         a2:b7:e3:a9:d0:d7:ee:96:52:df:0e:13:a2:88:2d:60:85:2d:
         f3:f9:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:29 2026 by rpki-client