Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File:                     H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier:          CrRVcS0KeSyB6w7mq+9+bqsihKZ7+eODQn1s7Fo03SE=
Subject key identifier:   72:89:36:AE:A1:44:20:0F:63:DD:83:32:78:64:F5:6F:69:19:FC:D2
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer:       /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial:       019F141C78C32D07FAE85859F3149B4F94C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number:          1919
Signing time:             Mon 29 Jun 2026 16:00:37 +0000
Manifest this update:     Mon 29 Jun 2026 16:00:37 +0000
Manifest next update:     Tue 30 Jun 2026 16:00:37 +0000
Files and hashes:         1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: 2UMmdRG/jazYuBWulyIoL7BkSxkwDOksY4t3jZzZwVA=)
                          2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:1c:78:c3:2d:07:fa:e8:58:59:f3:14:9b:4f:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
        Validity
            Not Before: Jun 29 16:00:37 2026 GMT
            Not After : Jun 30 16:00:37 2026 GMT
        Subject: CN=728936aea144200f63dd83327864f56f6919fcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:b2:bc:63:9c:78:91:62:35:34:c7:68:54:
                    9e:99:38:44:be:87:3d:de:d4:1e:b3:dc:b4:3e:24:
                    e3:82:a7:fb:5f:6f:dd:76:6b:1f:2f:fe:0c:8b:96:
                    4a:53:99:e2:6a:cc:bd:01:16:0d:a4:4d:01:ed:12:
                    87:f1:ff:ac:f0:57:99:6e:f3:a6:84:2e:5e:ae:58:
                    85:cc:4f:fe:51:17:73:3d:79:4b:71:4c:29:d8:20:
                    db:98:70:be:43:00:ff:e6:b4:4d:3d:d4:59:85:d1:
                    94:5e:e3:62:57:70:ca:1b:86:a6:f7:38:36:db:68:
                    b2:f2:16:ab:7d:ea:2c:00:6a:86:2b:f1:26:0f:bc:
                    4b:ca:ac:31:57:5b:82:f8:24:f3:75:00:55:1b:83:
                    61:e9:c1:ef:8b:5e:b1:66:3c:fd:e7:9f:84:c0:56:
                    e0:2c:98:5e:47:c1:75:6c:95:ad:48:03:32:71:fb:
                    5b:83:7e:2d:26:d3:d3:54:c7:46:51:a7:99:73:57:
                    de:d0:b9:43:fe:1b:bc:77:f3:5a:87:6e:f2:ba:fa:
                    01:19:3c:b7:c5:e7:ac:fe:a3:92:fd:37:f4:76:dc:
                    e8:16:c4:f2:ba:bf:86:e4:08:ee:51:e9:69:43:68:
                    86:26:d0:0f:86:5a:2d:44:89:ce:22:7d:fc:c0:32:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:36:AE:A1:44:20:0F:63:DD:83:32:78:64:F5:6F:69:19:FC:D2
            X509v3 Authority Key Identifier:
                keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:bc:6d:6b:c5:11:6c:9b:c7:d1:b5:07:6e:27:1b:25:61:01:
         96:41:9f:51:cd:81:4b:5c:a1:4f:2e:23:bc:24:3e:5f:e1:d4:
         6e:1d:c4:ee:2d:6c:47:e1:85:91:89:6e:82:dc:6b:e5:88:65:
         44:8d:ae:0d:62:48:88:9b:0c:15:34:b7:e6:e2:5f:d5:05:bc:
         e2:1e:44:86:35:36:c5:53:0b:3b:84:05:22:c2:41:cf:c4:e1:
         3c:f4:84:9d:01:85:9a:db:02:a7:61:2f:68:50:51:29:b1:17:
         5e:5e:e3:64:a2:44:9c:1e:73:49:e4:2e:5e:12:8f:09:ed:29:
         44:cf:32:13:fd:2a:99:38:19:ca:d5:c0:a6:df:e3:04:ec:ca:
         de:4d:de:8c:96:9f:0f:f5:bb:ab:ea:3b:67:0b:0f:88:b4:29:
         26:b6:0d:ee:3f:0c:31:95:2d:5a:b1:6f:1c:20:c3:a4:e4:a1:
         b1:52:ef:15:00:64:d4:a0:b7:57:8e:b2:e3:cb:bc:ca:e9:97:
         df:d1:dc:bc:d5:ca:15:0c:85:de:60:55:e0:f9:4e:e2:ed:db:
         87:d5:15:6a:e1:2d:8b:5a:c1:01:d0:a2:45:04:2b:c7:c9:f9:
         be:1b:24:44:c8:c5:0b:fe:c0:ef:f2:d4:43:71:49:9b:5c:ff:
         7e:c4:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:11:20 2026 by rpki-client