Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          OipGJJrbcx/8HNXsTepoGGQHJD3HY4R0xcx0LsaNEDs=
Subject key identifier:   3F:C4:0B:A6:F6:71:F9:21:86:A7:C8:9F:06:73:F0:68:B2:0E:5E:B6
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       019F11F7FB6B2B406BCCB9E748E8479942C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          12F9
Signing time:             Mon 29 Jun 2026 06:01:32 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:32 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:32 +0000
Files and hashes:         1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
                          2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: vuGdPNnmZsbwkO4+VjU5Q5Mm6trm1FWhyMzWnrCgSEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f7:fb:6b:2b:40:6b:cc:b9:e7:48:e8:47:99:42:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Jun 29 06:01:32 2026 GMT
            Not After : Jun 30 06:01:32 2026 GMT
        Subject: CN=3fc40ba6f671f92186a7c89f0673f068b20e5eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:21:ea:af:33:95:ed:1f:5e:cf:92:c3:2c:d4:
                    58:4b:a0:74:46:51:67:d8:4b:bb:d6:64:08:a9:12:
                    81:ec:f4:59:c9:c5:82:8d:4e:2d:c0:74:dc:d2:14:
                    5e:bc:20:d5:10:e0:e3:97:99:6d:a3:e5:d4:24:fe:
                    c5:aa:30:0f:36:76:21:70:66:30:36:27:46:7f:7b:
                    1a:92:6f:7e:05:7f:eb:75:4c:5d:78:c2:59:1c:92:
                    5e:81:14:45:19:23:5c:c3:ff:24:e1:76:21:38:e7:
                    88:f6:54:c4:44:23:29:90:4f:37:d6:33:63:73:9a:
                    ca:02:d3:86:a1:b5:aa:63:c8:9b:db:69:46:c9:86:
                    78:14:72:c3:b4:55:9a:13:18:14:e3:28:8b:a3:94:
                    c0:56:73:cb:2d:b7:7a:28:72:3e:08:28:7b:63:db:
                    96:55:8c:e6:b5:09:35:43:db:de:e2:66:c2:62:55:
                    29:1e:9a:f0:b7:32:0d:9b:4b:9c:82:91:c2:e3:20:
                    31:7d:58:52:25:5c:3a:08:7e:7d:36:aa:b0:1b:5e:
                    5c:f4:80:d2:9a:26:fa:f4:10:86:a0:11:17:7d:66:
                    3c:bb:5e:0d:67:a8:e7:8b:fe:70:db:a5:30:ef:c0:
                    96:e4:88:89:89:d5:3e:f0:8b:6c:95:20:99:2c:fb:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:0B:A6:F6:71:F9:21:86:A7:C8:9F:06:73:F0:68:B2:0E:5E:B6
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1a:41:e3:cd:01:85:f1:f6:c9:01:39:8a:e2:ac:1b:5d:b0:
         f1:2b:dd:ee:16:9e:d4:6f:f2:c0:6c:29:bb:cf:e2:f8:bc:ff:
         07:8f:76:6b:a2:67:e9:cd:11:ab:17:7b:ce:8c:ce:f0:11:36:
         1d:f7:0b:fb:e7:90:ca:2e:52:99:68:8e:3b:45:45:ab:6b:9c:
         78:12:76:d9:51:68:91:55:f3:e4:d9:e2:65:91:d9:66:7d:0c:
         eb:05:2f:0a:71:fc:4b:eb:d3:54:56:17:49:aa:da:cb:84:d0:
         45:c2:79:c7:29:a6:55:06:5b:3b:e3:e6:99:3d:6b:38:bd:09:
         63:d6:00:6d:46:a0:7c:b0:14:2f:1f:66:9f:c6:a7:43:b4:e2:
         05:94:cc:49:43:e2:4e:6c:64:59:c5:75:a1:36:9a:5d:4a:99:
         2c:46:3f:36:8f:74:b1:e2:9e:9d:1f:8a:7c:94:d2:d6:ce:71:
         98:d9:6a:93:06:d9:4d:97:41:bb:c4:2c:57:83:78:26:08:25:
         49:3f:87:59:5c:d1:53:2b:2b:ed:0c:74:67:e5:db:21:9d:1d:
         eb:2d:33:d7:0f:b1:58:f5:b6:dd:70:08:1b:f9:e1:1f:88:3c:
         cd:4d:f1:44:5c:0a:66:17:f4:48:be:23:29:7f:21:ad:4f:e2:
         a9:4f:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:02 2026 by rpki-client