Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          KQslX0pLeS733fxbc2wG3oDhHKe8NSC4e+xcArpjEqs=
Subject key identifier:   D5:34:93:6F:BA:42:D4:D5:42:6E:FB:08:D0:E6:91:13:99:94:86:4A
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       019E9B84EA00E05D864192EE8BE62D152A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          1948
Signing time:             Sat 06 Jun 2026 06:00:39 +0000
Manifest this update:     Sat 06 Jun 2026 06:00:39 +0000
Manifest next update:     Sun 07 Jun 2026 06:00:39 +0000
Files and hashes:         1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
                          2: 6FH6tzQ-OGL1olRZmGsLavyetEI.roa (hash: t7CC5E4Cq4qAeFI/xEX8HmFf3pMyY/Orv1k1m68NVmM=)
                          3: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: zBG5DmHqZK+3i1Nik/25R4y3aiPZHglj7uRD7PJgqLY=)
                          4: zt1e9hXqnKC7GTDcsl5TmahbR14.roa (hash: cMjId05GIC2DoYaxGvqZ9tQQexKxYbYtbXXHMb77nW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:84:ea:00:e0:5d:86:41:92:ee:8b:e6:2d:15:2a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Jun  6 06:00:39 2026 GMT
            Not After : Jun  7 06:00:39 2026 GMT
        Subject: CN=d534936fba42d4d5426efb08d0e691139994864a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:48:74:37:9f:ea:81:31:65:e2:3f:e8:fa:
                    16:f8:37:24:51:80:26:66:76:bb:c9:f4:04:90:73:
                    12:0b:b8:ab:b9:31:b2:99:e1:29:2c:ea:e1:ad:41:
                    85:af:5e:07:f8:97:60:dc:2b:55:3c:f4:35:08:8c:
                    30:39:f2:fe:97:5c:ad:97:56:4f:eb:03:d1:d5:5b:
                    90:34:8d:63:a6:4e:12:aa:d4:80:44:1f:7f:6f:db:
                    ec:39:64:b6:4b:d7:c2:b3:0d:44:0b:64:de:4f:32:
                    be:3c:a9:61:a9:a4:46:a7:10:de:a7:b9:04:e0:35:
                    88:e7:77:ec:d0:fa:89:3a:36:01:d1:fa:ab:14:65:
                    7d:2a:0d:91:69:66:a1:70:11:8b:9c:09:ad:ab:f0:
                    e0:f1:e9:57:c2:33:6b:da:28:68:c0:ca:df:3a:e3:
                    de:38:72:49:20:cf:9a:38:22:ce:0b:83:da:73:cc:
                    d6:17:38:cc:81:b2:e3:e2:e6:a3:27:b8:74:6c:48:
                    73:9e:dc:63:ca:2d:32:43:dc:a7:6a:13:71:44:80:
                    cd:59:f8:3d:fb:18:6b:27:6c:99:bc:15:8b:c8:54:
                    33:71:6f:68:89:54:a0:34:8e:f3:ae:3d:3c:8f:86:
                    cd:23:20:8f:a6:23:8d:1d:45:a0:ab:27:ea:df:c5:
                    d9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:34:93:6F:BA:42:D4:D5:42:6E:FB:08:D0:E6:91:13:99:94:86:4A
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f2:59:88:5d:c6:f9:8c:81:a5:18:29:e1:77:0f:4d:5b:76:
         ef:39:8f:22:e4:c1:a2:a3:6b:51:50:49:f1:e6:6d:e2:e5:29:
         74:58:cd:cd:b7:44:59:9b:bc:66:45:e2:76:f2:ea:68:65:96:
         ba:f6:5f:ff:08:96:ce:cb:cd:ba:d5:20:09:5e:0d:00:d1:86:
         5e:ce:09:bb:4b:db:b2:df:5d:20:42:dd:ed:0c:ce:ef:79:52:
         a7:82:b0:eb:be:d3:75:2b:de:a9:2e:24:4b:2e:6c:45:e1:f0:
         bd:08:da:78:de:af:31:29:56:aa:d3:25:7c:45:d7:cf:11:cf:
         19:5b:30:95:f3:dd:68:b0:49:74:a4:24:92:b6:04:4f:ef:73:
         9b:9a:fa:09:a4:09:b6:7a:ea:0b:16:d8:e4:02:0a:14:7e:dc:
         d4:32:f6:df:8a:58:60:9e:2b:43:f5:2b:75:33:04:3d:7c:30:
         5b:98:a8:64:74:9b:cf:16:bc:86:0e:5c:bb:e5:23:24:b7:59:
         55:bd:63:78:04:08:77:99:2e:f5:b8:c1:63:19:fe:31:e9:d7:
         fe:7f:bf:9d:11:4b:e2:90:23:68:b5:2c:89:0a:29:54:7f:a1:
         62:c4:40:d5:a4:05:b5:47:a0:e1:1e:de:e8:02:0d:03:41:82:
         91:53:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:51:48 2026 by rpki-client