Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File:                     m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier:          4DmAlkICCDiUpYUJrqqbsNvJwF6Koe5P5Ux7JgTOYZU=
Subject key identifier:   3B:A0:AB:BB:8A:CB:C4:C7:02:6F:E8:5F:77:1A:AA:E7:3A:D5:56:8D
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer:       /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial:       019EB98F79AECCBA53175B73C64BFD0E59A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number:          EC
Signing time:             Fri 12 Jun 2026 02:00:47 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:47 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:47 +0000
Files and hashes:         1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: PLfvcKPvi4NWB4ZqoAwqI2j72lkOv7et53r1GlC2fD4=)
                          2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:79:ae:cc:ba:53:17:5b:73:c6:4b:fd:0e:59:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
        Validity
            Not Before: Jun 12 02:00:47 2026 GMT
            Not After : Jun 13 02:00:47 2026 GMT
        Subject: CN=3ba0abbb8acbc4c7026fe85f771aaae73ad5568d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cf:aa:30:d4:2e:30:5d:24:ac:27:6c:04:cc:
                    7a:13:6a:5c:55:89:3b:7b:f4:94:63:4a:46:38:57:
                    e4:c8:4f:ec:ed:b2:04:03:a9:4d:03:85:fa:62:56:
                    42:5c:14:29:29:c0:4f:bf:1e:4a:1e:71:ae:3d:32:
                    c9:7e:8d:57:bb:df:c6:37:18:a2:74:87:51:fc:52:
                    b6:a4:ef:bd:89:bc:61:a8:b4:8c:43:9d:68:0d:4e:
                    53:e0:9d:12:1c:22:ea:de:19:3c:33:da:eb:9f:af:
                    a3:80:4e:d1:93:1b:59:89:53:3c:15:16:af:14:fb:
                    5d:da:6d:95:f9:4d:92:34:d5:42:f0:02:79:c7:ed:
                    84:fb:f0:5f:7a:c9:02:86:cb:ad:23:90:db:5f:8e:
                    b0:17:5f:7b:df:a1:a0:2f:ea:4e:50:aa:32:8d:d1:
                    07:00:85:28:e2:c2:d5:dd:01:d1:df:c7:26:f7:7b:
                    cb:18:41:39:71:bd:05:58:5e:a2:2f:82:18:1d:1b:
                    9e:91:4b:54:f8:98:9f:9e:b2:6c:7d:94:b2:04:3e:
                    68:c9:f7:bb:8d:c9:3b:fa:7e:81:fe:f4:8e:db:2d:
                    22:8e:7a:f0:a2:f1:73:3d:b9:72:60:83:18:4a:48:
                    8f:de:51:75:ed:b9:fd:7b:b4:91:a5:3c:4b:82:10:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A0:AB:BB:8A:CB:C4:C7:02:6F:E8:5F:77:1A:AA:E7:3A:D5:56:8D
            X509v3 Authority Key Identifier:
                keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:15:cf:b5:6f:75:f8:ac:6f:d2:41:cd:21:8e:58:b0:f1:9c:
         35:90:aa:08:80:32:46:e8:25:77:92:77:29:28:89:eb:da:fd:
         c3:18:7d:85:6e:76:f9:2c:06:5d:c9:7c:6a:6d:50:82:17:cb:
         91:bb:24:96:73:bc:d6:43:86:d2:30:af:36:a5:1d:77:c6:eb:
         e0:91:33:54:ae:d6:f5:e8:a2:fd:a8:37:04:cb:0e:3c:c8:10:
         1c:af:e0:d6:83:93:b5:bc:8c:45:9b:4f:15:ee:20:1d:33:3d:
         db:7b:f5:b2:ea:29:74:de:e2:58:e2:eb:d4:b0:f2:ce:c4:a0:
         94:55:f2:a1:c6:e6:14:85:a2:1e:58:f4:45:1a:f2:10:d2:01:
         4c:06:56:9e:ee:ae:17:d8:07:6b:b4:f8:20:34:e9:ac:c7:de:
         7a:c4:cb:fb:25:fb:d9:11:bc:73:9f:a8:b6:80:b3:7b:ae:d3:
         67:ce:08:4b:96:d8:ed:d3:4c:7e:56:78:d6:eb:60:65:f2:23:
         57:e0:6c:99:84:11:0d:42:04:40:9b:a6:12:7f:61:68:60:4c:
         71:20:8d:47:0c:31:f8:68:a2:60:5c:57:1d:22:35:03:dc:fa:
         13:ea:21:d1:73:b7:90:4d:0b:cd:1f:73:a0:46:69:e6:a5:3d:
         18:d6:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:34 2026 by rpki-client