Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File:                     9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier:          6RllgWGlF3mxsBpdUJHYoux43lQtcGkBArJyGaC0Oms=
Subject key identifier:   CC:2D:F7:56:A9:D4:B3:AC:83:5A:0A:DD:5F:90:99:AA:32:41:70:F6
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer:       /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial:       01A0016F7F3D9396C87E313C1BB065F02E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number:          11EE
Signing time:             Fri 14 Aug 2026 18:01:19 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:19 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:19 +0000
Files and hashes:         1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: 7h8N/0OUsKFYd9fWcIuv79EQN91KrFJZGUA+EaGpGX0=)
                          2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:7f:3d:93:96:c8:7e:31:3c:1b:b0:65:f0:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
        Validity
            Not Before: Aug 14 18:01:19 2026 GMT
            Not After : Aug 15 18:01:19 2026 GMT
        Subject: CN=cc2df756a9d4b3ac835a0add5f9099aa324170f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:f3:e8:5e:27:84:60:9d:27:c2:d3:61:6c:
                    54:c4:b0:28:eb:1a:e5:12:75:8d:2a:3d:aa:3b:6d:
                    0f:8d:af:b1:2b:b8:e1:8e:e1:44:82:fd:5b:dd:bd:
                    4e:07:d2:78:ce:5d:b3:8c:f8:6f:b0:b2:13:0a:41:
                    3b:f1:e2:0f:7b:18:fb:4d:af:ab:06:17:83:bc:54:
                    4a:35:1c:0c:d0:a9:a7:11:96:87:d9:7d:79:d0:56:
                    55:6e:75:99:20:6d:33:24:64:21:c3:6d:a6:51:14:
                    85:52:05:30:fd:f1:52:01:44:8a:c8:cc:71:c1:36:
                    e2:20:29:8d:1f:9f:84:c1:95:cd:65:36:b4:88:c4:
                    af:75:01:ea:01:91:e2:d2:44:dd:8c:76:09:b3:e9:
                    89:5b:89:6c:f7:76:cf:37:2c:7a:ab:b1:93:0a:91:
                    c8:86:9e:dd:9d:43:45:55:8b:51:90:a5:17:f2:b6:
                    1f:71:af:eb:82:e4:31:db:91:d4:c1:74:ab:95:d3:
                    32:8f:49:eb:f4:12:c7:9c:92:7f:31:0a:d7:e9:69:
                    b5:80:a0:cd:45:cd:d0:01:a5:c0:d5:88:36:46:15:
                    03:7d:6a:4a:82:0e:07:55:c3:20:94:c9:9f:62:02:
                    80:22:71:b1:4a:b8:73:ee:1a:06:db:48:0e:bb:90:
                    b4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2D:F7:56:A9:D4:B3:AC:83:5A:0A:DD:5F:90:99:AA:32:41:70:F6
            X509v3 Authority Key Identifier:
                keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:02:eb:06:41:b6:9b:ff:b1:da:3b:ad:e9:70:a3:29:0b:7a:
         20:44:00:59:5a:a2:cf:8f:49:73:61:21:b7:12:91:3a:45:1d:
         59:33:40:58:c6:cd:ec:11:86:25:6f:f9:d8:42:30:16:8e:c6:
         55:e1:d9:fe:f8:fa:f6:eb:2d:83:00:03:4f:21:28:ea:4f:8b:
         49:59:23:6a:22:73:23:87:aa:1a:79:89:c3:39:76:89:c5:26:
         eb:55:3a:9c:1f:ea:b0:14:ec:11:58:42:18:f0:de:0b:a3:81:
         2e:1e:be:ef:7c:29:55:ef:59:46:10:42:9c:ab:34:78:1d:a4:
         e5:41:9a:5b:45:58:b4:b3:d5:14:7b:1c:f3:f2:88:c8:e4:ee:
         eb:ed:8d:70:12:4e:0a:97:ca:b5:f8:e0:64:de:9f:6e:58:93:
         ad:a7:59:95:6d:d1:dd:76:4b:cf:18:89:53:e5:33:4f:a7:7d:
         27:0c:ae:d9:8e:20:ce:8d:c9:89:03:f3:89:96:19:3c:0e:d1:
         18:5b:bf:ad:87:2e:25:f0:c9:c0:47:14:33:a8:8d:b1:c8:20:
         92:3f:8f:44:76:c4:88:7d:68:bf:9e:e6:92:de:2b:fb:1f:b4:
         9d:c7:fc:1c:6f:ba:c3:4f:3b:2d:05:0e:02:e3:d4:ad:43:a0:
         6d:72:73:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:31 2026 by rpki-client