Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          wtY2CqWe/mRDv/9uc8po5cXMI8WTjBtYrn4mORxqrp4=
Subject key identifier:   8F:9B:E5:03:90:94:D8:FE:95:20:CA:88:FC:6B:29:D5:B4:71:94:F8
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       019F190C6412D5F74F25D1E789C8FAC64367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          14DD
Signing time:             Tue 30 Jun 2026 15:01:10 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:10 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:10 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: MpnkSXUHu0eUm63tcB2wHkQz8rrhk76Q2ucMLULXtIw=)
                          2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:64:12:d5:f7:4f:25:d1:e7:89:c8:fa:c6:43:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: Jun 30 15:01:10 2026 GMT
            Not After : Jul  1 15:01:10 2026 GMT
        Subject: CN=8f9be5039094d8fe9520ca88fc6b29d5b47194f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:72:75:cd:71:54:e1:7e:69:5d:9e:3d:f1:
                    84:51:a2:34:55:ab:27:1f:f4:d4:85:3a:c1:4b:dd:
                    bb:46:9d:43:03:f5:ed:1b:f1:91:8d:a2:ac:bc:fa:
                    c5:66:f6:78:e7:84:28:53:4c:d2:7c:fe:51:3c:93:
                    3d:90:d1:c3:86:a3:30:ec:65:74:ae:88:82:3d:da:
                    73:3b:68:d4:22:a8:08:7c:49:af:5b:e9:21:37:af:
                    16:17:88:a5:85:8a:61:59:bf:67:bd:e1:8a:60:9d:
                    54:d6:db:ff:22:1b:cf:2a:b0:8f:a3:25:0f:15:30:
                    2c:41:0e:ff:a8:0a:64:67:02:46:92:a5:d7:85:30:
                    05:50:80:ab:3e:ff:21:1d:f5:47:e3:94:8a:e8:e1:
                    23:67:51:ac:e1:34:d2:b9:c9:da:e2:74:1c:45:62:
                    1d:75:65:67:f2:be:06:35:8c:58:07:50:d1:f7:82:
                    83:03:0e:96:16:3e:10:a8:af:17:ed:ca:7f:6c:30:
                    b5:9d:2f:0c:66:26:d6:b3:13:2c:75:21:b2:fd:f0:
                    92:37:e6:8a:22:ac:00:7a:47:3c:2e:b5:e7:4d:b2:
                    f6:5f:65:b0:65:84:3e:e1:8a:3b:99:c9:8b:c7:b0:
                    bc:5c:d7:d4:76:91:e7:60:9c:81:f8:9d:1f:38:fa:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9B:E5:03:90:94:D8:FE:95:20:CA:88:FC:6B:29:D5:B4:71:94:F8
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f0:6a:0c:fa:10:eb:47:13:64:8d:0f:da:65:7e:b5:f5:e5:
         ec:51:b3:2f:79:25:21:4a:c2:5d:f9:37:09:94:a5:36:51:05:
         ee:9f:23:93:e0:ae:65:c8:93:39:f7:fe:1c:27:78:01:e1:fd:
         cf:e1:6d:43:ce:f7:07:76:2e:73:be:b5:66:05:cb:59:d6:e0:
         ff:82:0c:bd:47:1e:95:49:e2:91:2c:79:1e:14:82:fe:6c:d8:
         a9:17:1a:bf:6b:68:4a:c5:54:d9:f7:73:d1:74:05:16:1d:48:
         22:b8:72:f2:7c:2c:38:f7:fa:a2:05:3f:c6:ed:22:22:eb:96:
         25:01:4b:70:e5:ad:87:d0:e6:74:2f:f8:58:90:68:c9:d7:ef:
         5f:a1:90:df:ab:98:a1:80:ad:ff:8c:a5:d6:19:bb:53:69:df:
         5d:53:20:78:89:45:47:75:80:b0:06:e6:e6:ee:a1:a8:ac:ba:
         e6:7e:db:a8:7a:51:ca:bb:32:8c:ef:d4:cf:54:cb:21:7f:c9:
         b6:33:c7:a0:35:c5:21:94:da:57:ad:d3:9e:51:e4:73:63:a1:
         b4:94:b8:4d:5a:9a:71:14:32:de:4b:e9:e6:ae:ad:b3:f6:56:
         7f:88:b0:8b:39:d8:e3:31:32:e5:d4:11:6e:e6:7c:88:8b:bf:
         49:e3:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:52 2026 by rpki-client