Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File:                     9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier:          Hzi4WnNMe7fE+xI592K7VUUWFPolHUGnGlZjHY2sDFY=
Subject key identifier:   48:F8:24:5D:F8:20:BF:B8:1C:80:02:62:24:EC:B0:33:76:C2:85:B2
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       019F13411B05A1A526087655486002E80F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number:          198D
Signing time:             Mon 29 Jun 2026 12:01:01 +0000
Manifest this update:     Mon 29 Jun 2026 12:01:01 +0000
Manifest next update:     Tue 30 Jun 2026 12:01:01 +0000
Files and hashes:         1: 1JViNUEn6ga0QROJtxU4AEvMLww.roa (hash: jcckW1pekqq2a3ZEiyHcZr/yXCAySkb6WGxv2ggL9FI=)
                          2: 5c-tVeqgckJuAp6JbI43ZWb85Ik.roa (hash: cjN5erR2DEEsrEuY7GbmW+pLwmDRQL+9OgSiLHhDtIc=)
                          3: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: 8hAEQ3CKn7lJXkVAOf04bLtKxkg9q0WbiV6xVp0e9ws=)
                          4: SiBbiHVr7AC0u90Fwok04bc86Is.roa (hash: IBa2+mQ/TjNwKvca48jtPUnqiSXDlYjx7SDm3vYP5Ys=)
                          5: YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa (hash: m/hv4iobL1Tq4Hnl7IKJyfEevy78U6kNT70maANZhgM=)
                          6: i_WQhoivfiPNt_r8E0ASaD2knr0.roa (hash: ZsmBZD3QOznmcRlV4BtsmhxZ3ocoJk7WQB1P/qL5Ad0=)
                          7: zRYCcQ03Zo7Mtjwf5o0jfcWViDY.roa (hash: hObMfSwMh57HZlCx8OTlbluNMpET5Cy14GAtqwnhGDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:41:1b:05:a1:a5:26:08:76:55:48:60:02:e8:0f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Jun 29 12:01:01 2026 GMT
            Not After : Jun 30 12:01:01 2026 GMT
        Subject: CN=48f8245df820bfb81c80026224ecb03376c285b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:f7:ad:83:ed:4b:16:45:27:70:02:58:ca:
                    28:a9:11:dd:a3:20:dc:dd:db:82:81:d4:eb:eb:fa:
                    fe:87:04:2d:a0:01:d7:e1:03:c4:59:2a:f8:f7:63:
                    5d:cd:0c:42:5b:b6:57:1a:69:b0:e1:56:4a:a0:ef:
                    fe:a2:46:1e:54:f8:9f:ca:cd:03:46:53:32:ce:ce:
                    5f:93:61:a6:9d:ec:2f:fe:c6:1e:72:b4:8b:ae:34:
                    78:63:13:2a:bd:cc:a1:b4:db:72:2d:da:1b:84:65:
                    0e:fc:4b:bb:6b:39:f4:e5:55:b7:7d:f9:38:7c:c9:
                    7b:7b:cf:3a:c9:6d:25:63:48:23:a7:ab:49:e2:86:
                    fd:b4:e1:5f:90:38:68:66:ba:de:81:9a:dd:86:36:
                    40:40:11:58:be:81:07:59:92:3a:4e:44:ce:0f:b8:
                    87:45:3f:b3:c3:0c:59:d8:20:d8:51:15:ca:84:71:
                    c4:4b:7f:de:d5:73:3d:d7:94:3b:6f:82:3e:ed:fe:
                    99:3c:09:82:07:47:b0:ff:4f:97:f6:18:91:6f:90:
                    f4:ad:ae:f3:ad:6f:b4:ad:0a:8f:47:f5:10:20:d7:
                    7e:2c:57:7a:b9:ba:47:41:2e:9e:2c:68:fa:3e:85:
                    e0:2c:47:6a:a9:71:d9:1c:27:24:8f:9e:be:ec:bf:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:24:5D:F8:20:BF:B8:1C:80:02:62:24:EC:B0:33:76:C2:85:B2
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:62:89:02:10:76:5b:ed:72:01:a1:4d:15:ba:37:85:a5:87:
         02:c8:02:7d:b8:0b:a4:f9:46:80:70:58:da:cd:ce:98:bf:48:
         23:0e:81:57:cb:0f:45:6e:14:bc:d8:39:2b:d0:72:a7:31:e7:
         7d:a9:24:72:42:a4:cd:fe:e9:d3:a4:fe:5e:93:64:fd:46:5a:
         90:c5:9c:58:e4:1e:c4:7f:db:fa:b2:16:d4:02:87:54:63:8f:
         d0:24:d3:8e:f1:d0:f4:0e:87:cf:94:a1:8e:c8:2d:6f:cf:49:
         3b:49:8c:06:8a:b9:46:18:c7:b6:d6:3e:cd:b3:15:5d:e2:63:
         60:84:2b:60:5e:6b:eb:84:5d:b5:f1:12:75:cb:20:7d:21:45:
         8f:6f:cc:32:90:00:1d:62:63:71:4c:e6:89:59:70:f3:e8:a1:
         e0:46:c9:a4:52:9a:f3:bc:f0:66:63:98:8e:74:19:88:50:27:
         a5:7c:c0:a7:75:42:4f:a6:e3:62:c0:12:4f:a1:05:71:53:8c:
         7b:8e:36:93:e8:c7:52:da:6f:7f:7d:82:e1:c2:ac:74:00:9f:
         96:da:40:b4:37:ec:68:ac:17:f4:cb:41:57:55:31:e2:bc:7d:
         8c:68:7d:41:52:d7:1d:cb:5a:3d:15:7c:f8:26:5e:c1:39:fb:
         25:a5:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:45 2026 by rpki-client