Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File:                     1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier:          p4y9ZSuN5JvJ00kBVing92m9ExhbFyiaHjGWtPmy9Z0=
Subject key identifier:   8D:C9:4C:65:3C:38:6A:B4:6A:BA:34:68:58:C9:53:C0:29:F4:69:26
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer:       /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial:       019EB7D841838F45FF49682E37B1D9269E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number:          1957
Signing time:             Thu 11 Jun 2026 18:01:03 +0000
Manifest this update:     Thu 11 Jun 2026 18:01:03 +0000
Manifest next update:     Fri 12 Jun 2026 18:01:03 +0000
Files and hashes:         1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: oXnVUyGLGvNST6c3Fn1qu7vgCN8A3CBh9BNWvJE/Cog=)
                          2: DoWhtMhiJd62u67yTypXkNyKc54.roa (hash: rOFqk1lXAk5Zo2qrvR0lJblhfPY81qij2Skbo2/XBYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d8:41:83:8f:45:ff:49:68:2e:37:b1:d9:26:9e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
        Validity
            Not Before: Jun 11 18:01:03 2026 GMT
            Not After : Jun 12 18:01:03 2026 GMT
        Subject: CN=8dc94c653c386ab46aba346858c953c029f46926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f9:99:f6:1b:4c:0f:fc:89:1f:65:f3:0e:a9:
                    83:96:fd:f6:76:50:c3:15:5d:4e:aa:12:e8:9b:6c:
                    71:7b:3f:67:34:10:c4:63:a5:c0:f2:d4:64:fa:9d:
                    90:4d:08:ef:12:7b:bc:c1:d0:8a:e9:3e:14:79:a8:
                    b6:ac:a3:de:6f:ad:bc:87:a5:e5:5f:a2:1c:52:5f:
                    91:e5:c2:11:92:7d:c3:e4:16:49:6b:07:40:5e:38:
                    40:e7:20:31:b8:33:96:a3:08:d7:7e:c1:b1:11:52:
                    e4:6d:53:2e:75:77:58:39:8d:24:d8:a6:f6:f0:68:
                    b6:12:6d:6f:07:27:03:a4:8c:b6:a8:50:77:8a:cc:
                    ac:20:d2:2c:86:ff:a7:0f:6d:7b:59:22:bd:a5:48:
                    e5:ad:67:07:f5:19:54:24:c5:80:c7:68:e0:9e:0f:
                    d5:56:4f:fc:10:a7:ff:64:27:2a:52:6a:1e:40:26:
                    a6:33:f1:8b:7e:76:e6:20:d3:bc:cb:d9:22:b0:8c:
                    f2:00:af:26:25:95:1b:9c:4d:d2:12:cb:29:ed:99:
                    c8:d2:8f:da:4a:c5:c9:8f:af:46:c3:a2:91:f0:96:
                    5f:e4:82:52:b0:20:f9:99:76:b1:f3:cc:95:33:10:
                    f8:e5:d1:68:a7:04:a4:3b:f1:55:38:9e:50:78:9d:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C9:4C:65:3C:38:6A:B4:6A:BA:34:68:58:C9:53:C0:29:F4:69:26
            X509v3 Authority Key Identifier:
                keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9c:52:c3:bd:04:62:da:f4:95:23:bf:85:5f:28:9a:c1:d3:
         84:9d:d7:87:3e:84:6c:df:79:1d:5c:25:c7:d3:71:79:e6:99:
         b3:3e:09:fe:e2:38:56:b3:17:ac:8f:08:87:86:a8:56:cc:e5:
         7d:82:35:aa:a4:e4:6f:05:74:4d:e8:d9:41:e7:e1:9b:09:c4:
         a8:9c:7d:8c:5f:1b:50:de:9e:6d:18:ce:33:fa:91:f9:c7:f7:
         a7:10:3b:c1:d4:09:06:32:33:a0:b7:cf:47:7f:33:2b:bf:ab:
         df:ae:8a:e4:96:a7:ea:91:b5:13:bf:b6:60:e4:38:1a:d6:54:
         5b:1d:49:61:d3:57:5d:9c:5b:03:9c:db:08:78:b2:86:d5:1d:
         c3:7b:6f:29:24:5d:6a:8c:bd:7a:44:3c:78:3a:ed:1f:ed:53:
         99:bc:9a:d9:08:fa:28:e8:0a:b5:c0:b0:97:94:e0:6b:ee:97:
         d8:e8:2e:e1:66:84:30:34:ae:31:74:b1:0e:1c:53:53:b1:a3:
         2e:5f:ff:45:e2:75:e4:84:38:ae:c8:79:82:36:f2:b2:5f:d2:
         ed:e6:6a:98:bb:a1:3b:8a:b9:d3:ab:39:1e:2a:39:1f:6e:77:
         2c:78:fb:d7:31:af:72:62:89:a0:d7:20:24:9e:72:4d:c8:67:
         07:b2:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:50 2026 by rpki-client