Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File:                     9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier:          HXVXWfi4xHtceQDgO3gUEAFN7c6i7LdI503jrELDJQ0=
Subject key identifier:   8F:2C:71:32:7B:73:07:BA:4A:D5:65:7C:EB:12:56:0D:69:C3:94:15
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer:       /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial:       019EB7D7D63E61A371FF8B9BB45523C35DAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number:          0579
Signing time:             Thu 11 Jun 2026 18:00:35 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:35 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:35 +0000
Files and hashes:         1: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: mncOCXDfu/0/o89PxNhlr4zkwejsjXgQHzXZQzCudVA=)
                          2: Z5Bt0mcpjuYCBhTBe_0r3j_HEOE.roa (hash: CQtnMCBgc31J7ELcq2ticHIWUxTxloi8VsRDj7ga9wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:d6:3e:61:a3:71:ff:8b:9b:b4:55:23:c3:5d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
        Validity
            Not Before: Jun 11 18:00:35 2026 GMT
            Not After : Jun 12 18:00:35 2026 GMT
        Subject: CN=8f2c71327b7307ba4ad5657ceb12560d69c39415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:54:31:3f:38:78:3a:cb:dc:2e:6c:75:64:
                    1d:ce:34:90:7b:bc:37:a5:21:5f:aa:dd:ee:d4:52:
                    64:97:4e:94:3e:92:37:87:f9:27:0e:f0:02:76:e0:
                    3b:f6:5d:18:9a:ff:46:17:37:95:cd:72:ae:40:e5:
                    41:27:fd:29:89:d5:a9:6b:bd:f6:6f:1f:39:bd:7a:
                    61:9d:db:6e:7c:2e:a7:28:eb:ef:e4:47:45:79:17:
                    71:73:e0:64:8c:d9:49:c2:5a:89:e6:be:c4:72:26:
                    b8:72:16:de:59:88:c8:6c:aa:74:8b:6e:2a:d9:d2:
                    0c:66:d0:b8:82:25:f1:1d:67:ce:41:8f:ca:4a:46:
                    f1:22:2f:53:6d:89:cc:39:e9:9f:b9:7a:4a:98:80:
                    49:c3:80:ff:ad:82:ff:b1:05:98:85:49:d1:d1:83:
                    ea:15:3b:b0:eb:84:45:ce:57:30:1f:22:23:b2:37:
                    96:a4:a4:c3:75:70:05:5c:7c:6b:a3:de:98:50:d9:
                    16:f7:e1:93:f1:7f:13:f6:46:21:7e:86:5b:54:49:
                    2d:29:8d:b2:bc:45:36:c2:46:e6:dc:f8:09:2b:70:
                    27:5e:4a:07:e4:bc:a4:f8:dd:41:1d:0a:b5:25:67:
                    1b:b0:3e:07:ef:28:06:ed:f3:e1:ee:8c:7b:e0:29:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2C:71:32:7B:73:07:BA:4A:D5:65:7C:EB:12:56:0D:69:C3:94:15
            X509v3 Authority Key Identifier:
                keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:b0:08:b6:71:11:f7:6b:95:9d:4c:d0:ed:c1:66:a3:d3:
         a5:23:f1:eb:ad:45:64:7a:11:fd:86:dc:3f:bc:be:68:60:d2:
         2f:d9:b9:07:ec:23:8c:8b:4e:de:a7:53:f3:6d:b5:4a:6a:af:
         66:30:c9:1f:a6:26:bf:f9:12:44:3b:ce:76:61:4f:d7:8d:f0:
         3e:f6:29:d0:c0:ce:da:34:12:4f:1b:4d:51:f0:4f:37:0b:25:
         1d:bc:9a:da:2e:cb:61:6c:2c:3e:95:c4:49:90:bf:b7:37:10:
         f7:ac:62:70:7a:db:1c:56:66:c6:e0:66:29:d2:f4:02:bc:75:
         1e:9b:a3:35:c9:24:4f:4d:6c:16:ce:87:a0:c8:d2:08:99:32:
         63:e4:4c:27:cf:ec:06:44:67:b8:d0:76:5f:ee:eb:90:48:1e:
         0c:f2:c5:7c:ea:a5:c3:af:d5:81:9b:a6:f3:5a:94:92:bf:48:
         cc:ba:af:fa:df:ca:ac:66:7b:3c:68:57:2f:92:9e:db:55:bb:
         f6:e6:b6:80:d7:cd:e7:6c:ef:74:40:83:8e:b2:86:6e:35:70:
         e7:34:93:e7:28:d0:bd:63:48:89:e2:12:d1:9e:71:e4:f8:ac:
         8e:15:80:4f:7c:0c:23:d4:72:de:b1:cf:7d:14:2b:dc:4d:09:
         74:80:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:52 2026 by rpki-client