Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File:                     9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier:          8peaw7EExevEigsrt65CJuWUVrHGnf8ouAKRViUKPxk=
Subject key identifier:   83:BE:D6:91:82:84:0A:B4:84:1D:AC:37:E6:9D:4F:E7:AD:61:A5:A6
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer:       /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial:       019E8DFFE319631944F8F25C49F5C02A7655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number:          193D
Signing time:             Wed 03 Jun 2026 15:00:17 +0000
Manifest this update:     Wed 03 Jun 2026 15:00:17 +0000
Manifest next update:     Thu 04 Jun 2026 15:00:17 +0000
Files and hashes:         1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: JTvYrNDf8Ye6yH/3UVszj5zodqazp/+/+R34bsAgRuo=)
                          2: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (hash: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4=)
                          3: VRJ4Vc94OyT64lapMXpmOD1B3Wc.roa (hash: Ky32PchK8c9vLn0orEiQizK102tpl+arDsTOuP7+gVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8d:ff:e3:19:63:19:44:f8:f2:5c:49:f5:c0:2a:76:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
        Validity
            Not Before: Jun  3 15:00:17 2026 GMT
            Not After : Jun  4 15:00:17 2026 GMT
        Subject: CN=83bed69182840ab4841dac37e69d4fe7ad61a5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:b0:19:a6:36:e7:38:c1:0d:0b:bb:7a:af:
                    e2:b6:49:d6:aa:24:c9:0a:ea:4e:99:9a:85:01:f2:
                    dd:55:4f:70:54:e5:29:82:7a:24:92:b6:1b:d6:4d:
                    fe:03:a9:9a:d5:ac:e8:3f:c8:26:d9:39:0b:43:28:
                    ec:7f:1f:79:cf:b2:c4:22:2c:1d:8f:fa:97:fb:7e:
                    d6:12:86:66:8c:44:5f:26:19:5e:1a:18:12:49:67:
                    c6:fb:1f:e3:c4:60:6a:ca:ea:80:ed:b6:b7:45:95:
                    d8:b6:e8:81:58:51:28:e0:ca:04:43:fd:55:b3:5b:
                    8b:89:96:17:f4:26:95:84:ed:22:97:c1:74:61:51:
                    21:1b:a9:3d:f4:60:f8:2b:a8:17:58:92:96:5b:e5:
                    20:e3:0c:99:ef:66:74:59:7a:59:b6:53:74:c6:4a:
                    76:06:91:d2:d9:b7:7e:af:fa:67:78:f0:3f:45:2d:
                    fe:56:d8:b1:9a:7a:15:de:0d:97:88:77:8d:97:df:
                    d3:c0:64:2e:1e:85:5a:79:d6:16:21:f2:e8:0d:4d:
                    3a:9f:c7:6c:24:55:4c:76:52:87:7a:4d:46:47:19:
                    8c:44:ac:d8:ed:22:14:f5:11:22:cc:f1:30:e8:ac:
                    06:40:f7:62:61:8a:00:07:2f:40:78:52:c9:88:ad:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:D6:91:82:84:0A:B4:84:1D:AC:37:E6:9D:4F:E7:AD:61:A5:A6
            X509v3 Authority Key Identifier:
                keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:44:a7:00:dc:71:70:8b:6f:7a:cc:fd:d0:dd:73:16:22:e6:
         59:01:3b:43:ae:7a:fa:79:e7:62:7d:80:66:5a:3b:b5:27:f8:
         30:c1:a0:08:4e:fd:a9:3e:ae:84:5c:a0:22:bd:e9:44:5e:72:
         22:50:12:8b:4d:b8:44:a9:0e:94:c5:3a:77:ae:c1:cc:0c:62:
         da:6f:d9:5a:23:12:a7:ee:b7:57:33:bd:ad:c0:78:a3:6d:8a:
         84:65:5d:3c:70:8c:5b:1a:2b:e1:cc:a1:40:16:01:a2:10:06:
         88:b6:12:f3:40:fa:71:93:8f:e4:9f:5a:2d:cc:d2:a4:51:9b:
         4a:5f:18:03:6f:3f:ad:d0:1f:4d:65:d3:28:73:98:37:31:a8:
         8d:c2:5e:2d:a3:1c:81:79:8d:5c:07:d3:ff:aa:e2:b1:b9:d5:
         7c:de:fc:15:23:0b:52:33:63:f4:61:4a:e3:8a:9d:c2:d6:4d:
         14:6b:db:13:04:08:d8:d9:f6:71:51:fe:2d:bf:ba:31:c0:5b:
         1a:bc:00:34:9e:aa:22:ca:11:3a:32:2e:09:01:d5:8b:d2:19:
         33:10:c5:18:c6:eb:77:52:03:dc:d9:e4:66:d7:6e:cd:d5:85:
         8e:75:9b:96:07:f3:4d:4b:fd:53:e3:40:61:31:ac:aa:30:19:
         88:cb:7b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:29:56 2026 by rpki-client