Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
File:                     9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json)
Hash identifier:          vp2jqB0gAKt6s9AOCK+lSRiilc5u95MS6+FatkWSVB0=
Subject key identifier:   B3:D9:29:3A:A1:10:DE:BA:05:E7:DA:AC:87:00:20:82:14:FE:7E:FF
Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
Certificate issuer:       /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Certificate serial:       019F28B6C6EC819888030DAE4555C75F30C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
Manifest number:          087C
Signing time:             Fri 03 Jul 2026 16:01:34 +0000
Manifest this update:     Fri 03 Jul 2026 16:01:34 +0000
Manifest next update:     Sat 04 Jul 2026 16:01:34 +0000
Files and hashes:         1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: +NGlBPQit43I6tug65a+3eucVvYBofhepuylXqNdGaQ=)
                          2: PYpH8aQrBxgmiCTPPp0V-EcnxfE.roa (hash: TZmRjK93W2lQuniNqsjJViZK/7sITb6I/CE3q5KADNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:b6:c6:ec:81:98:88:03:0d:ae:45:55:c7:5f:30:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
        Validity
            Not Before: Jul  3 16:01:34 2026 GMT
            Not After : Jul  4 16:01:34 2026 GMT
        Subject: CN=b3d9293aa110deba05e7daac8700208214fe7eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7b:20:70:bf:d4:69:f3:ff:41:97:a2:b5:7c:
                    7d:9b:f0:ff:6b:97:b1:d1:17:4c:e1:4d:35:0f:a7:
                    96:09:9b:e3:d7:c2:45:c8:d9:fb:89:d5:b6:34:15:
                    d9:05:fc:ba:93:1e:a2:c3:8a:da:26:cb:e3:a4:21:
                    13:16:80:99:bc:da:f3:44:40:93:be:1a:1b:4e:9d:
                    be:5f:03:ca:c6:72:1a:a3:53:8e:49:7c:54:dd:0c:
                    e2:59:04:e5:75:fc:c7:65:e3:02:55:b3:a1:8b:01:
                    cb:c3:ec:ee:2c:7e:04:65:de:21:63:fe:df:19:06:
                    6e:4e:d5:67:12:4f:0a:75:8d:79:da:15:2c:12:14:
                    d0:cc:fb:0c:65:1b:33:3b:0d:a0:68:99:c6:7b:6f:
                    6a:19:aa:5f:86:3d:73:6c:8a:6f:0f:ce:9a:ab:3b:
                    0a:fd:b0:04:73:62:7a:21:46:6d:05:bb:06:de:44:
                    0b:23:b7:b8:c5:a6:da:b3:28:55:e1:e9:1e:ea:3c:
                    20:d8:31:91:e1:9e:ca:5e:3f:19:33:9d:1b:d7:ee:
                    0f:08:d7:71:c2:11:50:c5:0a:33:4d:fc:3d:5e:b0:
                    3e:e0:48:f2:72:8f:50:35:24:88:78:c4:d3:23:17:
                    aa:1f:c7:e0:34:c5:13:15:d7:c8:8f:c0:34:18:16:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D9:29:3A:A1:10:DE:BA:05:E7:DA:AC:87:00:20:82:14:FE:7E:FF
            X509v3 Authority Key Identifier:
                keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d4:cd:c2:55:c1:ba:9b:33:43:a4:73:68:86:e7:3f:01:91:
         6d:37:80:2b:b9:5e:de:ba:fb:f8:a0:db:52:eb:a6:f1:67:98:
         03:cf:a3:a9:86:1a:b4:cc:c0:da:58:a1:04:d2:a7:28:1b:8d:
         65:e0:1e:b6:23:8a:6f:97:55:5c:2e:e0:44:70:d6:b0:a0:a3:
         af:6e:02:5c:ac:ab:59:f1:fd:3e:36:7d:97:f2:f8:29:ee:21:
         90:93:52:1f:32:ba:e6:8a:5b:ff:52:de:7b:e1:e9:68:ea:fe:
         44:4f:a5:20:c6:b0:a3:c9:08:cb:ec:ce:63:82:3c:51:26:dd:
         e4:29:f8:bc:7f:13:e6:c7:5d:29:62:29:e9:7a:c4:18:83:05:
         c8:85:20:26:3c:e8:6d:21:4d:fa:c8:72:b7:4a:15:5d:85:39:
         e0:aa:32:d7:0e:8c:54:b5:16:98:0e:18:44:32:82:33:dc:98:
         52:88:89:6e:be:93:4e:dc:00:a8:aa:af:21:b9:08:02:d8:e6:
         96:98:81:02:40:d1:cb:95:d0:dc:7c:8f:61:56:d9:43:de:54:
         fe:79:5d:07:99:cd:57:33:35:33:68:eb:88:5d:dc:d2:2b:82:
         20:0c:9e:62:09:0e:20:24:cd:ed:7d:4f:ac:9f:5b:df:de:1c:
         8b:f0:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:59:41 2026 by rpki-client