Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File:                     9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier:          R+qI7eQbEGlt/VZWqvkje7EPzGMTyqvpOXEAamDxTnM=
Subject key identifier:   65:B6:6A:96:99:F5:27:F9:20:7F:19:C2:08:DD:46:30:86:09:EE:70
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer:       /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial:       019F190C895BA46ACD43D6ADB9FBD8C7DE92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number:          177D
Signing time:             Tue 30 Jun 2026 15:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:19 +0000
Files and hashes:         1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: v9zGbeQmHgETMYhkDZe8AcfT7NCKTOqlaMeDpcbHEZ4=)
                          2: UEAaPo6VUETHn6B0u4mE40cQPvI.roa (hash: oDl/sgYlJlPoPDa6gI6+975HLzl7ybSw7kcsMPOBkCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:89:5b:a4:6a:cd:43:d6:ad:b9:fb:d8:c7:de:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
        Validity
            Not Before: Jun 30 15:01:19 2026 GMT
            Not After : Jul  1 15:01:19 2026 GMT
        Subject: CN=65b66a9699f527f9207f19c208dd46308609ee70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:df:d3:b9:1b:cb:ce:0b:ca:db:bf:df:ee:
                    3e:8c:a4:da:57:92:59:9c:02:27:44:ed:58:88:50:
                    a9:cd:01:53:ec:42:21:48:d0:84:cc:f6:44:ab:2b:
                    fb:f2:35:64:2c:20:ec:9c:c7:d0:da:7b:92:47:75:
                    50:0d:65:1f:3b:40:b0:69:e2:e3:98:d0:7d:36:25:
                    8a:e8:bf:6c:19:fa:05:c4:58:76:9c:69:65:68:d3:
                    6d:55:a2:ea:49:08:6f:49:3c:0a:5b:24:7d:1a:4c:
                    74:27:8e:b7:ed:69:5d:62:31:bd:90:a1:92:4d:4d:
                    52:f6:64:3c:11:53:fb:e2:f3:30:e4:47:d0:30:27:
                    b8:bb:af:56:a3:18:9d:8d:95:77:65:a1:e9:1e:34:
                    7e:86:be:e7:92:27:28:03:52:40:c5:af:33:4a:94:
                    56:9f:e7:98:17:47:f7:2e:0f:f8:1a:8d:29:96:74:
                    86:d9:16:83:ee:f4:92:b8:3d:51:75:ca:96:1b:71:
                    3a:c4:46:2c:cc:4b:f2:39:8d:b2:6a:fa:2e:47:ec:
                    97:0a:cf:30:f1:2d:03:66:93:5f:c5:45:fb:b7:62:
                    00:b7:98:63:fe:81:92:4d:ae:6c:67:f9:87:32:71:
                    6a:c5:f7:72:d6:1e:85:49:5a:f6:05:29:71:31:25:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B6:6A:96:99:F5:27:F9:20:7F:19:C2:08:DD:46:30:86:09:EE:70
            X509v3 Authority Key Identifier:
                keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1d:8d:87:7e:6b:24:ac:ad:fa:5e:e3:93:2a:6d:82:41:63:
         02:46:36:a0:44:72:24:b4:ae:af:40:82:78:da:10:00:d6:bd:
         ff:75:da:83:33:50:47:04:47:33:3a:99:52:b3:76:09:a8:8f:
         a0:99:2c:cf:09:05:f3:9d:e4:ef:74:08:9b:37:b5:d9:53:a7:
         91:ae:d3:c8:4b:a8:ca:f9:e1:c9:91:11:ff:27:c3:5c:94:6a:
         ae:88:2c:d9:d5:62:47:29:4b:e8:d0:8c:71:b0:aa:ea:14:d9:
         d5:0e:94:6b:da:a4:c6:cf:5d:be:1e:68:ce:72:be:0d:40:bd:
         db:1e:7e:48:f9:9e:da:72:d3:1e:96:3f:c6:e4:30:1e:a2:89:
         4b:d3:7b:91:63:8e:eb:e1:66:06:69:59:e5:6c:82:4b:a7:ea:
         1e:1e:23:7a:64:7f:97:b6:0c:b7:02:db:7c:e1:a3:52:8d:3a:
         d1:f1:31:7d:04:4b:5d:57:34:dd:f3:ac:02:37:9b:e1:30:af:
         fe:19:c7:45:0b:1b:69:5e:29:39:6a:48:07:74:46:a3:d0:d6:
         ef:ff:f7:a6:43:d8:7b:d7:d0:4e:41:7c:6c:ff:76:5b:75:c5:
         71:f2:63:02:3f:d4:c6:5a:2e:c7:4f:7c:8e:fd:5f:9c:7e:54:
         f9:68:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:17 2026 by rpki-client