Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File:                     n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier:          JWVbhUE+EemnGeaUEIJeQVq+3ax4/Q9rBv+6JT6c/Y0=
Subject key identifier:   FA:00:39:A8:46:3A:29:C2:DE:E4:82:3E:D6:ED:46:AC:6E:F3:ED:C1
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer:       /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial:       019EB76A2ED1FA92E6D429153860F13F99E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 16:00:49 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:49 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:49 +0000
Files and hashes:         1: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: LG8Lq8szf99EpW9Fi+qMH1EXqgE5XqRz4QxrUXvnDpE=)
                          2: yfiieDo9iLegYVxPGWv16UQ43As.roa (hash: SYrqg0nXFiIlwOea5YRswLpoCOBeZ7BwjysKy4Ug6lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:2e:d1:fa:92:e6:d4:29:15:38:60:f1:3f:99:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
        Validity
            Not Before: Jun 11 16:00:49 2026 GMT
            Not After : Jun 12 16:00:49 2026 GMT
        Subject: CN=fa0039a8463a29c2dee4823ed6ed46ac6ef3edc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:9b:36:75:88:99:e1:0c:e9:dc:d5:8c:d5:
                    ac:20:fc:ae:f4:00:46:95:4e:fe:10:50:fb:92:e8:
                    ca:81:60:3a:9f:da:03:1a:ac:3e:48:ea:a9:4d:12:
                    17:1c:6e:39:52:d5:1a:7b:f8:71:b0:84:ad:ba:be:
                    f1:7f:47:82:08:1c:e6:a6:0d:56:a4:a4:46:17:11:
                    65:ed:06:ba:2c:fb:1e:0c:a1:1c:68:fb:b9:ad:b1:
                    15:00:b3:43:d7:ed:a0:4e:ea:ba:3b:ed:85:4d:8c:
                    db:ed:57:7f:eb:9b:2a:f3:6e:a4:02:17:2b:1a:a4:
                    4e:6d:7c:e0:6e:78:1c:20:b7:f8:c7:ab:72:d4:a8:
                    8e:c4:ed:a4:d2:97:65:6c:9e:2d:39:fb:b5:9e:56:
                    7b:97:3b:24:88:2d:67:7e:d5:6f:c2:21:05:f7:b5:
                    c5:3e:00:c3:2c:1d:4d:7e:ac:e0:e8:ac:c3:c1:f2:
                    5e:c8:dc:ad:db:11:69:97:59:d6:92:49:ee:27:82:
                    6e:bb:a7:57:8a:88:30:83:bf:38:33:b6:28:8f:c7:
                    14:6b:cd:2b:cb:ff:3d:47:61:3d:8c:14:16:bd:ac:
                    f4:79:1d:19:48:a9:45:6a:b2:92:0d:09:04:13:09:
                    5b:5c:72:ec:4a:ea:ab:af:da:34:4c:ae:8d:50:17:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:39:A8:46:3A:29:C2:DE:E4:82:3E:D6:ED:46:AC:6E:F3:ED:C1
            X509v3 Authority Key Identifier:
                keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:75:c0:39:8f:1e:43:0e:85:3d:cb:c2:78:8d:af:8a:79:
         fe:e0:4e:a1:82:74:2e:1c:81:1d:cf:7a:92:3c:22:2f:16:31:
         a2:9d:33:ba:ff:b5:56:1a:bd:14:00:fa:e7:1c:e7:80:ae:bd:
         9b:cf:eb:0f:59:ec:7b:11:cb:c1:5f:58:50:03:79:45:f7:94:
         e7:5c:e0:00:08:db:ec:8d:9b:91:4a:1d:6a:12:80:2d:b8:21:
         5f:29:15:f3:b9:8e:40:0a:2c:d9:2a:75:a6:67:82:91:ef:a5:
         d9:c1:e3:be:6d:74:40:ba:d1:3c:22:9c:0c:0b:55:7e:9b:6b:
         68:39:dd:bb:5b:07:a5:fc:b0:1e:8f:f1:a3:0f:91:8a:f6:3a:
         64:a0:0a:f4:d1:70:d6:44:3d:04:60:c8:52:48:70:3c:9a:de:
         a8:0f:a4:37:0a:2e:6d:f7:55:a6:8b:ae:3d:fb:f3:46:92:d4:
         58:86:da:a4:09:99:7f:89:f2:c6:ee:b1:27:2d:0f:6e:b2:ba:
         61:1c:a9:9d:21:9c:ff:46:e2:cc:5a:b3:1c:8b:46:ae:1a:ee:
         f8:a8:b1:f4:97:d0:e5:63:be:c5:ca:ee:e2:60:d3:28:a6:30:
         58:89:c6:94:e5:ad:51:39:3c:48:d5:da:a0:5e:fa:1d:d7:73:
         05:b5:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:10 2026 by rpki-client