Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File:                     R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier:          jEuwAdGFqNschp47FRunOG58F/yhivwysnYCfOY4zY8=
Subject key identifier:   84:AC:A8:85:4E:6C:D8:A6:77:D4:F0:29:A2:B2:E9:C3:89:B9:F9:63
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer:       /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial:       019EB8EAADE73CC8A21C3360783FE52F6141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number:          13FE
Signing time:             Thu 11 Jun 2026 23:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:48 +0000
Files and hashes:         1: GfskLOZoVhgQg_wzxEm8GfZcHM4.roa (hash: ofrsA1DT7Aku9raL2XzjxdFLHd4Z33+79Febk9dotIQ=)
                          2: L_HXYmOHhoM2YRE97tQgr7r3-SI.roa (hash: FgKVtJ0H+q1J3xzFBhPOLkROSf4gdoaYW3BrXLNdbVA=)
                          3: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: w472u9bbb3Z3kuOFXagYQcG7r9FrcxaAFoeLztLetUg=)
                          4: YFarakxWfFYCLAQp5ljHgqOhWAE.roa (hash: RE/+b+N1gEHRcglkBMv26yH60CrY4s//QKu/NgO0inU=)
                          5: bI5BYf82Ir4Li4k3h7ETXWtpwSg.asa (hash: JY2m7+dEW7oMbDggc4B90KRXQFdLhk4oiuqt3kPg/XM=)
                          6: ikavjZ5f6GJawA563R9lfvFF_yw.roa (hash: xj6NjfSn9z5nQZs/dmQKm0hr04bNYyjHHm+s3X5QLbI=)
                          7: qQfpp7t9DK9V6gL_8q23BxXNnRw.roa (hash: lJumWK87pFOc6ZFcfXBZ+TluPfr8swJRdJzi3gOyHEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:ad:e7:3c:c8:a2:1c:33:60:78:3f:e5:2f:61:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
        Validity
            Not Before: Jun 11 23:00:48 2026 GMT
            Not After : Jun 12 23:00:48 2026 GMT
        Subject: CN=84aca8854e6cd8a677d4f029a2b2e9c389b9f963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fd:70:15:5a:89:c6:5d:ed:81:a1:70:ac:c2:
                    bf:ae:07:5f:7e:3b:86:da:5e:12:c6:64:c9:4f:36:
                    fa:92:81:f9:2a:43:99:66:84:31:9d:ac:1b:17:fa:
                    30:cb:3e:c2:ed:35:9b:e5:a5:0b:0e:b2:e0:dc:a8:
                    1e:d1:73:32:c1:a8:f8:4a:3e:0f:33:14:8f:62:f9:
                    25:95:94:cd:6b:20:cc:81:a6:af:62:45:ed:43:2c:
                    9b:3c:94:9d:b7:75:cc:bd:86:5f:83:d6:d8:88:79:
                    b8:e1:7f:4d:78:a4:2e:27:a9:19:d5:8b:c7:e0:53:
                    c8:bf:ed:e3:79:84:02:51:93:ed:f0:60:3b:06:d1:
                    81:ad:e6:e0:4f:1f:11:12:e6:d8:50:a1:ea:ce:a0:
                    d8:64:9d:98:64:28:da:a5:a1:7a:db:21:11:f4:f6:
                    1f:18:d5:71:d0:f2:80:38:45:57:e8:ba:9c:7b:87:
                    a0:93:97:1b:4b:d9:b0:77:a2:2d:5b:44:b2:9b:53:
                    55:2e:92:b0:b9:51:56:fa:9c:d5:4e:a5:51:c9:53:
                    9f:a5:fe:60:a3:c3:0e:0f:e1:09:0c:40:f4:e7:5f:
                    90:db:a5:59:6c:64:6d:2d:f1:01:39:3d:0d:6f:f5:
                    eb:06:3e:f6:08:fb:54:51:c4:99:71:a2:68:23:17:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AC:A8:85:4E:6C:D8:A6:77:D4:F0:29:A2:B2:E9:C3:89:B9:F9:63
            X509v3 Authority Key Identifier:
                keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fb:b7:5f:25:e3:e3:62:9e:d5:8d:0b:b5:5b:75:79:b5:37:
         80:1a:e3:fe:83:52:fe:c3:9f:c8:00:6d:e2:8e:b1:72:c6:57:
         43:d9:84:ac:7c:5d:d8:60:41:bd:8a:cd:17:8c:01:21:88:da:
         cd:73:cc:00:4e:ce:c2:2a:25:8d:9d:38:b1:f0:bd:27:6c:78:
         42:d1:e5:ee:89:b9:9f:55:53:6b:b8:10:e1:73:85:c6:f9:17:
         42:fd:15:1a:2d:f7:8e:b1:7f:38:16:99:f0:f2:53:22:b3:a0:
         4a:4f:cd:fc:ca:89:c2:86:00:7e:af:4c:8e:a0:f2:4d:6b:6b:
         b5:bd:9f:9c:49:24:c0:93:e2:7b:6c:7b:97:f6:9a:84:e6:f5:
         7f:0c:36:20:92:cf:4b:e8:6f:bf:68:85:ac:a5:51:e0:e1:07:
         78:77:d9:1b:3a:35:46:68:f8:83:1a:8c:88:de:d1:1d:fb:49:
         01:6f:bf:d9:46:0a:77:5c:ce:d3:c3:99:a8:0c:f5:44:9d:d5:
         bb:6a:03:cb:0a:ee:c8:8a:9d:49:d5:d3:84:b7:e7:ce:47:39:
         cb:19:75:87:7f:8a:be:12:18:6c:81:b4:37:c7:80:64:ff:46:
         c7:f5:73:41:98:c3:e2:b6:2c:0d:c2:01:46:24:c9:20:0d:e1:
         4f:dc:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:52 2026 by rpki-client