Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
File:                     1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json)
Hash identifier:          p9+clDpGNRN/qjObjwfimabbt6RFccnnZ4x9eIjnq4w=
Subject key identifier:   78:92:35:4B:83:D1:65:FE:F8:B7:75:88:A9:75:89:86:11:AC:1E:73
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Certificate issuer:       /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial:       019EB8EA2F86E93AC2C349B79582539F0293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
Manifest number:          085E
Signing time:             Thu 11 Jun 2026 23:00:15 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:15 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:15 +0000
Files and hashes:         1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: fda9A5XxQ2F+pjlQXXmnyLglfJUooNt8B9HUUwyVok4=)
                          2: LHIeUVA9wsCM7bmZaVgrPaNNziw.roa (hash: NBcTepDFdXpBgX4qPundU4bCWFb04yiAHriwN4bBQ7M=)
                          3: LvfTa413By2E_F6yYl2dyQqtQ6g.roa (hash: r8Aaf6zbkZr6mR+oKR2km59CiVJuLPU3L/XJZeMBCjE=)
                          4: ZdKh3a8XEvF05LVjsi9wkRymFVg.roa (hash: NE20D4V8pCaAFdHiKB+G1Vp2zobKDlYDSABykJAJbXM=)
                          5: _vmewA9W8DyxXaiP_EZ3cz5dROk.roa (hash: SjnU2OshL4XrUnyu6qZvohhXfN1UkCVyA6v9bEVIxns=)
                          6: fyIb0V5JX6E2tpy_vgKc70A0lK8.roa (hash: wDxZOpTMpfURcZbXhtIPr6kc1LLTPvdz01nZUdR/Qy4=)
                          7: wmVWvi9LFM_1oIUpxrvxMv6hAgI.roa (hash: hSBrwEq4pKXZOmKjFY4p3+D6mzIcmXDbJLyGmD3u4sQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:2f:86:e9:3a:c2:c3:49:b7:95:82:53:9f:02:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
        Validity
            Not Before: Jun 11 23:00:15 2026 GMT
            Not After : Jun 12 23:00:15 2026 GMT
        Subject: CN=7892354b83d165fef8b77588a975898611ac1e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:af:e4:c1:01:f7:4f:31:2c:89:03:93:d4:
                    af:08:07:75:0a:27:ea:67:49:d5:8a:83:1c:74:57:
                    e4:f7:c4:88:fd:9c:20:bf:38:b8:12:43:ff:6c:55:
                    4e:32:e7:a1:e0:b7:4e:75:4d:a6:cb:f4:a6:7d:fa:
                    6c:9b:f7:d6:79:ee:63:7c:b9:5b:e4:74:bb:79:b6:
                    57:d4:50:12:57:b6:2e:2f:48:76:07:41:3d:80:f5:
                    06:21:4c:8f:43:30:5d:7e:15:13:af:88:a4:e4:d6:
                    6a:ad:00:a8:db:4d:b7:2a:ca:c1:26:b5:da:89:e8:
                    e8:e5:78:a0:44:a6:9d:f3:63:23:92:82:c9:0f:99:
                    97:26:15:f5:20:34:46:6d:7e:a5:71:00:f4:b3:f4:
                    6c:df:f7:87:7e:4d:10:7b:b8:44:c4:a0:91:76:e1:
                    01:e7:c7:94:38:2e:fd:1c:b3:aa:2c:23:11:22:17:
                    e2:4f:fa:e1:cd:79:e6:bd:cf:21:31:99:4c:05:ac:
                    2d:dd:aa:71:c9:9b:ca:99:6a:bb:ec:a3:bb:af:9b:
                    08:a5:57:b9:ab:11:41:b5:88:27:2d:6a:d4:9f:0e:
                    fb:0b:62:67:e2:ec:0b:48:ab:a4:17:1d:ce:cc:08:
                    28:6b:1a:f0:60:f7:74:44:53:ec:09:a3:c8:8c:43:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:35:4B:83:D1:65:FE:F8:B7:75:88:A9:75:89:86:11:AC:1E:73
            X509v3 Authority Key Identifier:
                keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:04:1e:e5:75:14:ba:86:10:98:fb:12:63:46:80:39:41:44:
         0c:20:fb:44:59:8f:69:fc:24:db:ca:d7:25:5a:de:ad:ee:3f:
         09:93:3c:eb:5a:8a:f0:d0:e2:21:70:9d:e2:b9:45:45:f3:d1:
         ef:73:86:95:33:bf:99:6b:3e:c5:f9:4a:d1:a9:3d:d5:af:ed:
         45:bf:89:e9:96:b3:0e:6d:51:35:f7:dc:68:48:90:55:ef:b1:
         19:44:bd:65:5f:07:fa:e0:3f:50:68:96:59:e8:12:4e:b6:5a:
         94:a7:a5:ce:16:3b:66:d2:8f:65:75:62:c7:b5:24:ea:1e:3a:
         35:c9:db:8b:ff:ec:cb:43:51:a3:79:cc:66:a8:f5:a7:81:33:
         71:70:ad:3b:4a:ac:5d:8f:f9:d2:bf:e0:4e:39:9e:52:62:41:
         f7:c0:32:44:ac:fe:74:da:f1:98:6b:dd:73:89:f8:f8:42:2b:
         fe:6e:8a:3e:39:18:ac:2c:a1:9a:74:bd:2c:58:a3:1e:1c:47:
         68:12:34:30:4a:c5:f6:ea:c4:e7:2c:1c:ac:45:a7:4a:14:4f:
         5d:6e:95:60:3a:0c:77:3c:84:d0:fa:e1:58:9d:d8:ae:b2:75:
         54:f2:a9:0b:3e:6f:f1:7d:b4:94:96:99:6c:46:c6:38:65:95:
         eb:be:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:45:38 2026 by rpki-client