Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.mft
File:                     E9qPH3Ydb44U_wYc-rUFC4c_Sgc.mft (raw, json)
Hash identifier:          X/F0uqo2W7ZRW0B/a744M5YRuUybGGIBd1DMy5CV/jE=
Subject key identifier:   9B:1A:E2:01:77:11:04:B5:1C:46:62:F1:45:A6:B2:B1:3F:6C:D4:30
Authority key identifier: 13:DA:8F:1F:76:1D:6F:8E:14:FF:06:1C:FA:B5:05:0B:87:3F:4A:07
Certificate issuer:       /CN=13da8f1f761d6f8e14ff061cfab5050b873f4a07
Certificate serial:       019F1152CE119FFA3277AABFE45632BD73BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.mft
Manifest number:          8F
Signing time:             Mon 29 Jun 2026 03:01:07 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:07 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:07 +0000
Files and hashes:         1: E9qPH3Ydb44U_wYc-rUFC4c_Sgc.crl (hash: XP1E7UsDK8MUMxLlgAWNxwAPBJhNNlTsdPXXeJ9Fmss=)
                          2: OcaazuknVVv9htjLqCkiw8gaASk.roa (hash: VSsbIorgM5fhcWj7NGAVqkb5NSM/UyATlQFN+0x+Xqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:52:ce:11:9f:fa:32:77:aa:bf:e4:56:32:bd:73:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13da8f1f761d6f8e14ff061cfab5050b873f4a07
        Validity
            Not Before: Jun 29 03:01:07 2026 GMT
            Not After : Jun 30 03:01:07 2026 GMT
        Subject: CN=9b1ae201771104b51c4662f145a6b2b13f6cd430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:55:f2:fa:a6:e8:eb:5a:3f:1a:b2:04:0d:
                    bb:6a:a5:a4:8d:b4:dc:9b:a8:1b:15:81:9b:f9:2e:
                    95:0a:fe:6f:75:7a:bc:1b:46:b0:e5:63:a8:bf:98:
                    ae:50:dc:0b:c1:63:21:55:94:65:a8:02:50:7d:84:
                    60:84:d5:07:07:36:15:c8:f4:6c:60:58:80:24:5a:
                    df:52:f2:46:ca:5f:00:61:d5:1e:2a:44:b0:22:55:
                    7a:28:28:d2:23:74:b7:65:64:ab:9f:bd:ed:f6:f1:
                    47:6c:42:4d:30:29:20:06:be:08:e6:d3:a3:23:11:
                    65:b7:8e:6c:af:42:91:a9:68:78:29:2c:44:4b:7c:
                    4f:99:28:1d:8f:46:91:a7:f5:54:94:ed:0a:5e:4c:
                    d8:32:a5:a4:9a:39:fa:a2:28:b6:5c:df:a3:05:9a:
                    4d:18:91:ea:c0:30:10:16:b0:84:11:ed:b9:6e:5c:
                    f2:2a:38:99:07:64:29:89:cd:ae:5b:15:8f:b2:db:
                    8b:9f:2d:14:73:ed:b8:09:9a:91:fb:73:18:1b:e6:
                    42:89:94:71:84:27:f9:cf:21:77:b0:1e:7a:26:e4:
                    84:15:73:7d:66:a4:48:42:70:cc:40:3e:9d:52:5f:
                    3c:4b:1c:5c:0d:35:df:00:a1:49:bc:bb:52:28:56:
                    07:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1A:E2:01:77:11:04:B5:1C:46:62:F1:45:A6:B2:B1:3F:6C:D4:30
            X509v3 Authority Key Identifier:
                keyid:13:DA:8F:1F:76:1D:6F:8E:14:FF:06:1C:FA:B5:05:0B:87:3F:4A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9e416a-d130-4bd6-9831-f58901935583/1/E9qPH3Ydb44U_wYc-rUFC4c_Sgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:e8:41:65:25:3f:5e:bd:93:59:7f:56:d0:96:a5:97:79:
         df:62:67:c5:cb:45:37:a6:af:b6:cf:b5:a3:87:da:4b:d1:c9:
         47:7f:96:db:86:9e:2c:f8:2c:5b:e3:d8:7b:8b:2d:56:ac:49:
         a2:64:9e:68:5e:06:f1:91:60:f8:12:b4:54:ac:ea:b2:e0:4b:
         ee:ba:e3:94:5e:74:28:63:1a:62:e9:d5:a5:3b:10:ae:26:97:
         24:3e:31:55:f6:ce:29:33:03:0d:36:bc:b8:79:df:5c:44:8f:
         5d:eb:a6:6b:a9:03:a1:15:39:70:ca:78:2c:25:5f:c3:55:fc:
         20:ea:2f:a3:70:21:7e:45:b5:b5:82:81:15:ac:fb:7a:04:87:
         16:22:c3:c7:29:36:db:95:9c:93:7a:96:91:c7:c0:44:ca:79:
         18:20:b8:cd:cc:7a:39:4b:87:70:25:be:b2:02:ff:25:cf:fb:
         b0:d2:21:5e:36:dc:dc:59:19:25:9f:98:2c:04:24:03:29:6b:
         0d:ec:9c:bd:5f:55:fb:ad:a3:ad:11:1a:11:ad:ca:97:be:04:
         a0:1f:13:a2:ff:09:b5:7c:40:7a:ec:46:fb:c8:f5:88:b3:5b:
         bd:fe:79:5b:03:fc:25:20:f6:f5:9e:21:65:19:28:aa:2a:11:
         06:fd:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:57 2026 by rpki-client