Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
File:                     8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json)
Hash identifier:          JNf+sVAExUPmqG1LLBqu/LS0WhT81WzT4QV2pylivWs=
Subject key identifier:   69:FD:86:C3:73:1F:78:00:83:CF:96:2F:D4:95:C1:D2:84:93:2D:F1
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Certificate issuer:       /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial:       019EB84602FFC5B1C46DBCAD14F1E3D695D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
Manifest number:          195F
Signing time:             Thu 11 Jun 2026 20:00:56 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:56 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:56 +0000
Files and hashes:         1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=)
                          2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: Gc8+BUxZs/DiUGvcacVmtsvsspgx2mgBxhnGQxX4ACk=)
                          3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=)
                          4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=)
                          5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=)
                          6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=)
                          7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=)
                          8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=)
                          9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=)
                          10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=)
                          11: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (hash: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w=)
                          12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:46:02:ff:c5:b1:c4:6d:bc:ad:14:f1:e3:d6:95:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
        Validity
            Not Before: Jun 11 20:00:56 2026 GMT
            Not After : Jun 12 20:00:56 2026 GMT
        Subject: CN=69fd86c3731f780083cf962fd495c1d284932df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:fd:43:c9:41:f9:83:83:74:b1:ba:76:a6:
                    6e:74:93:b0:e0:da:6f:03:06:6e:62:d7:8f:9b:4a:
                    d8:14:3c:e1:b2:a3:7d:59:84:a6:ae:72:f2:7b:2f:
                    ca:7c:35:8d:02:9b:4e:72:29:ac:72:bf:eb:e1:b0:
                    65:70:ce:23:95:6d:47:13:cb:6b:1d:1f:bc:22:eb:
                    92:30:20:26:91:71:65:d0:cf:9c:81:1a:a0:d3:98:
                    30:80:c7:8e:61:66:74:7a:7a:1c:64:dd:cd:31:3d:
                    49:7c:08:07:68:cd:f8:64:1e:a7:d9:08:d0:45:7d:
                    ce:d7:12:72:e4:53:91:f0:cd:0f:49:7d:5f:7b:e6:
                    05:e5:b3:7c:46:16:9c:fd:20:d9:d3:a4:25:83:8d:
                    7b:80:ba:41:d6:56:3a:2c:22:61:67:0c:9e:84:db:
                    12:99:3a:38:4b:83:f5:91:d6:e6:b2:65:dd:f0:07:
                    82:66:0c:59:6d:55:69:ce:cf:56:7c:07:a2:13:78:
                    b6:66:a5:54:d9:a5:25:48:46:14:d6:b1:3e:49:a5:
                    11:5c:20:3f:56:18:36:46:85:17:98:64:d2:f0:a5:
                    0a:e6:ae:9d:78:c9:1b:5b:63:fd:26:b3:3f:66:42:
                    34:ae:96:81:11:a6:72:43:4f:a1:19:44:e0:ed:b1:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FD:86:C3:73:1F:78:00:83:CF:96:2F:D4:95:C1:D2:84:93:2D:F1
            X509v3 Authority Key Identifier:
                keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:bf:b6:67:4e:41:77:2f:c7:d1:f5:fc:6a:3d:26:b7:d2:7b:
         7f:d7:bd:c1:28:8c:4f:4c:d4:f9:67:49:23:c5:5b:25:aa:fa:
         1e:e3:34:86:cd:5e:90:af:53:a1:69:0c:bb:58:6e:7b:b8:30:
         4d:91:68:44:11:1a:28:3f:14:4d:4a:84:bb:6e:f7:77:52:08:
         7e:e8:40:f2:c2:bd:1b:20:9d:43:e1:db:8c:ba:08:6b:47:01:
         21:cb:a9:6f:2a:5d:da:0c:71:4c:ef:d6:e1:41:90:53:98:73:
         e5:1a:e3:c3:9b:4f:28:cb:9b:1b:9b:fd:50:37:73:c4:e0:7e:
         82:18:4c:79:15:01:ad:0d:3a:6a:40:2e:54:06:3c:c1:d1:a5:
         03:5f:81:a0:d8:05:ee:f5:8e:34:f1:35:60:35:57:dc:a4:20:
         32:66:d6:3a:f6:8b:bc:14:2d:b5:f2:ab:92:63:6a:f1:27:91:
         f9:66:f2:ec:dd:f8:ce:01:4b:04:83:05:75:5b:99:26:79:85:
         6b:36:7c:18:3d:0b:d2:d5:13:6f:12:fd:ca:26:6c:63:c1:57:
         85:e1:2e:8b:06:7c:c7:8d:31:44:9a:23:23:55:f5:1a:c2:0f:
         92:8c:a9:bb:7b:23:04:73:88:e7:ab:0f:46:88:86:d2:2b:ec:
         2b:8b:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:28:54 2026 by rpki-client