Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          fRfH5CitIGN0ToMbQTyNtpTUAg2OnJ4dNIc6iFb8+0M=
Subject key identifier:   BF:91:63:CF:B3:9B:EE:C8:60:EE:26:3D:4C:9E:CB:15:F1:A4:AE:11
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       019EEA0EC8C90B882B6AFAD5ABABF9BEB820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          1995
Signing time:             Sun 21 Jun 2026 12:01:37 +0000
Manifest this update:     Sun 21 Jun 2026 12:01:37 +0000
Manifest next update:     Mon 22 Jun 2026 12:01:37 +0000
Files and hashes:         1: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (hash: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: bj4MWHK6U9JYLtE2ZPEvHZa6Mc8WIQsFpMRGTzqVqHA=)
                          3: MNQFqrdvbEoxedHfrXynKifNGnY.roa (hash: O31r8g9C5kBDn8OSezJHwFB/Y59lZjW3Z0fIfncmogI=)
                          4: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
                          5: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
                          6: uKVnkxpc55UHCp4G3gmfBYK9lgA.roa (hash: Yl+4aX3AL4iwnArD6mGCgp0IBTVDchipN4aGOMzOCE4=)
                          7: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ea:0e:c8:c9:0b:88:2b:6a:fa:d5:ab:ab:f9:be:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Jun 21 12:01:37 2026 GMT
            Not After : Jun 22 12:01:37 2026 GMT
        Subject: CN=bf9163cfb39beec860ee263d4c9ecb15f1a4ae11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:d6:2d:40:8c:19:5a:e2:ec:5d:10:a3:d7:
                    d3:ce:62:b6:12:84:99:8c:b6:c4:31:6f:16:84:be:
                    e9:d5:6c:19:14:79:2f:32:7f:27:61:74:f7:1b:7b:
                    10:dc:09:93:6c:78:9d:d7:4f:8e:35:8e:21:64:10:
                    a6:08:c7:6a:99:8d:41:1c:48:f6:36:02:a2:22:96:
                    1b:e1:f2:d1:ff:99:60:69:2a:ee:de:4b:80:95:61:
                    66:b2:e0:3f:10:7d:93:82:ba:fe:86:88:d1:e9:bc:
                    86:e0:60:8a:32:bc:02:8d:a5:e4:46:81:6f:ba:0e:
                    57:93:c7:aa:49:59:e1:af:1a:7b:eb:4b:e8:dd:c9:
                    06:8e:c2:36:47:a9:39:ce:0d:13:a9:95:db:52:af:
                    25:8f:f9:a2:c8:34:2b:a0:6a:98:f9:bb:6d:82:50:
                    5d:46:72:8e:79:f8:e0:94:ad:ad:c7:c1:62:cf:48:
                    7b:21:45:c2:78:ca:3d:b4:f8:6b:25:70:bc:ec:72:
                    90:95:5a:b4:2c:78:24:d1:0f:53:c9:77:24:de:27:
                    30:c0:6d:7b:ad:c2:92:fa:8c:fe:18:2e:49:24:d9:
                    ac:ee:d9:2c:83:25:fe:eb:02:77:d1:1e:63:ae:3a:
                    da:30:45:78:3b:01:85:85:57:a3:9d:08:5e:07:2f:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:91:63:CF:B3:9B:EE:C8:60:EE:26:3D:4C:9E:CB:15:F1:A4:AE:11
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e9:13:e1:46:b8:79:b8:c8:36:99:61:20:9a:79:58:37:44:
         3e:4a:2b:39:4d:5c:f6:a7:6a:dd:5d:d6:b9:b3:ab:08:6a:f5:
         c7:a0:f7:69:5a:7c:6f:7b:50:a6:82:25:2d:ff:83:83:3e:c8:
         25:3c:40:d8:b6:ec:c7:75:4f:6d:72:19:5c:56:eb:9a:d0:52:
         3d:77:60:97:e6:a1:d0:57:8b:e1:1d:fc:58:f2:8e:f5:07:30:
         fc:f1:33:26:e2:cc:38:77:90:62:35:79:a3:42:30:92:70:a0:
         3f:f3:17:3d:9f:e5:25:65:8f:1d:44:17:6e:47:45:d5:bb:f2:
         d5:24:0d:0c:f2:ab:d6:ac:ab:61:3e:dd:77:95:bf:04:97:a3:
         3d:b4:8d:99:a3:48:57:38:a9:ca:6f:40:4c:58:45:a5:2a:09:
         b7:be:0c:e2:77:fc:e2:3e:99:3a:87:c4:b5:06:42:ce:e1:0c:
         63:45:9e:c5:19:29:08:e7:0d:3a:ad:05:57:6d:58:a5:90:08:
         66:20:48:69:f1:f1:20:57:c2:48:ed:bb:34:04:7b:31:df:f8:
         2b:cb:73:2b:dc:95:4b:3e:d2:74:9e:e8:dc:d7:4f:25:99:55:
         74:72:37:dc:02:50:3d:fc:d3:49:40:2e:e8:a1:c0:da:06:f2:
         06:28:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 19:41:20 2026 by rpki-client