Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File:                     SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier:          mr9jo3Oxsxc6Sx/b1LVamZWAXbAiV9+kFEbvti2NKco=
Subject key identifier:   10:23:81:B8:F2:5F:61:DA:C6:26:70:7A:78:7B:66:35:97:0E:AF:48
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer:       /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial:       019EB8B3A26C05CFB34ECC7E86866B507256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number:          0C95
Signing time:             Thu 11 Jun 2026 22:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:40 +0000
Files and hashes:         1: Q3blDI4wrXCjaTFpenyLf0DAMPA.roa (hash: F0bx6XJTy3iA6AQ6s8pJaOAUtTyA4K1EgB6ztrarkJU=)
                          2: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: E2lrWZtK+/JAPPFiL2maQbuivNTle4s4Oo8+2iGxjZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:a2:6c:05:cf:b3:4e:cc:7e:86:86:6b:50:72:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
        Validity
            Not Before: Jun 11 22:00:40 2026 GMT
            Not After : Jun 12 22:00:40 2026 GMT
        Subject: CN=102381b8f25f61dac626707a787b6635970eaf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:57:8b:b0:15:64:e6:ee:f3:78:91:33:fd:0b:
                    66:8e:13:30:c4:ca:57:d7:12:60:2b:86:04:6f:a5:
                    f2:ec:4d:2d:0a:01:a2:23:18:23:17:0b:9b:26:c2:
                    4d:aa:84:65:33:0f:14:ff:d2:bb:24:b9:60:17:30:
                    a3:59:3e:fd:eb:ad:b3:92:c7:a7:85:0c:b4:0b:82:
                    6d:ec:4c:8f:fe:af:22:d0:da:c2:ca:cc:02:94:67:
                    00:9a:63:7a:ab:8b:15:ce:af:9e:a2:26:be:83:19:
                    ff:f2:87:fd:43:f8:e9:19:e2:48:d9:6b:9c:d9:9d:
                    ac:b0:77:1e:cd:0a:cd:b2:4a:9a:32:8d:03:72:2c:
                    28:25:89:92:fc:c9:6c:6d:9d:8f:5c:59:fa:93:bf:
                    2e:24:17:69:f8:10:00:6f:e9:63:46:58:6b:99:c9:
                    80:d7:96:e6:21:fb:86:81:75:79:3e:73:88:38:30:
                    36:62:29:26:87:51:d2:99:73:f3:3b:a7:43:3c:08:
                    e6:6e:33:fe:b4:9c:9a:17:95:4a:a7:d9:bc:02:05:
                    c9:93:16:39:97:52:d3:ec:1a:33:7d:5f:c8:46:05:
                    e1:72:14:fa:46:fc:a4:12:07:bd:95:eb:d3:bf:ae:
                    47:e7:3b:e5:b8:31:b5:32:9d:30:87:65:f1:99:4c:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:23:81:B8:F2:5F:61:DA:C6:26:70:7A:78:7B:66:35:97:0E:AF:48
            X509v3 Authority Key Identifier:
                keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:2b:65:55:21:83:03:70:47:f0:d9:b6:42:36:1f:08:b7:
         55:1a:e1:9d:22:61:ef:db:4e:94:79:6c:29:20:b3:75:28:ab:
         88:ca:73:7c:3d:5c:4f:ef:80:5f:70:d2:0e:02:8f:42:20:b7:
         06:a9:1d:71:80:5e:51:b3:fe:9f:73:27:e1:9b:b2:d1:39:a7:
         4f:49:92:51:f4:ed:0e:95:15:b4:36:0d:02:78:85:e5:d9:72:
         7b:8a:cb:2e:4f:18:b4:36:2f:b4:be:5d:ea:2b:86:5a:fb:50:
         26:d5:d3:56:0a:98:19:6d:cd:99:02:3c:a5:d1:15:46:e9:04:
         60:bb:a0:66:3d:5d:59:b4:a4:ec:dc:b3:d8:e8:b2:c1:a6:53:
         d9:e7:12:74:44:11:30:4b:d8:08:b1:fe:3e:35:38:8f:a8:a8:
         cf:0c:82:ef:88:c7:cf:67:ce:85:d8:fe:e1:0b:ad:f2:ae:75:
         ec:65:03:0c:af:48:ab:d8:96:ff:f6:f2:6e:2a:16:49:31:ea:
         7a:74:02:bd:c8:68:ff:11:f1:00:43:92:88:56:63:c9:63:45:
         93:3c:a4:6a:59:45:3a:24:07:4a:a1:47:4f:76:e9:e7:c4:72:
         da:64:6c:b3:35:57:a1:1e:67:9a:56:8c:15:f2:0f:c2:f4:67:
         76:50:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:40 2026 by rpki-client