Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File:                     9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier:          kmuW6J1umJGL8Kh/UH6e2g4CDnRzbSVlkb4IggGEOPk=
Subject key identifier:   C1:F6:3F:07:19:F6:75:9C:2F:9A:70:E9:5D:3A:F9:FA:0F:B3:DF:6D
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer:       /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial:       019F17C30737430035663EF04940E2D76AAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number:          1915
Signing time:             Tue 30 Jun 2026 09:01:25 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:25 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:25 +0000
Files and hashes:         1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: lynI8Jh9oh21ueLiBISkVvYAvYpJ1eVJPJ78trZ1bQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:07:37:43:00:35:66:3e:f0:49:40:e2:d7:6a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
        Validity
            Not Before: Jun 30 09:01:25 2026 GMT
            Not After : Jul  1 09:01:25 2026 GMT
        Subject: CN=c1f63f0719f6759c2f9a70e95d3af9fa0fb3df6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:f7:bc:a5:04:3d:f1:83:77:49:71:01:6b:
                    94:af:d3:e1:1b:f7:b9:5a:7d:83:fb:e6:ab:23:11:
                    14:64:7e:b8:b6:a8:29:82:eb:e7:ec:10:0d:e7:62:
                    27:54:ac:70:ef:22:dd:cb:df:7c:b7:dd:d7:b5:8c:
                    3a:f7:f0:90:67:18:8d:fb:a9:d2:81:c3:b6:85:fa:
                    4d:83:d2:cc:11:54:0d:33:28:06:72:68:e4:7f:a1:
                    c5:95:84:a4:71:96:4a:5b:e5:15:0b:fa:2d:6f:36:
                    cf:90:a2:be:2c:e5:7e:3c:f0:6a:2c:46:d8:5f:48:
                    63:96:ed:f1:33:59:1d:98:78:18:a6:77:33:fa:ac:
                    91:85:98:79:16:dc:7b:8a:92:20:c0:c2:9c:75:1d:
                    b4:05:b6:88:08:0f:19:55:e3:2e:fc:b8:3c:08:b5:
                    1f:a0:92:8a:72:4f:03:33:cd:b2:77:52:1e:91:cd:
                    fd:00:9d:cb:4d:8a:94:ca:91:ae:0d:fd:7b:5a:b7:
                    13:f1:82:03:88:f1:12:d6:c7:cf:16:d6:e1:29:dc:
                    7c:28:90:36:7b:ec:1b:28:2e:3b:ee:da:23:59:38:
                    be:d3:ef:ce:f4:f9:39:b6:6c:c1:6a:44:f8:a7:8a:
                    51:34:25:05:3c:7c:b9:10:d2:5c:d9:14:25:6f:9f:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F6:3F:07:19:F6:75:9C:2F:9A:70:E9:5D:3A:F9:FA:0F:B3:DF:6D
            X509v3 Authority Key Identifier:
                keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:97:5c:4f:61:b0:db:d5:58:a4:9f:7e:b7:32:32:55:eb:28:
         cb:cf:de:3c:7d:a9:cd:36:d4:6c:a4:3e:77:29:70:22:6f:85:
         bb:11:f7:82:7a:85:07:61:d2:81:5a:82:63:94:7e:3e:a0:55:
         2d:67:1a:a1:b7:a0:13:be:54:c0:47:8a:11:ff:4a:3e:ff:74:
         f6:45:86:16:d7:2c:a4:a9:53:86:6f:50:c5:be:31:93:a3:e5:
         73:b1:ef:62:8d:f6:7a:a5:7e:3f:85:07:9e:24:a7:51:e0:29:
         13:bf:9b:4b:dd:eb:0d:51:73:89:ba:3b:41:46:cb:d2:45:b1:
         47:2e:5e:af:7a:b1:7e:01:d9:4c:57:9a:d6:b7:05:b9:e3:68:
         22:38:60:9c:84:e1:bc:10:f7:9a:da:cc:5b:e1:f6:76:02:6c:
         24:32:9e:ce:f5:79:48:c9:14:e9:c6:b0:5b:4d:0a:76:43:a4:
         3f:77:ab:24:af:4a:74:07:a9:24:d7:14:c2:91:02:e7:b0:fd:
         e8:07:79:65:ab:30:91:dc:c3:62:17:8f:3b:a5:39:dd:41:17:
         73:75:84:c0:43:d9:d0:a6:dc:94:eb:42:9b:cf:64:74:97:e8:
         9d:db:70:fe:7b:84:06:e2:c5:09:9f:fa:92:6b:da:2b:c5:a9:
         c9:82:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:38 2026 by rpki-client