Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File:                     H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier:          9a42cAFo5IP65EG2sqEXXllQvaZyKCzLv+Dd3thvy/g=
Subject key identifier:   62:C7:30:98:D1:46:0D:68:2D:DB:02:2E:20:20:AD:B0:44:8A:90:44
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer:       /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial:       019EB80F8859935C18BC682BBC00FF6CA140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number:          1959
Signing time:             Thu 11 Jun 2026 19:01:26 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:26 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:26 +0000
Files and hashes:         1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: OaoEA/iY+D4LZGSAfUNNyitNbb7Bf2gnGyZTKJHCAS4=)
                          2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
                          3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:88:59:93:5c:18:bc:68:2b:bc:00:ff:6c:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
        Validity
            Not Before: Jun 11 19:01:26 2026 GMT
            Not After : Jun 12 19:01:26 2026 GMT
        Subject: CN=62c73098d1460d682ddb022e2020adb0448a9044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7c:83:fb:27:33:f6:78:71:07:e7:8f:66:e2:
                    4b:a8:99:ac:c5:4a:40:3a:e9:a9:e8:59:70:c0:9e:
                    a3:0d:f5:1f:82:08:9f:75:24:00:05:a0:42:14:d2:
                    48:1d:8f:b3:65:c1:76:b0:84:23:87:c0:71:e0:e1:
                    2e:18:32:6e:e5:c0:3f:f9:d0:66:8e:15:57:5f:12:
                    d9:af:13:ff:a4:ba:dd:eb:2f:28:29:e0:e9:1b:db:
                    dd:3a:d7:5b:01:db:b6:6b:c6:99:e0:48:fc:a0:af:
                    45:5a:b6:4c:d9:20:dc:f1:62:5d:8b:4b:5a:68:2a:
                    f2:ef:b9:d4:38:b5:df:8c:b9:99:9e:59:20:2b:70:
                    d0:3f:7d:8d:a3:9e:ea:3e:3b:18:1a:cd:38:0b:e8:
                    0a:05:da:fc:a0:dd:e2:57:cb:80:2b:3e:64:58:6d:
                    dc:63:93:cf:44:3e:6b:85:8e:6d:f1:ac:40:45:5f:
                    07:a1:d2:4d:a7:ae:4a:5c:48:51:35:de:c1:2c:c6:
                    65:4c:20:f8:9a:2b:bc:b8:ad:83:38:68:93:32:39:
                    f2:0c:e2:bf:c2:ab:0c:e7:e6:55:2f:0e:20:f8:13:
                    24:61:49:9f:39:07:4e:90:ad:1e:7f:94:26:1a:0e:
                    52:6f:ac:0c:a7:7a:e0:d6:44:15:55:d4:3a:d5:9a:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:30:98:D1:46:0D:68:2D:DB:02:2E:20:20:AD:B0:44:8A:90:44
            X509v3 Authority Key Identifier:
                keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:8b:98:a4:60:a8:c9:37:f1:2d:bc:b9:c9:45:d5:c8:f1:79:
         93:ac:29:ff:12:cd:73:af:16:c9:1e:72:68:c7:d4:04:f1:40:
         e6:3a:1c:3a:f9:f5:54:1b:b2:6a:06:f3:20:19:fc:7e:62:bc:
         40:f0:f7:3e:c6:b1:29:25:80:0d:c0:df:a3:5d:07:02:b8:68:
         ad:83:a3:92:76:43:fa:e7:0a:eb:a7:7b:d5:5b:a1:bb:d2:fe:
         58:37:7a:d4:43:95:ce:5b:e3:fc:0b:6b:b5:dc:70:ec:78:10:
         fc:8e:61:7b:d9:58:80:76:5e:1a:63:c1:36:0c:36:2e:54:c6:
         ad:ef:f7:47:46:01:50:8d:1f:04:95:44:da:7e:ee:db:2b:d0:
         e3:0a:22:d4:65:c9:a5:be:50:a7:28:40:4f:df:6c:ab:0e:a7:
         ce:ba:f1:d0:4d:ea:79:d5:53:8f:1d:cc:ac:e8:8e:5b:3f:fc:
         73:17:34:49:58:41:4d:f7:37:d7:c0:91:f2:e7:3d:4c:8d:22:
         db:09:96:57:16:55:1f:92:72:90:be:73:90:94:48:3b:60:c0:
         21:86:f8:be:52:ea:73:39:80:ec:98:99:35:c0:1b:36:0d:35:
         b4:d6:4e:c6:ab:97:ea:6e:00:22:f6:ee:c9:87:bc:2f:09:41:
         ee:cd:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:44 2026 by rpki-client