Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File:                     9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier:          eCYh2zJdOasQkcn5Nin7hjim32uyCkz+rFqkZEIIPxA=
Subject key identifier:   49:F5:87:A9:85:5A:BF:05:C9:BD:B3:4E:C9:5F:20:B4:AC:92:B9:A1
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer:       /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial:       019F17F96207AE1BE058C5590A5DCB0CA5AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number:          0693
Signing time:             Tue 30 Jun 2026 10:00:47 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:47 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:47 +0000
Files and hashes:         1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: WlQn1px1joUI6a3Aoyblbu0u4PVlbVdUd/K1qnFCUgU=)
                          2: q_PyfNokBeIwV9ZVtxUDykAzbyo.roa (hash: nCsivWX18Ek0Fvcd2OhF9dAgd1gXwooWGtpWmt/HjOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:62:07:ae:1b:e0:58:c5:59:0a:5d:cb:0c:a5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
        Validity
            Not Before: Jun 30 10:00:47 2026 GMT
            Not After : Jul  1 10:00:47 2026 GMT
        Subject: CN=49f587a9855abf05c9bdb34ec95f20b4ac92b9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:63:22:0e:69:36:6a:13:bf:49:d4:65:a9:
                    17:7b:b6:86:b2:1a:60:77:90:0e:a6:6f:a6:aa:98:
                    e8:9a:e4:59:61:10:fe:fd:41:00:0d:0e:6f:89:5e:
                    1c:30:3a:5e:b4:0e:f2:26:d0:71:f0:69:5c:e5:ab:
                    62:69:c1:62:fe:8a:5d:ea:45:ac:90:5b:91:54:00:
                    b3:9a:d4:47:2a:ce:87:0e:eb:27:e8:e5:d1:77:8f:
                    54:dd:e1:cb:f4:86:72:08:36:06:8c:aa:a2:3c:37:
                    bd:6d:9b:81:1b:6f:eb:60:30:f2:a7:5f:89:fe:10:
                    cd:c3:6c:61:ac:16:a2:f8:f8:6f:93:4e:e4:ea:46:
                    e8:57:28:72:78:f9:6d:85:2b:81:a3:53:7d:92:7c:
                    fb:5c:3c:61:39:f4:7a:0c:44:86:59:da:bc:95:13:
                    ab:60:85:e8:d9:9b:bc:b9:71:50:71:dc:af:1d:67:
                    dd:0f:f6:e9:be:5c:02:8f:db:91:2d:11:50:a9:05:
                    20:f5:e9:c3:e6:df:92:86:17:eb:2c:ed:b1:67:25:
                    4f:fa:3f:c0:ea:98:18:2a:cc:dc:bf:2a:dc:5d:87:
                    71:71:6e:a8:ae:91:76:0d:20:8c:b8:10:be:24:db:
                    c6:5b:3f:67:eb:d5:36:2f:65:04:fb:9e:d7:ea:ae:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F5:87:A9:85:5A:BF:05:C9:BD:B3:4E:C9:5F:20:B4:AC:92:B9:A1
            X509v3 Authority Key Identifier:
                keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4c:ad:f4:be:70:73:ba:48:4c:dc:b4:23:38:a2:fd:9a:bf:
         c3:0a:f9:72:50:06:bd:a1:19:e4:d3:28:fa:fa:8a:b0:20:68:
         e2:1e:ed:42:ec:82:86:06:c3:b4:4e:d9:07:9d:bf:35:10:f4:
         96:5e:d2:fb:2e:f8:fe:b3:93:35:ab:cf:4a:45:e1:99:b6:c8:
         c9:0d:be:90:cd:31:99:1a:50:a4:cc:f4:6b:c3:ee:28:f1:c1:
         03:6d:a3:8a:33:e9:97:aa:ed:5e:f8:a2:94:33:00:44:f7:b6:
         f6:2d:41:ae:7c:b1:e2:b1:54:05:e5:c1:d8:9f:75:d6:15:97:
         07:7f:81:08:60:79:a4:c8:87:15:74:3a:73:de:b7:0a:32:fa:
         82:01:db:57:a2:92:86:13:d4:11:b0:b7:8b:ee:31:9b:3f:bf:
         da:be:2d:e7:58:55:3d:db:ab:6f:96:2f:76:46:0b:f1:c7:a2:
         96:24:bd:ca:1e:d1:3f:9a:55:e5:07:11:45:fe:ca:45:a7:f2:
         db:a0:56:da:3e:9a:be:a1:ad:3f:86:d4:b0:52:18:97:cd:fc:
         68:02:53:7e:89:83:03:d8:ab:50:da:c0:1d:9d:00:ec:0c:a2:
         2a:47:af:e1:87:b9:d9:f9:69:10:c9:03:fd:cb:99:db:e9:df:
         39:0a:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:02 2026 by rpki-client