Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier:          Sw4en1iM8t5QEpvgClFspIRuksXF/uodVXuNiV3DG6o=
Subject key identifier:   1C:34:A2:22:5C:AF:A4:E2:4F:4D:7C:02:42:D6:02:D7:5D:D5:67:31
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer:       /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial:       019EB76A5A3C3DD1D2C8C8A03BBE0E137062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number:          0B99
Signing time:             Thu 11 Jun 2026 16:01:00 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:00 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:00 +0000
Files and hashes:         1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=)
                          2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: IJWCsr2utplayux+i9YEc+Ja8XPDRd0Qq6PrVfdVEv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:5a:3c:3d:d1:d2:c8:c8:a0:3b:be:0e:13:70:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Validity
            Not Before: Jun 11 16:01:00 2026 GMT
            Not After : Jun 12 16:01:00 2026 GMT
        Subject: CN=1c34a2225cafa4e24f4d7c0242d602d75dd56731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f6:e7:75:c6:30:e7:89:77:5e:83:21:7b:f1:
                    4a:22:30:6b:91:f6:55:af:d3:62:f8:9a:88:39:71:
                    3d:6f:34:59:f9:88:fb:17:0d:c1:b6:4a:25:e1:e4:
                    06:f8:69:5f:b7:a0:90:fd:41:3e:bb:93:e9:c7:45:
                    19:22:41:85:a8:e6:d2:4c:18:b1:c8:14:95:6b:fe:
                    c9:d1:fd:09:bd:53:69:64:23:06:ff:d9:81:62:b2:
                    49:52:1b:76:5d:76:6a:e9:80:01:a6:cb:7c:5a:c8:
                    b4:49:ab:b6:4d:53:ea:d9:3b:96:ea:ce:2d:1a:1f:
                    6d:f4:6f:8f:9a:62:f9:f7:1d:47:8e:bc:01:d4:dc:
                    eb:66:b1:81:7e:47:7f:83:42:85:e2:84:18:b1:9d:
                    51:aa:ed:91:4e:35:6e:e1:86:47:75:94:5f:26:ad:
                    7c:d0:42:a4:60:d0:fe:17:de:30:4c:61:cb:ac:98:
                    13:7c:8d:f4:3e:16:7c:dd:cf:fb:cf:0d:8c:c7:87:
                    4d:29:3d:b4:1e:f8:08:db:98:a5:8f:09:a6:83:c1:
                    38:d2:a9:25:ff:73:08:c2:aa:eb:6e:84:83:0c:dc:
                    07:4c:af:93:0e:4d:dd:f8:2b:66:c9:dd:cb:69:34:
                    74:0e:7d:0c:c2:87:5b:9c:11:d6:41:3a:9b:e9:99:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:34:A2:22:5C:AF:A4:E2:4F:4D:7C:02:42:D6:02:D7:5D:D5:67:31
            X509v3 Authority Key Identifier:
                keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e6:cc:38:eb:98:1a:d1:b1:c9:19:5d:3e:b5:21:e1:d4:b1:
         d0:59:ac:d5:28:4f:ba:91:aa:e7:d4:f1:2b:06:72:a1:e1:ce:
         12:75:45:d6:4b:e6:6c:d3:bc:8d:87:94:16:6c:8b:e3:42:25:
         20:2d:ca:9a:81:f1:c3:df:73:b2:d5:29:f8:67:86:f2:60:f4:
         86:80:54:c7:6c:49:9c:c5:1f:47:fe:7f:fb:24:e8:a2:72:02:
         52:92:e9:a3:94:8d:6b:38:ff:61:65:be:9a:d7:e5:d3:27:b9:
         4f:de:a6:15:d9:09:e3:81:90:b2:ad:19:11:73:93:7f:20:d3:
         fa:de:e4:62:f9:fb:ee:2d:ff:3a:cb:35:6f:e8:47:21:6a:ee:
         94:54:7f:bd:b8:ed:7f:a0:88:e7:fa:10:b2:4e:54:cc:ec:0e:
         22:4c:c4:00:07:d6:a8:0b:bf:39:f3:5d:04:f5:75:15:fd:93:
         8e:72:d5:57:d7:1d:30:66:a4:98:1e:4b:0f:22:f5:63:b3:2f:
         b5:e1:67:f0:89:d1:75:b5:ac:4d:6c:54:7b:12:a1:48:d5:61:
         d1:a6:ee:f8:e1:46:e7:30:5a:a1:e7:68:b9:9c:af:02:76:9c:
         4e:f7:58:49:77:3d:41:67:33:3d:96:77:27:df:0b:04:1d:3c:
         dc:3e:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:59 2026 by rpki-client