Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File:                     H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier:          fPqK/5PA7LJZS5mmSp12vzXHamGW1Ml1th5/jrNL1ks=
Subject key identifier:   76:BC:33:41:3B:84:02:8C:86:07:66:F2:E0:11:45:22:6F:0D:FD:BE
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer:       /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial:       019EB8B4A82649F3D4C21466E82E15AD948A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number:          0927
Signing time:             Thu 11 Jun 2026 22:01:47 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:47 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:47 +0000
Files and hashes:         1: CaBEFYDtaQzQxhyXo4MA7Dtx2rE.roa (hash: knYWc/a4bI5GtK7g0Qth1pZAN74E2q8jYjqFwaqxRKI=)
                          2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: rXTtxfXcqOYQepF2lj1ocM/p+bFh+SP2daYzfs4DCz0=)
                          3: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
                          4: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:a8:26:49:f3:d4:c2:14:66:e8:2e:15:ad:94:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
        Validity
            Not Before: Jun 11 22:01:47 2026 GMT
            Not After : Jun 12 22:01:47 2026 GMT
        Subject: CN=76bc33413b84028c860766f2e01145226f0dfdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:9e:4f:3b:a2:eb:51:2b:36:68:12:51:9c:
                    55:d3:d9:74:5c:b7:f8:b2:81:1b:d2:b9:25:2f:25:
                    1f:6f:15:34:1d:e8:cc:2b:a7:f3:21:52:de:ed:91:
                    a2:7e:f2:a4:b3:13:d5:40:59:62:c8:88:ae:6d:d6:
                    7d:68:2e:a9:0e:88:39:bf:24:b2:0c:0c:84:12:70:
                    1a:90:b5:c1:f6:f3:90:fa:b6:a6:3e:79:93:1d:e3:
                    a4:9d:4f:5c:ff:ec:c1:3e:bd:b7:bd:40:43:30:ad:
                    80:5c:fe:8f:e7:2f:66:7b:f0:62:95:6f:a6:c5:8f:
                    fb:4c:30:ab:6f:80:4c:6e:7c:e9:ad:d3:c4:a5:b4:
                    9a:72:a1:53:12:e9:da:c3:7f:09:a4:45:f0:c0:2c:
                    81:78:27:ec:73:0d:62:8e:ba:c9:b2:3d:17:0c:5f:
                    8b:26:1f:a3:73:3d:7b:7a:8a:af:58:16:82:f1:83:
                    be:ba:2d:ee:e3:29:14:3d:5a:a3:7c:9f:3a:29:c4:
                    8c:70:71:8f:29:33:3f:58:6e:fe:8b:28:b3:d7:61:
                    94:8b:99:bc:60:9b:62:f6:56:35:8a:d9:01:7c:93:
                    45:82:0b:de:10:52:c7:1c:00:e4:54:b9:7a:27:61:
                    4f:0a:72:9c:96:3d:d3:af:0d:84:ff:41:de:8c:78:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:33:41:3B:84:02:8C:86:07:66:F2:E0:11:45:22:6F:0D:FD:BE
            X509v3 Authority Key Identifier:
                keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a5:e9:3c:ab:ab:b3:60:34:fc:29:73:ce:8a:f0:be:71:17:
         a1:00:78:99:ed:bc:b2:0b:6f:53:a4:5d:50:b9:7a:b1:9e:82:
         9c:c1:70:ab:b6:c9:f7:12:a9:5f:13:ab:22:a8:e7:df:24:4e:
         81:d1:0d:98:c0:76:fc:f6:44:41:db:30:ba:00:49:38:27:93:
         ad:a1:e9:86:e5:95:cb:fa:b5:c8:f8:68:61:12:80:66:bd:f1:
         1a:87:59:09:2f:a6:69:92:30:ef:b5:d5:21:9a:1a:44:63:28:
         6b:0d:a6:a9:38:26:df:ab:c7:2f:cd:d9:96:77:a9:61:3a:75:
         ee:f3:4d:ff:14:bf:3e:1c:3b:49:95:f0:0a:41:fd:e6:ff:3f:
         40:3c:17:c8:67:65:7e:9a:3e:56:1a:bb:ca:ca:86:40:3f:ae:
         d1:ab:f8:3b:af:67:03:2c:d8:50:1d:88:2b:67:c3:d8:41:e1:
         ca:cc:c6:43:b1:c3:11:21:9e:2e:f4:fc:f5:67:03:98:2f:a2:
         6b:10:1d:c0:d2:1a:6b:af:d0:72:24:58:01:64:9c:da:a9:7f:
         b1:e2:de:8d:21:f7:e5:d3:d1:d1:5c:ee:d9:9f:8b:88:89:4d:
         5d:fa:28:ed:2f:b0:4a:d6:a4:3f:90:95:c9:be:36:6c:1d:34:
         ea:16:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:18 2026 by rpki-client