Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File:                     m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier:          36YWu40Wkldq+NGtnusPm8Q/Dg2bpqF0wSPWhOoQ/nM=
Subject key identifier:   CA:84:C7:ED:87:9E:34:71:2A:0A:11:5B:BE:10:03:A8:EE:8A:BE:0A
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer:       /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial:       019EB9214A03FCBBE11342A2006B82345723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number:          0FD7
Signing time:             Fri 12 Jun 2026 00:00:26 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:26 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:26 +0000
Files and hashes:         1: K9jBWJnPFWyovoVVDNOHvTVTaLM.roa (hash: K3SUQLFC2Lr1L1GFZeysffhTkVWpSG3Bk2hiWWGhkrI=)
                          2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: o+UQdIf0eXggj4iNc2nwRnDEXIxmw0qxO8hVCt2Gqnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:4a:03:fc:bb:e1:13:42:a2:00:6b:82:34:57:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
        Validity
            Not Before: Jun 12 00:00:26 2026 GMT
            Not After : Jun 13 00:00:26 2026 GMT
        Subject: CN=ca84c7ed879e34712a0a115bbe1003a8ee8abe0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:13:85:0c:34:02:5e:d1:5a:c5:f3:6c:c4:cf:
                    6a:b5:c5:1f:80:6e:b0:82:96:f6:c5:3a:25:4b:60:
                    d7:5e:25:30:f0:ca:b9:8c:8d:f4:f8:e9:e5:8d:62:
                    d9:15:58:44:3f:f9:58:a5:2c:b4:85:95:93:21:fe:
                    5c:69:58:50:7f:c1:28:a6:53:dd:96:ad:7a:2f:50:
                    ea:6e:e1:b9:c8:cb:24:2f:c1:a3:51:59:fe:e3:6c:
                    fb:54:3d:ef:49:2a:c2:72:8c:8c:b2:e6:ac:e6:14:
                    e9:e1:9d:00:b8:30:5c:c0:cf:9e:e0:80:f6:73:c4:
                    ec:d0:6d:02:11:6d:5d:38:c5:bf:ab:4d:79:70:6e:
                    42:84:ed:73:15:78:bb:ec:a6:30:f5:cd:c4:66:75:
                    ff:7e:59:35:72:79:99:00:70:fa:be:b0:9a:bc:e9:
                    e2:75:a3:46:84:bd:26:f5:f0:ba:69:ff:a8:12:c9:
                    14:97:10:a6:21:37:48:cc:60:02:89:0f:ed:c5:a6:
                    50:43:69:d3:77:7f:e5:3f:89:83:ce:05:01:d7:5d:
                    be:3c:ac:4d:f2:90:ac:a2:f9:1c:25:9e:8f:2a:a1:
                    13:58:59:ac:03:19:52:85:30:55:af:0b:67:2c:96:
                    8d:07:20:24:46:bc:90:2c:9f:1d:b7:77:4d:3e:b7:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:C7:ED:87:9E:34:71:2A:0A:11:5B:BE:10:03:A8:EE:8A:BE:0A
            X509v3 Authority Key Identifier:
                keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:92:26:55:f7:a5:5d:f5:d0:30:4a:99:b4:30:5a:a3:d9:fa:
         e9:4b:0e:3b:98:25:09:1d:dd:c4:a1:ec:62:76:76:b5:36:da:
         80:ff:7d:d4:ae:6c:93:e8:33:f4:ba:07:86:c6:7a:63:ee:6f:
         53:10:5c:c1:2b:4e:2e:36:fb:e0:8a:f4:50:fa:bb:89:96:1f:
         c6:5c:12:fe:db:13:62:af:a9:b8:af:30:a7:94:88:ca:d6:76:
         9b:a8:f5:12:d9:54:14:0c:60:a4:7c:31:e3:61:5c:d4:36:28:
         cd:3c:fc:73:50:67:f2:3a:38:1e:95:a2:f2:0d:04:3f:a2:ec:
         09:ee:4c:b0:c6:00:a0:a3:6e:44:bb:03:de:06:e2:cb:1c:38:
         5f:bf:ba:80:9c:51:12:2f:62:61:f0:d9:ef:f3:e3:a9:8a:0b:
         42:87:a5:ef:83:a8:a5:33:78:84:5e:84:93:7a:27:d6:1b:0a:
         80:fb:55:09:e3:57:0f:33:f0:2c:8f:fd:fd:12:7b:24:18:d0:
         9d:da:cc:aa:af:92:b6:25:30:c6:3e:fc:1c:4e:27:7a:c1:a8:
         2e:14:99:42:90:0b:0b:a5:a8:55:61:f5:0a:4c:e0:30:7d:d6:
         1e:42:8b:7f:31:a5:95:ab:2a:44:45:1b:cc:42:91:ab:35:a1:
         94:1d:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:18 2026 by rpki-client