Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File:                     9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier:          ZLWvJvv7qWpPTloHjSJCMp/0g4jaLMRY1omHGQ7HyYE=
Subject key identifier:   51:C3:37:F4:80:70:0A:A9:2D:62:34:D3:4E:2F:01:EF:78:CD:07:FD
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer:       /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial:       019EB98FA7969BFF188B9D1BF0EF17256DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number:          09BB
Signing time:             Fri 12 Jun 2026 02:00:59 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:59 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:59 +0000
Files and hashes:         1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
                          2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: 3oiyiD6qjWlDKhGu8zCW6Ffj9Kqi1s8gBjcsc7QKlaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:a7:96:9b:ff:18:8b:9d:1b:f0:ef:17:25:6d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
        Validity
            Not Before: Jun 12 02:00:59 2026 GMT
            Not After : Jun 13 02:00:59 2026 GMT
        Subject: CN=51c337f480700aa92d6234d34e2f01ef78cd07fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:7b:13:79:b1:b6:6d:c0:cd:be:31:ce:f2:
                    fd:28:e4:04:f0:48:09:78:07:6b:c4:7c:78:c2:ce:
                    c0:8c:ae:74:c3:c1:46:80:42:02:3b:00:e8:d5:fd:
                    eb:a0:c9:d9:6e:1e:94:07:49:3d:33:28:e3:b9:0f:
                    25:cc:29:32:a6:64:80:7a:ac:08:b8:4f:fa:d8:20:
                    ad:99:5c:84:35:bf:00:d9:12:e4:41:6d:25:c1:e5:
                    f6:66:c3:40:1b:fc:2a:1e:e6:60:50:b0:cb:ae:46:
                    26:9a:4d:aa:0b:21:42:ec:d3:3b:5e:51:e8:ce:35:
                    6c:1f:fd:cf:fe:d4:50:0b:dd:eb:ed:2f:dd:8b:39:
                    b3:f0:54:7d:d4:fb:18:9c:ad:38:06:fe:91:a4:f6:
                    8e:ec:97:de:68:dc:eb:d3:01:ec:9c:91:e7:d8:b0:
                    b6:ef:2b:7a:0b:56:42:ef:09:bf:8d:11:e2:3e:2b:
                    e6:b4:42:80:8d:1a:7f:25:6a:b8:91:03:c1:b4:4e:
                    44:28:f7:6a:21:5a:c1:31:a7:d1:52:31:d9:04:ef:
                    15:a1:26:5c:64:d6:a5:ba:85:27:66:48:c9:9a:d7:
                    e4:15:19:da:ab:64:9e:15:e1:2d:dc:a7:5f:a7:b7:
                    70:6e:27:fc:99:55:91:94:3f:45:5d:67:4f:f4:a6:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C3:37:F4:80:70:0A:A9:2D:62:34:D3:4E:2F:01:EF:78:CD:07:FD
            X509v3 Authority Key Identifier:
                keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:98:56:b1:54:d4:cb:10:36:08:0b:df:2b:35:66:85:52:af:
         2d:22:d8:03:04:25:5b:80:bc:45:dd:0f:46:0a:1f:89:09:9d:
         26:a5:8a:00:15:d1:8b:a2:67:56:79:05:f1:fb:3f:cc:f8:c5:
         6c:1a:6b:66:0d:dd:01:9f:4a:c9:d6:da:e0:29:42:50:c4:7a:
         c4:d0:b1:f2:23:e0:9a:34:46:06:d3:3e:8d:14:6e:7c:76:45:
         9d:10:16:ea:df:09:11:bc:d8:cc:52:85:e2:cb:24:73:23:8d:
         be:d5:25:a4:21:f3:73:3b:c4:a2:48:a0:e3:30:61:c8:2b:d6:
         5d:e6:1a:cc:ad:4a:f2:fc:09:ab:31:d5:9d:1c:98:63:11:c2:
         45:00:a5:a4:f1:cc:2b:c4:40:64:22:ec:be:32:ab:1c:c0:57:
         bf:e7:67:9a:95:f5:30:1f:cf:94:a5:dc:e8:10:34:1d:46:6b:
         6d:41:3b:23:d9:60:82:10:db:b1:df:10:b0:b0:9a:6e:4c:57:
         ae:00:99:72:5d:d5:7e:af:33:95:05:26:10:16:25:5c:03:35:
         bc:18:c2:e5:b9:33:a0:5b:58:cf:9c:96:97:ab:6a:a2:2b:fd:
         a7:53:4b:44:ca:a5:bf:48:f1:29:05:e4:c9:e3:e1:fa:02:b7:
         95:34:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:35 2026 by rpki-client