Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File:                     9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier:          HNxg7Qu01aVrBZbZ0JUTO5fIFDAxGwkA3tlhIeOeB+c=
Subject key identifier:   1E:E6:E1:E0:81:C8:36:99:23:DB:C7:95:AC:73:CF:09:6D:69:55:40
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer:       /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial:       019EC2C9E3B7423DC0700E0C42381AE855E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number:          1871
Signing time:             Sat 13 Jun 2026 21:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:11 +0000
Files and hashes:         1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: uXirlRkaAov/fCnZGd3FbewnWU4tiQinYp07bxf1I4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:e3:b7:42:3d:c0:70:0e:0c:42:38:1a:e8:55:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
        Validity
            Not Before: Jun 13 21:01:11 2026 GMT
            Not After : Jun 14 21:01:11 2026 GMT
        Subject: CN=1ee6e1e081c8369923dbc795ac73cf096d695540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:71:fc:72:5f:9e:c9:e8:c4:d6:f8:0c:a0:
                    e8:b4:08:77:5c:cc:64:fc:ee:7f:d0:8c:af:00:18:
                    4a:5e:26:a0:ee:5a:f3:7d:ea:c1:a7:80:d6:89:2d:
                    60:84:86:e0:d9:cf:b7:56:52:2b:b3:3b:01:45:78:
                    8b:76:02:a7:7b:cb:b6:26:18:0c:84:d2:f6:51:fe:
                    09:03:e4:4e:09:7d:cd:74:46:ca:f3:b3:57:aa:f8:
                    c1:e8:aa:f8:1a:af:ae:7d:17:59:9d:df:91:70:2b:
                    63:c7:e0:f1:1d:eb:c1:cb:77:ad:82:8c:a1:a6:9a:
                    5e:2b:6e:ad:13:72:b2:a7:65:76:ca:a2:a6:51:bf:
                    01:d9:e5:1e:cc:f5:32:78:30:0a:9d:c1:36:7e:47:
                    fd:91:8a:e7:1e:81:39:a2:4a:67:59:2c:13:18:32:
                    8c:3e:1d:e7:46:f1:78:d7:21:d6:2c:2f:c5:26:ed:
                    29:23:ed:c4:ea:61:ea:1f:d0:a5:21:81:a8:88:bf:
                    4e:ce:f0:08:47:9d:b1:2d:b8:19:3d:81:ff:1c:1b:
                    5a:65:e8:28:c7:b3:24:4b:60:22:f3:af:2f:48:7b:
                    52:0e:9e:89:6f:13:01:86:86:8e:f7:61:a5:10:36:
                    47:93:04:ce:e6:de:e7:1b:86:95:f4:b2:53:6e:06:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E6:E1:E0:81:C8:36:99:23:DB:C7:95:AC:73:CF:09:6D:69:55:40
            X509v3 Authority Key Identifier:
                keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:35:30:41:2e:a3:eb:7f:64:02:db:fe:3d:fe:8b:c5:0e:
         2a:84:e3:48:26:e8:aa:7e:b0:bd:f9:9f:ee:14:35:16:dc:f8:
         77:f9:f6:93:66:3b:1d:f5:01:66:11:88:19:98:8f:cc:45:ba:
         f7:92:9e:9e:04:b2:d4:67:a5:cb:04:fe:37:b4:b9:42:6a:61:
         e5:1d:a4:82:93:40:5e:d8:64:39:9e:46:d9:63:75:dd:92:a6:
         b3:1d:b9:e1:88:11:48:e4:b4:f8:75:28:43:bf:c3:ac:69:16:
         ec:e5:9d:b6:e8:9c:1b:9c:10:c9:1f:2d:6a:02:9f:f1:6e:58:
         9d:27:eb:00:bc:28:4a:65:12:67:60:7e:48:a3:37:4e:80:cb:
         27:b9:18:2a:77:6b:fa:0a:b9:10:2f:ea:82:59:7f:fe:17:4b:
         9d:5a:17:45:63:b7:88:75:42:86:54:c3:f7:37:12:11:1b:b2:
         6b:bf:b6:80:20:39:6c:7f:0d:2a:70:a2:2c:53:f0:07:04:97:
         a1:e0:0f:4d:3b:43:fa:c4:d7:2c:c7:51:54:3e:b5:8e:43:f1:
         5f:f3:e8:25:a4:6e:9b:b5:32:d5:20:31:63:5d:26:02:c5:f7:
         58:5b:d3:93:0d:d4:af:00:35:1d:09:63:58:23:39:ca:9f:ea:
         0d:c0:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:30:13 2026 by rpki-client