Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File:                     F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier:          d+r+j+Z0c8R/Wyk4FRcr2N0EXmOJFYrUm+8sjrdOFLM=
Subject key identifier:   EE:65:0D:13:93:C0:5D:12:AE:B0:C1:45:C1:E5:B2:DF:43:CD:8E:DD
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer:       /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial:       019EC1489CDB95B5AB2F5657905E3877B152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number:          0871
Signing time:             Sat 13 Jun 2026 14:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:21 +0000
Files and hashes:         1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: ykEX0i2VUGZR00Gf1fMmJY291+W8npmmk5QPrivpSH4=)
                          2: eCUldEuVJ_0jxDI76Og1yPBef88.roa (hash: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:9c:db:95:b5:ab:2f:56:57:90:5e:38:77:b1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
        Validity
            Not Before: Jun 13 14:00:21 2026 GMT
            Not After : Jun 14 14:00:21 2026 GMT
        Subject: CN=ee650d1393c05d12aeb0c145c1e5b2df43cd8edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:e9:67:85:8c:4b:ca:ff:b1:7b:ec:14:cf:
                    ce:8c:04:e0:ec:16:e0:16:56:f6:4c:ae:b0:e4:4d:
                    f4:7d:e8:93:0c:bd:e4:e0:24:d1:ae:27:b2:cf:54:
                    1c:e2:c9:9d:21:49:13:52:ac:fb:b0:eb:bb:99:28:
                    c3:d6:7f:ff:b5:56:ac:92:8b:03:34:cf:e3:87:3e:
                    24:dd:14:dc:d0:c3:50:b1:1d:41:13:00:de:9a:c5:
                    d6:32:cc:3b:25:98:61:87:fe:5e:94:c4:b9:62:fd:
                    40:24:4f:0b:54:d3:7f:db:a4:b6:ed:cf:33:35:e3:
                    d6:19:51:90:27:55:bf:95:01:72:be:aa:64:22:6b:
                    bf:7c:e1:99:98:ac:e4:55:c8:56:66:9e:73:85:64:
                    5e:00:ea:95:a4:5f:40:05:7e:a8:ed:96:af:54:57:
                    88:50:ef:8b:8e:27:c7:5d:28:f2:1f:4b:22:ef:04:
                    ec:21:a6:7a:7e:91:a3:21:ba:aa:69:c9:06:86:d7:
                    51:32:61:23:a2:cd:a3:59:b7:f6:fd:78:38:f9:f0:
                    6f:bf:f6:f4:78:0b:64:32:04:ca:1c:98:70:04:8e:
                    8e:63:e8:73:99:73:a4:3b:43:60:6a:6a:90:99:bf:
                    4c:50:a1:84:3e:92:9e:d2:a9:90:ad:07:73:e1:57:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:0D:13:93:C0:5D:12:AE:B0:C1:45:C1:E5:B2:DF:43:CD:8E:DD
            X509v3 Authority Key Identifier:
                keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:98:75:fb:42:69:e3:a0:58:94:f4:48:48:68:d7:59:f7:76:
         94:5d:48:89:84:d9:45:f3:66:97:83:da:52:d0:07:ed:1e:fa:
         4a:9c:5c:3a:1d:84:42:63:86:69:9c:3f:a9:2b:85:8d:c3:bb:
         06:7a:e3:8d:2a:04:a0:e4:d3:e2:3d:5f:48:a8:e6:21:d2:39:
         ea:ca:93:f9:34:4f:dd:3c:6f:2f:0a:13:e9:37:44:36:0e:5a:
         2b:ce:92:ec:50:fa:f5:c1:e0:b5:99:a6:d9:8a:05:17:2e:af:
         50:47:a4:29:28:9f:af:6f:01:af:74:7f:f2:74:12:70:0e:05:
         5b:f3:8f:c7:36:f6:18:11:3a:53:18:41:09:ca:bd:ea:03:72:
         e4:ae:4a:15:7e:a5:a1:8a:35:92:8a:f8:33:c0:f1:43:b4:88:
         8d:af:6d:e0:e2:b1:b9:67:07:7a:58:98:9a:e3:35:1a:1f:8e:
         da:16:c2:78:ed:5f:38:73:f9:32:31:6d:9c:26:7e:c6:40:62:
         f2:00:45:de:64:04:55:f8:4d:69:76:2c:82:7a:94:ac:43:1f:
         b9:8e:45:3b:38:08:b9:79:85:a2:cc:5f:8b:bd:58:ce:a6:2e:
         db:5a:f0:5c:bc:b0:64:80:d0:f7:f0:28:ef:e5:48:eb:e7:c2:
         9c:dc:5c:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSJzblbWrL1ZXkF44d7FSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk
MDRiOTUwHhcNMjYwNjEzMTQwMDIxWhcNMjYwNjE0MTQwMDIxWjAzMTEwLwYDVQQD
EyhlZTY1MGQxMzkzYzA1ZDEyYWViMGMxNDVjMWU1YjJkZjQzY2Q4ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtprpZ4WMS8r/sXvsFM/OjATg7Bbg
Flb2TK6w5E30feiTDL3k4CTRrieyz1Qc4smdIUkTUqz7sOu7mSjD1n//tVaskosD
NM/jhz4k3RTc0MNQsR1BEwDemsXWMsw7JZhhh/5elMS5Yv1AJE8LVNN/26S27c8z
NePWGVGQJ1W/lQFyvqpkImu/fOGZmKzkVchWZp5zhWReAOqVpF9ABX6o7ZavVFeI
UO+LjifHXSjyH0si7wTsIaZ6fpGjIbqqackGhtdRMmEjos2jWbf2/Xg4+fBvv/b0
eAtkMgTKHJhwBI6OY+hzmXOkO0NgamqQmb9MUKGEPpKe0qmQrQdz4VfMEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5lDROTwF0SrrDBRcHlst9DzY7dMB8GA1UdIwQY
MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt
ZGZiYjZlYzM0MzBlLzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl
LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5h1+0Jp
46BYlPRISGjXWfd2lF1IiYTZRfNml4PaUtAH7R76SpxcOh2EQmOGaZw/qSuFjcO7
BnrjjSoEoOTT4j1fSKjmIdI56sqT+TRP3TxvLwoT6TdENg5aK86S7FD69cHgtZmm
2YoFFy6vUEekKSifr28Br3R/8nQScA4FW/OPxzb2GBE6UxhBCcq96gNy5K5KFX6l
oYo1kor4M8DxQ7SIja9t4OKxuWcHeliYmuM1Gh+O2hbCeO1fOHP5MjFtnCZ+xkBi
8gBF3mQEVfhNaXYsgnqUrEMfuY5FOzgIuXmFosxfi71YzqYu21rwXLywZIDQ9/Ao
7+VI6+fCnNxc+w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:06 2026 by rpki-client