Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File:                     9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier:          OjD1aCFFR9kYGUKkmwLI43TbsNFFrn2HrbYzGLNgocI=
Subject key identifier:   B5:0E:3C:CF:CE:20:2C:A9:60:49:41:9A:2D:9F:09:37:13:2E:22:54
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer:       /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial:       019EBFC866681ADB05218E3993E0EB3D2EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 07:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:42 +0000
Files and hashes:         1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: Y7xHCWk4C1KLxMkK4aV2VleEWvXgBgf2Sz5FE4SYPBA=)
                          2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:66:68:1a:db:05:21:8e:39:93:e0:eb:3d:2e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
        Validity
            Not Before: Jun 13 07:00:42 2026 GMT
            Not After : Jun 14 07:00:42 2026 GMT
        Subject: CN=b50e3ccfce202ca96049419a2d9f0937132e2254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:c5:f3:60:6c:19:6c:9b:6b:45:f5:7d:b9:
                    70:d5:c4:d5:39:4b:1f:e1:c9:2d:75:1c:e7:bd:a4:
                    45:ca:09:d8:b3:93:8b:d7:2e:52:bf:3c:38:1b:e0:
                    64:2f:ee:d9:82:97:81:73:87:a3:9c:b0:ca:df:66:
                    f1:92:fd:a7:8d:8a:98:86:f9:71:94:30:39:fe:aa:
                    fe:18:a1:fe:14:aa:16:0a:55:93:28:1f:eb:d7:d5:
                    4f:d6:08:9c:54:cb:78:b0:41:d2:ea:4d:4f:8a:5c:
                    77:90:e4:13:c5:36:70:de:6a:f5:70:b0:39:c7:bd:
                    7e:7a:29:34:36:c6:6e:97:da:ee:75:69:40:5d:a4:
                    33:3f:d5:25:a0:f5:96:f8:31:b9:2c:dd:e6:48:5a:
                    bb:70:3a:97:7a:6b:88:f6:d2:2e:f1:d4:fa:8d:aa:
                    6f:ec:39:c5:0a:86:df:55:54:5e:8d:59:44:7a:17:
                    82:6f:6f:77:62:46:63:ee:8c:0c:f9:7a:36:34:cd:
                    cf:b2:ff:51:9b:7b:3b:9a:b1:6e:8d:12:3c:13:73:
                    e9:d9:55:e4:65:aa:90:9d:02:c1:0c:71:4c:96:95:
                    71:bf:7e:a0:3d:b9:5a:ff:4b:ac:9d:8d:97:3a:b8:
                    dc:3b:d8:0d:b5:76:c0:05:c7:9c:ed:bc:e8:19:1e:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0E:3C:CF:CE:20:2C:A9:60:49:41:9A:2D:9F:09:37:13:2E:22:54
            X509v3 Authority Key Identifier:
                keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:5d:79:40:b2:3b:36:cc:52:b0:5f:8b:c9:ca:43:78:65:
         b7:26:32:b3:ea:09:77:9d:66:ec:a6:58:11:b7:2d:90:18:fd:
         a8:ba:c0:1c:d8:a8:0a:0f:e9:19:2f:83:31:ad:73:06:66:a4:
         54:b7:37:15:a6:e3:a5:99:2a:36:c0:44:b3:75:24:57:35:09:
         7a:2f:9c:5f:91:09:dc:d1:a7:98:9b:5e:44:d7:0d:de:97:5e:
         8a:67:f1:8a:e3:71:dc:66:7d:c2:e7:ee:93:06:57:4a:82:a3:
         92:5a:d6:fd:3e:6f:2d:32:60:87:f2:35:38:71:56:1b:9d:ef:
         ca:92:36:b8:4f:63:af:be:92:be:b6:6c:ae:d8:80:d8:e3:b6:
         07:ce:13:ba:cb:08:1e:2f:59:b9:b1:b7:97:40:a9:a0:c7:82:
         8e:f3:d4:42:4a:95:33:da:21:77:4c:b3:7e:6f:0f:cd:bc:f9:
         2f:6a:f5:3b:27:7c:68:8f:ba:0d:d8:9c:cf:cb:23:24:8d:c7:
         de:5a:1a:8c:bd:93:f7:da:8c:0f:9f:1a:52:4f:ed:4b:b4:4c:
         61:60:9a:bf:74:4c:56:f2:1c:eb:bb:6b:49:82:73:1f:bd:77:
         17:c9:8f:0c:d5:be:4d:05:7c:51:d0:81:9b:67:e2:10:5e:8a:
         c0:a6:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:50:14 2026 by rpki-client