Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File:                     9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier:          r5ILGhLWPcj5n8X568FCfZ5eK32RrCAK3bfWL1dxcig=
Subject key identifier:   AF:5F:2C:A7:DA:A5:C5:71:6D:72:24:1A:8B:29:69:61:18:D2:9D:BF
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer:       /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial:       019EBFC89F0E52CE97826D2CBFDD8A4AF874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number:          1087
Signing time:             Sat 13 Jun 2026 07:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:56 +0000
Files and hashes:         1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: i1+8Z2q6mn+srUSa1TUQB1NW9Wb/GQyvqNkGpVyLi5c=)
                          2: ylsyREe54U569Cbya5kHu3je-G4.asa (hash: 6/SDvz7I7Rk9Q9eges7LMoyhQg8zkiVuxvYbU53cDDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:9f:0e:52:ce:97:82:6d:2c:bf:dd:8a:4a:f8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
        Validity
            Not Before: Jun 13 07:00:56 2026 GMT
            Not After : Jun 14 07:00:56 2026 GMT
        Subject: CN=af5f2ca7daa5c5716d72241a8b29696118d29dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:72:75:2a:f0:96:86:74:66:73:d9:8a:f4:
                    a3:2b:f8:99:88:47:df:d8:a5:0b:1e:e2:b0:c3:8b:
                    0b:12:e8:14:99:53:f9:45:0c:15:f6:c0:0a:93:5d:
                    ca:48:fa:77:f7:1a:04:b2:ec:d4:57:4c:a5:a3:ad:
                    3c:c3:b7:aa:16:bd:06:57:a5:b9:13:f4:8d:72:eb:
                    6b:c3:36:6b:2c:08:90:ce:d8:4f:fc:73:ad:8c:3e:
                    46:4f:71:80:9e:87:bd:0b:c9:1d:3e:9a:a5:11:21:
                    da:e8:04:1d:43:f8:3c:0b:e1:52:c6:3b:72:16:bb:
                    b5:05:6f:4a:9f:d8:be:9b:bb:a2:03:7e:40:84:be:
                    5a:ab:6f:51:78:7f:0b:5a:e5:19:69:74:3b:57:fd:
                    05:ae:de:90:20:ac:54:68:59:6a:ea:e3:05:76:44:
                    96:be:55:ae:52:f9:34:14:85:24:b9:11:15:70:14:
                    da:51:2d:2e:20:6c:7d:2c:0e:b8:51:92:98:e9:27:
                    f3:49:77:d2:c1:f3:7f:29:ec:73:74:e3:54:15:90:
                    15:c7:d4:5e:ba:69:15:7a:b9:5f:d4:df:8d:2b:9b:
                    07:9a:cb:29:5c:d1:20:65:b4:01:4a:05:31:9d:6d:
                    43:fa:5d:04:7f:0d:fa:1b:a5:d4:cb:8e:51:6d:26:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5F:2C:A7:DA:A5:C5:71:6D:72:24:1A:8B:29:69:61:18:D2:9D:BF
            X509v3 Authority Key Identifier:
                keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b3:60:c6:6b:87:57:e0:ba:79:ec:bb:74:a8:8c:60:44:7e:
         95:c4:e8:4c:c3:a6:1a:e4:d9:c8:f3:de:9b:01:ef:92:30:00:
         f2:8d:d6:8c:51:18:87:3d:49:38:e1:ec:af:91:30:25:47:98:
         9c:e4:1f:3a:fe:98:e5:92:29:12:7a:f2:95:42:85:8c:4a:30:
         d0:14:00:1e:75:36:b2:e4:89:90:ec:86:5d:08:db:54:e7:2c:
         b1:9f:3e:db:05:b2:df:b7:3d:39:67:a4:48:34:a1:7f:24:88:
         6a:d6:29:27:d0:95:29:88:71:45:46:cc:62:70:1b:54:40:5b:
         a1:f5:59:77:58:34:6b:e0:3a:c0:57:6b:e1:8e:f9:87:f5:51:
         ad:f5:90:5e:38:ae:07:ba:85:a2:04:51:77:ba:d5:b5:b2:33:
         01:56:af:88:90:f9:a0:45:40:ad:d0:b7:34:fa:96:3a:76:b9:
         27:59:8a:9a:6e:bf:d8:46:4a:66:c7:78:9a:fa:ff:8b:57:e1:
         04:b3:ac:89:de:4f:7d:9f:e3:26:ef:8d:0f:8e:96:17:b1:5c:
         73:e1:2a:89:d6:23:85:3b:d8:ea:99:c2:21:91:03:69:a4:02:
         62:c1:a8:76:dd:30:ed:11:aa:fc:0a:d1:a7:ba:b3:ae:04:e5:
         d9:f2:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:14:23 2026 by rpki-client