Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File:                     9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier:          O+LSA1sUouMzMTrKt7WrRm50BmEz3GLc30twkAz4Ehk=
Subject key identifier:   D0:E4:83:02:6C:63:F3:E1:5B:10:55:0E:17:89:4C:85:C3:08:C2:4C
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer:       /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial:       019EC0A3AA9C06F2E1E7F639BB6D419A2BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 11:00:11 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:11 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:11 +0000
Files and hashes:         1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: 2ZepO0i7dpCLCQ4ocWSu1qBoOEEqTuw69YRNc/8LV0o=)
                          2: GNmi18wQl4vtlo-9lVpDdUD44U8.roa (hash: PX3LxFRdOujIRS22JaSLS22PgqGNSnD4VtofU70m2Ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:aa:9c:06:f2:e1:e7:f6:39:bb:6d:41:9a:2b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
        Validity
            Not Before: Jun 13 11:00:11 2026 GMT
            Not After : Jun 14 11:00:11 2026 GMT
        Subject: CN=d0e483026c63f3e15b10550e17894c85c308c24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:ea:f4:97:60:c2:1a:89:5b:bd:84:13:b3:
                    05:da:ed:e4:99:cc:f9:d3:47:03:f8:8d:64:36:61:
                    45:24:32:f1:45:46:af:65:21:32:f5:a2:79:89:e9:
                    d0:43:72:50:b2:94:5c:ca:70:26:a5:32:67:08:1e:
                    d1:97:80:22:65:0d:3d:cc:49:ae:4d:d4:66:72:74:
                    79:90:18:6c:7c:e5:1a:67:7f:be:38:30:73:24:eb:
                    01:9a:e8:cd:11:fe:df:fd:08:79:ff:d1:96:d9:fc:
                    13:c6:ce:d0:06:26:9f:44:2a:63:ed:2f:16:54:4e:
                    d7:44:14:37:5e:35:7d:73:31:4f:f4:92:8f:db:e4:
                    40:cc:7b:ff:83:93:7e:75:b8:ee:50:97:6f:f0:e7:
                    7f:af:0c:24:78:09:d9:f3:38:d0:31:5e:b9:5a:28:
                    28:37:98:09:b4:e9:d5:eb:27:15:b6:c2:b4:d8:30:
                    24:15:42:c8:90:1d:59:d2:5a:7b:63:12:d3:af:8c:
                    ae:59:61:ac:f9:a3:26:94:ac:25:67:3c:17:3a:36:
                    60:8d:12:03:4a:12:91:cc:0e:b9:dd:57:ec:77:5f:
                    1c:48:9c:81:86:96:dc:6a:98:6a:8c:5a:90:2c:e2:
                    1e:bc:d0:e2:85:62:bb:be:85:fd:96:84:05:b1:c3:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E4:83:02:6C:63:F3:E1:5B:10:55:0E:17:89:4C:85:C3:08:C2:4C
            X509v3 Authority Key Identifier:
                keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e1:c1:36:56:7f:45:b5:95:12:37:f8:ab:99:8d:3e:75:0d:
         94:23:b8:10:f6:d4:f7:82:f4:87:c7:69:b5:f5:1a:1c:88:b3:
         52:82:d6:22:e5:a1:6a:d6:2e:a2:d1:f4:43:0d:be:db:07:f1:
         90:ef:6c:ad:c4:2f:54:f7:aa:4b:c3:99:98:84:37:02:6c:dd:
         f2:61:c9:e1:32:3b:e1:aa:ca:66:93:09:44:6b:7f:26:ed:98:
         ee:aa:29:c5:69:9b:c9:d8:55:c5:84:21:32:c9:65:d0:2c:1a:
         46:e2:9e:26:89:2d:b6:1b:94:4e:c1:80:b8:fa:70:d1:82:3c:
         f0:0f:29:42:6a:cb:ff:ea:49:74:cb:b6:31:bf:24:85:3f:97:
         89:c2:da:b1:60:ed:a5:b0:90:2a:5b:e2:c1:87:a6:49:26:c1:
         a7:29:6a:ac:df:2f:d1:fb:74:16:ef:2e:de:fd:06:47:d8:2c:
         2f:95:8e:34:88:1e:06:3d:9d:5e:eb:2f:9c:ae:b0:69:29:72:
         fc:09:69:7b:c6:13:fe:57:b8:6a:ae:e2:96:88:2b:9c:21:6f:
         d6:10:24:09:f2:af:2d:9d:96:47:0a:f1:5e:6e:84:ed:e6:37:
         66:63:34:55:c9:d9:37:26:69:0c:ee:27:08:d1:b1:1c:9f:46:
         f0:f7:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:32:34 2026 by rpki-client