Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File:                     9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier:          Y76cFZvltL9dpLyRo5NgVBBA028iSqA643lM9nE2d1Y=
Subject key identifier:   0E:84:2A:B5:67:A8:6F:C5:2B:FD:84:2E:8B:7E:15:82:1A:68:E1:14
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer:       /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial:       019EC148C9FC035C0A828B3F96C30EA25B6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 14:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:33 +0000
Files and hashes:         1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: FJZRfOtwl0Pd/Z4CyNIpYOgQgHZreeHjV/fX/ozZ7VI=)
                          2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:c9:fc:03:5c:0a:82:8b:3f:96:c3:0e:a2:5b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
        Validity
            Not Before: Jun 13 14:00:33 2026 GMT
            Not After : Jun 14 14:00:33 2026 GMT
        Subject: CN=0e842ab567a86fc52bfd842e8b7e15821a68e114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:dd:74:5f:ec:fc:0a:a2:86:e0:a9:73:4a:
                    d8:56:68:19:5f:0c:fc:5d:46:7b:ff:de:e4:6e:e0:
                    07:e3:54:31:5b:a6:be:ba:c1:2d:a2:fd:c4:10:a4:
                    56:61:69:6c:ec:95:14:33:04:91:76:7c:60:22:0b:
                    2e:26:60:45:af:f9:58:73:73:74:05:55:f9:5e:6d:
                    16:5e:63:c7:37:62:29:c3:f7:2c:4c:5d:5f:1c:5a:
                    58:7b:7b:bd:f4:9b:dc:a8:6a:a6:de:b5:57:b9:2d:
                    2c:58:76:ec:d8:70:70:e3:4d:fa:45:2e:ce:fc:b3:
                    9d:e6:47:97:2a:7c:a6:b1:be:4c:64:06:88:c1:31:
                    66:9e:1f:72:a6:d3:7d:1c:5c:bc:c6:e9:5a:93:af:
                    6d:bf:68:49:15:0c:2e:9e:7a:df:49:83:df:92:db:
                    db:67:09:b8:8d:c4:38:4f:f1:4b:94:64:2b:f6:64:
                    6f:6e:70:72:75:f5:42:ce:d5:29:35:08:17:5a:5d:
                    b9:dc:f7:bb:1c:7a:17:17:cd:00:85:05:8c:bf:4a:
                    3e:a8:12:b6:8f:2f:c9:25:f8:c4:a1:42:e9:fe:ad:
                    e6:14:21:c4:e8:bf:07:57:4f:1c:58:f6:6f:b9:3b:
                    67:e9:89:2d:b9:76:03:fc:10:ea:33:91:cd:d1:9e:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:84:2A:B5:67:A8:6F:C5:2B:FD:84:2E:8B:7E:15:82:1A:68:E1:14
            X509v3 Authority Key Identifier:
                keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:da:3c:16:b3:47:cf:0e:4c:f0:2b:dd:f1:2b:34:bf:75:
         74:ac:7d:c4:21:be:a5:ea:3d:da:3f:88:85:af:54:b6:75:20:
         7b:1b:ad:61:1e:34:27:d8:3f:f0:5c:10:9a:3f:f2:1f:b5:4d:
         c8:34:f8:e0:a9:a1:2f:68:95:11:05:03:cc:d9:ec:0e:bb:db:
         ab:96:4e:4c:af:e0:43:2b:97:ba:15:05:ba:ed:42:be:e5:d1:
         78:5a:74:92:2c:bc:9c:05:8e:40:56:77:53:91:1d:7e:d2:04:
         f1:cd:b0:70:03:92:f6:23:21:66:9c:e2:26:95:0d:74:3e:b0:
         bf:0a:39:7e:79:08:af:8f:7e:52:75:e2:c5:78:a6:f0:ba:3f:
         c6:a2:08:7f:a3:6c:48:77:f0:e9:0a:1b:df:39:f0:3a:72:23:
         af:b8:c5:90:4f:79:dd:ed:23:25:82:7e:3c:d5:47:c5:e8:81:
         a1:e1:35:34:a3:38:17:a3:e1:32:86:2e:72:c2:4f:8a:fd:25:
         02:07:de:34:4f:d1:60:ee:db:1b:df:9c:e0:b9:37:46:7c:e3:
         bb:35:52:fc:77:3e:a2:f8:10:cd:01:ef:a6:b9:3a:d6:5c:a6:
         9b:55:38:d0:1c:5d:ee:18:ce:b0:a8:5b:ba:86:85:d4:ba:0d:
         21:27:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:52:31 2026 by rpki-client