Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
File:                     9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json)
Hash identifier:          y/KDjBq2j6crObwe8UUu/Jvx0cIRDJ94v9lHLlk5zoc=
Subject key identifier:   74:0D:32:BF:78:A6:CD:E8:61:31:C1:FF:F5:03:9C:4D:3B:DD:CA:FE
Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
Certificate issuer:       /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Certificate serial:       019EBF24119C84D86FA12B5A5C9DC351F408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
Manifest number:          0A1E
Signing time:             Sat 13 Jun 2026 04:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:12 +0000
Files and hashes:         1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: pmmfQHdV9IDBAGFE1iXu3t89N/hHf5EZY/GYSEcuAJc=)
                          2: RXJtHW17ga48zDFcubRcsM8yvss.asa (hash: WyEDuaDUlsx2HrDyBKB8PUVqNo4aRQ6m9UiOaGV4R+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:24:11:9c:84:d8:6f:a1:2b:5a:5c:9d:c3:51:f4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
        Validity
            Not Before: Jun 13 04:01:12 2026 GMT
            Not After : Jun 14 04:01:12 2026 GMT
        Subject: CN=740d32bf78a6cde86131c1fff5039c4d3bddcafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:e0:27:61:85:43:66:79:e5:c2:e4:4d:07:
                    5c:b0:81:b9:e0:fc:f2:99:8e:89:21:7c:9e:1c:7b:
                    4a:43:10:c7:f6:1f:54:5c:59:b8:5b:29:65:69:b2:
                    e0:a2:dd:fc:ef:ff:b3:6b:0b:17:8f:45:45:fd:7d:
                    99:81:97:31:20:dc:be:8c:d2:c2:d5:83:25:42:e0:
                    48:a3:98:4e:52:dd:b6:af:da:c9:81:d4:bc:17:89:
                    d2:87:60:3d:a7:45:ea:1b:e0:32:d6:55:05:a6:47:
                    d7:36:5f:0a:bf:14:b7:d5:1e:85:06:e2:da:96:d9:
                    5b:4b:9b:6f:bb:b5:cd:90:58:28:0e:46:5a:2b:08:
                    f9:88:5f:0b:09:5f:5c:61:30:a4:69:e4:d4:ee:8f:
                    1a:6a:60:15:40:fb:71:d2:93:0a:fb:d5:18:a1:27:
                    8f:31:60:03:f0:e9:16:f6:16:69:2b:f7:18:d3:3d:
                    63:da:0e:e7:03:f9:08:0a:a3:2d:23:d6:0e:d8:ae:
                    4e:cb:48:9b:3b:a2:41:3e:c7:67:8f:e7:26:2e:b9:
                    68:69:11:fb:4e:e1:46:ae:12:03:ba:6a:f5:30:e8:
                    1c:13:d4:45:ba:09:8a:7a:b4:4f:80:00:b4:74:58:
                    66:80:71:ab:28:4d:3f:c5:a5:a1:04:99:a6:73:5d:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0D:32:BF:78:A6:CD:E8:61:31:C1:FF:F5:03:9C:4D:3B:DD:CA:FE
            X509v3 Authority Key Identifier:
                keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:ae:34:5b:ad:24:12:60:2d:51:6d:c9:a4:00:46:aa:ff:
         45:4c:ef:f1:45:c0:12:46:6a:4e:07:24:91:1e:77:19:a0:db:
         7d:db:7a:61:31:ac:a6:2f:79:e5:eb:9c:ac:65:7b:53:53:cb:
         63:a2:2b:5c:54:de:82:74:85:eb:8c:d9:5b:79:9c:e4:b8:00:
         0e:7c:0f:a8:76:4f:61:0e:ab:b9:ff:e2:66:0c:05:aa:4d:d9:
         c1:ab:c3:8e:3b:da:99:b6:c6:c2:8b:26:cb:06:05:4c:31:32:
         30:8d:94:72:c4:a0:15:76:24:a7:14:ef:47:47:3b:13:c2:86:
         cd:80:f2:37:5f:d1:a2:ca:02:73:d7:39:60:ff:5d:e0:18:0b:
         5c:b5:1f:d4:c6:75:e0:8c:7f:43:11:b4:8a:f2:6c:3f:fb:94:
         dd:e8:f8:98:a1:6a:2e:80:47:07:28:22:cb:44:bd:cc:76:8f:
         8e:0b:35:fd:e3:1f:00:24:ad:63:32:27:20:48:fc:a1:0d:d4:
         9c:91:4d:18:c9:b7:0f:40:8a:d8:77:4c:c2:67:ed:8d:4e:4d:
         ad:5f:b7:94:4c:d0:bf:9c:9d:21:1e:99:cb:97:a5:e2:99:2e:
         11:26:df:87:21:f3:10:6d:8d:7b:3c:10:ea:f3:fd:57:0f:3d:
         40:36:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:52 2026 by rpki-client