Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File:                     1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier:          yulcMfd1nSHVukmwwO3cCR3fe8PoZUCXwfroic5SkYY=
Subject key identifier:   6B:EB:52:00:D7:76:79:35:64:E1:29:38:39:DB:DA:2D:A2:0E:D4:28
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer:       /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial:       019EBDA2FD512052A9514CABEF72B1860C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number:          0A42
Signing time:             Fri 12 Jun 2026 21:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:35 +0000
Files and hashes:         1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: NYcV2T1DCdQs/pxZ58wAUeCdNy67ueOIvKecPzKqAcI=)
                          2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:fd:51:20:52:a9:51:4c:ab:ef:72:b1:86:0c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
        Validity
            Not Before: Jun 12 21:00:35 2026 GMT
            Not After : Jun 13 21:00:35 2026 GMT
        Subject: CN=6beb5200d776793564e1293839dbda2da20ed428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:c0:78:8c:88:f1:66:d2:b9:11:2e:77:6b:
                    7d:9f:5e:f5:1a:d7:da:e2:81:55:ef:d2:21:0d:fb:
                    31:b1:6c:9f:5f:d4:a3:92:0d:c2:27:01:46:ad:7b:
                    a6:e0:47:3e:8b:ff:5a:ea:f6:b6:38:83:a1:6d:cc:
                    c4:e3:86:70:51:dc:61:c0:07:1d:a0:32:d3:7c:42:
                    07:2d:09:11:23:13:ae:24:45:06:5f:d2:e3:74:1a:
                    7b:7c:27:40:70:8e:81:21:82:7d:81:19:99:39:1b:
                    af:69:3f:4c:dc:4d:3d:75:f1:db:47:74:76:71:6f:
                    8d:e9:dc:bf:3b:13:67:ad:d0:87:35:07:74:9f:cb:
                    f5:44:d0:5d:74:80:3d:a4:d7:fe:3a:a1:d0:01:9a:
                    7b:1d:40:25:63:18:6e:5c:cc:56:76:65:aa:b7:c5:
                    8f:36:96:9c:ef:3f:5d:fb:ee:ef:53:66:46:db:50:
                    8f:ef:7a:d7:4c:36:ce:01:f3:3f:e9:d4:c4:1b:f7:
                    1c:27:d5:a2:e5:d9:84:4f:b7:9b:c5:85:60:74:1a:
                    34:c3:67:10:e0:81:6e:4d:12:bf:53:df:7b:11:75:
                    6a:0e:b5:e2:13:96:4c:ec:90:6e:47:3d:16:74:81:
                    3e:a1:cc:b9:cd:d6:23:13:4d:93:7f:99:04:e0:ba:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:52:00:D7:76:79:35:64:E1:29:38:39:DB:DA:2D:A2:0E:D4:28
            X509v3 Authority Key Identifier:
                keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1c:c3:eb:62:5a:9c:28:48:fe:3e:09:1f:1f:83:e0:3f:f0:
         fe:00:4b:0a:bc:0a:df:09:ef:80:7f:cb:01:ff:49:d7:b3:c3:
         78:70:ba:ed:c3:68:ad:7c:49:f5:14:19:4e:7e:49:5b:c7:30:
         6a:82:01:ea:73:db:30:6d:cd:d2:4a:fa:bd:b8:ef:ac:dd:71:
         54:cf:a8:d2:99:34:81:21:06:dc:95:72:c6:4b:37:92:84:0d:
         56:17:8e:40:e4:5a:9a:89:08:e2:ee:cc:b1:47:36:8d:f1:c2:
         9a:62:86:3f:38:1d:2d:07:9f:f9:12:94:77:51:c4:24:9a:82:
         31:3c:e3:f0:44:01:0d:f3:06:c0:8d:b6:80:0d:7f:29:5e:7a:
         57:6a:c6:f7:8a:ca:e3:d9:cb:45:f5:3b:fa:dd:41:dd:47:11:
         84:dd:30:64:d3:9f:76:22:ff:e3:f9:eb:5e:0e:e3:db:0e:bc:
         4a:cf:a5:69:97:02:5c:8a:0e:b5:f9:83:95:01:11:03:ac:51:
         62:de:f4:d6:6e:47:6c:64:1e:1c:fc:f7:56:5c:75:92:6b:50:
         b6:07:6b:57:33:d1:6a:b3:c9:47:39:53:99:16:66:0f:32:7f:
         0d:26:57:44:fd:f9:34:23:e1:9f:36:57:58:8a:20:12:96:2f:
         cf:e2:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:17 2026 by rpki-client