Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File:                     9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier:          xWalg3E85cqXRHdJQireyV8uF5vxmkfEIHsl+Mw8I4o=
Subject key identifier:   34:8E:AE:68:80:74:E0:F0:0B:C5:6E:29:5B:2D:41:AA:14:CC:F7:3F
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer:       /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial:       019EC336D7344EF7DC099DBFE533D7D81EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number:          0E7B
Signing time:             Sat 13 Jun 2026 23:00:11 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:11 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:11 +0000
Files and hashes:         1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: gFG9iKLljkoEIvMeMtZi9DUuP1MuyzPAmzvRc04pH6A=)
                          2: SwOCpl1kg6g2zUiZWN5A0MmSX5s.roa (hash: QKVD0HzLsQvlnPuI8LqZ6Irb+MhBQbX7xWp6qMbEmic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:36:d7:34:4e:f7:dc:09:9d:bf:e5:33:d7:d8:1e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
        Validity
            Not Before: Jun 13 23:00:11 2026 GMT
            Not After : Jun 14 23:00:11 2026 GMT
        Subject: CN=348eae688074e0f00bc56e295b2d41aa14ccf73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:d1:2d:8a:35:5e:9d:6e:79:78:c6:2a:6d:
                    ce:57:fb:14:ca:04:50:3b:9a:16:d2:f0:06:0e:ff:
                    01:92:5a:db:20:52:1a:34:b2:0f:ab:22:cc:f1:b1:
                    6f:c6:cc:e0:a8:72:8f:f0:f1:3b:04:dc:79:e1:7a:
                    31:5b:30:86:bf:26:68:29:6d:fb:be:54:fe:25:91:
                    73:23:53:54:e3:61:4c:28:fa:f6:52:59:b1:2b:c6:
                    59:a8:08:68:0a:4a:6e:73:3c:fa:3b:19:bd:73:73:
                    43:6f:1e:e6:5c:70:c9:26:71:20:61:a4:0a:97:f0:
                    37:6f:db:ac:64:a4:9e:80:cb:40:92:ae:67:a1:27:
                    a3:f6:77:71:b3:e2:53:36:a3:63:43:7f:4c:86:b6:
                    df:c9:01:fa:3f:e4:b4:c1:46:a5:ae:46:67:c2:cd:
                    c3:83:47:ec:2e:01:f2:ed:6c:de:ba:01:80:59:dc:
                    d6:38:7d:7f:72:e7:d3:ae:09:ce:08:f0:ed:e0:d2:
                    e9:0c:98:55:57:7e:54:5d:9a:c1:c7:c4:5e:cd:20:
                    d3:a6:e8:82:b5:b4:5c:d2:51:6b:6d:ba:cd:af:8f:
                    da:e3:8a:83:01:a0:7a:64:bb:89:43:6d:87:da:cf:
                    0e:00:cd:67:93:b8:e4:58:d5:6c:29:aa:1c:2a:46:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8E:AE:68:80:74:E0:F0:0B:C5:6E:29:5B:2D:41:AA:14:CC:F7:3F
            X509v3 Authority Key Identifier:
                keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:82:52:f3:0d:28:75:43:a4:55:de:7e:77:d7:07:2e:9b:83:
         5d:45:01:04:fc:db:75:8f:0b:36:47:35:47:08:cd:c5:17:f0:
         3c:fa:4f:cd:e5:c2:23:6f:43:67:1c:c2:ef:92:36:a0:d9:e3:
         10:e3:76:cc:2c:ed:4c:51:06:49:b7:39:b5:8c:b3:76:67:75:
         fe:32:12:06:94:ed:9a:27:60:2a:e2:4e:7c:9a:81:24:fe:1b:
         38:5d:55:71:5d:09:e1:ed:d0:9e:b4:09:31:fe:c7:3e:00:67:
         4e:f3:5b:2c:58:57:74:31:7c:75:87:8e:be:60:83:c8:60:73:
         04:41:84:4c:bc:22:90:fa:f8:6b:d7:16:9f:2d:fe:7e:d7:4a:
         e6:40:2d:e8:64:a0:d3:f0:c2:1f:6f:be:51:78:04:d5:e8:50:
         60:7a:87:2d:78:d4:f0:3f:c4:6a:b7:01:f3:37:95:65:c7:b4:
         a2:92:12:9c:7e:22:d6:48:f9:c2:da:dc:ee:ac:37:29:31:59:
         95:aa:2f:45:78:43:43:91:95:ad:ed:6d:af:f5:0e:21:1c:a3:
         93:c9:31:9b:01:ff:37:76:e7:c9:02:3b:9b:61:7b:7f:ec:d6:
         d8:f8:a5:e2:b4:4d:91:d8:5f:21:23:7c:b1:a0:25:21:69:51:
         7e:65:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:43:12 2026 by rpki-client