Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File:                     9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier:          95u53PAWaTlcJAm8JRTvg4bnmPkVAeTWTAyWmfV0MVI=
Subject key identifier:   C3:18:06:AB:61:D7:4F:AF:0E:B7:B0:24:FE:6E:46:48:F8:5E:6E:30
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer:       /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial:       019EBFC82E451879331177A490853A8AE159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number:          1659
Signing time:             Sat 13 Jun 2026 07:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:27 +0000
Files and hashes:         1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: aHBC8AQuB+FWuKmRxPsbV+03BiA3G1uqjjC3qO7xijQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:2e:45:18:79:33:11:77:a4:90:85:3a:8a:e1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
        Validity
            Not Before: Jun 13 07:00:27 2026 GMT
            Not After : Jun 14 07:00:27 2026 GMT
        Subject: CN=c31806ab61d74faf0eb7b024fe6e4648f85e6e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:ca:34:c0:e4:56:ce:49:16:7d:f5:c7:f5:
                    14:68:33:97:51:22:01:f5:d5:61:5d:b5:14:e3:75:
                    2a:66:0b:4d:10:d4:e7:dd:c2:a8:21:e2:80:55:b0:
                    ec:cf:75:38:75:18:3a:5d:0d:7e:44:ae:3a:00:60:
                    44:10:41:83:91:f5:4f:d5:a4:43:68:f3:2a:38:2c:
                    d8:65:68:2e:3e:d6:52:e4:48:87:5f:a2:54:95:9f:
                    54:a4:e7:6b:02:6e:b4:82:a4:77:2a:ab:0f:53:26:
                    73:14:ed:ca:49:b7:5e:83:ee:a6:d8:f8:87:e3:58:
                    b5:7d:31:32:7c:c3:c8:01:c6:78:dc:56:bc:9a:b2:
                    67:5a:62:c3:45:c8:63:18:59:a6:93:db:94:83:a9:
                    f0:74:8d:3a:6a:c0:9b:42:5b:d4:e9:f3:72:5a:45:
                    73:17:ae:a5:d5:9e:82:7c:31:a4:47:07:b1:bd:8b:
                    f5:60:e4:47:c5:77:05:14:b4:4c:d8:80:a6:05:50:
                    bc:d9:61:c1:cd:9a:df:fe:bd:f1:87:9f:40:47:53:
                    1d:87:51:31:a3:14:92:64:3b:a7:bd:1d:4a:d0:45:
                    2d:cc:65:bd:7a:9e:45:31:ff:67:ed:d1:5e:b4:72:
                    26:45:66:85:82:8e:bc:f0:50:d1:52:9b:f4:b2:3d:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:18:06:AB:61:D7:4F:AF:0E:B7:B0:24:FE:6E:46:48:F8:5E:6E:30
            X509v3 Authority Key Identifier:
                keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:01:b0:0f:81:8f:00:af:a5:9d:41:df:e6:d8:a2:f1:03:
         f4:22:c4:a1:0d:5e:ed:b0:3b:34:da:98:49:7a:44:fa:ea:49:
         fe:3d:04:d7:da:ae:68:af:33:a1:6c:76:80:85:0e:bf:38:3b:
         4b:82:7a:87:89:db:6d:02:ce:fe:0f:bd:fc:3e:7d:7c:07:9e:
         7c:75:23:59:91:dc:b0:2b:aa:8b:fb:dd:ec:72:8e:21:71:b4:
         de:8c:74:07:3f:80:fd:ad:25:d5:7a:27:dd:27:75:aa:9f:f1:
         0f:a2:0b:c5:e0:ea:34:98:ad:3f:c9:8b:e1:86:55:c6:e9:73:
         07:11:ac:5d:73:23:b6:16:8c:17:59:69:4f:32:d3:22:25:02:
         96:a9:a8:8b:fc:36:6b:36:48:6a:e4:86:f9:a0:9b:44:bf:c9:
         1b:9c:36:f1:df:81:03:3e:bf:47:df:01:6f:1b:d0:46:78:24:
         13:dc:c9:be:60:98:ab:0b:f9:79:43:d5:3c:c9:c1:00:67:7b:
         71:2b:8d:72:32:1b:c7:36:03:16:b1:4a:00:1d:b7:7e:1c:fc:
         14:7d:80:81:21:ef:c8:6f:d3:c5:14:ad:80:95:88:98:38:36:
         75:62:22:b1:8c:e1:98:ba:33:b0:1c:bc:98:fd:8c:8e:f0:34:
         03:ca:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:14 2026 by rpki-client