Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File:                     9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier:          vAwJCx/T78dugSbMfK/DZ3anvMw7vvT6IVeNOoqJn5I=
Subject key identifier:   B4:23:CC:F5:84:D7:1B:B5:6D:DE:22:B5:AF:3B:2C:D1:8D:00:A2:77
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer:       /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial:       019EBE11175E595AD9C0D2FB6E5F2FCADDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number:          195A
Signing time:             Fri 12 Jun 2026 23:00:51 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:51 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:51 +0000
Files and hashes:         1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: cbxkRdcH2KDka2rri37Tn9rwNaYUi74qR/oYGnRCT/I=)
                          2: PTGVKq0rtp-W0LQXrCMcfxye3TY.roa (hash: CHD9DCCggVJLAY5cygmu9cgDCvnD2GXCe9SYsLHbrlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:17:5e:59:5a:d9:c0:d2:fb:6e:5f:2f:ca:dd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
        Validity
            Not Before: Jun 12 23:00:51 2026 GMT
            Not After : Jun 13 23:00:51 2026 GMT
        Subject: CN=b423ccf584d71bb56dde22b5af3b2cd18d00a277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:dc:fb:53:31:0a:a5:0e:eb:dc:de:1b:3b:
                    54:2d:30:dd:aa:4d:10:87:d5:9c:53:cc:d4:88:e1:
                    ac:de:bc:bf:0e:6e:5f:57:1f:c5:8b:01:aa:78:38:
                    d8:78:eb:d3:b0:0d:2c:f8:4e:fe:b0:d5:59:c7:33:
                    dc:41:76:9e:a3:72:2e:bc:83:72:5a:93:51:6d:c8:
                    6a:e9:76:63:af:35:9f:4c:4b:4f:89:fe:39:19:58:
                    59:a2:01:49:17:5a:ab:77:19:66:57:7a:19:71:de:
                    91:c1:03:45:7f:d2:14:e4:15:dd:c2:4f:b9:a5:db:
                    94:09:bf:56:7f:9c:37:91:57:3d:35:6d:10:96:1f:
                    c3:40:1f:59:cb:80:be:78:cc:e2:42:06:b0:2f:27:
                    09:2d:91:a8:fc:51:db:0f:38:56:27:95:67:a9:22:
                    9d:50:8d:67:d7:e5:f1:ff:e7:df:8f:2f:26:a1:f1:
                    b5:2d:1c:66:04:f6:22:cd:57:ae:d8:b1:99:3f:df:
                    b6:da:40:ed:9b:ea:b0:46:1e:77:84:ad:e5:61:6e:
                    b9:ca:b9:b9:a5:a3:52:5d:58:a8:60:11:4a:60:75:
                    2d:33:4e:53:dc:3d:e0:2d:2f:08:1a:5d:0c:47:a0:
                    e0:db:4e:78:03:9e:35:63:43:bf:90:de:3c:1b:b3:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:23:CC:F5:84:D7:1B:B5:6D:DE:22:B5:AF:3B:2C:D1:8D:00:A2:77
            X509v3 Authority Key Identifier:
                keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b4:2b:b8:78:59:c3:93:ab:55:16:c3:36:74:8a:09:e8:4b:
         2a:5d:af:d9:a8:6e:65:37:ad:ef:79:35:ed:b8:c7:b2:c6:77:
         86:ec:a2:ad:c2:d0:e3:9d:97:4e:37:4d:c3:6c:6a:97:bd:00:
         e3:f3:36:99:ba:d2:dd:86:b0:a2:5b:44:2f:ee:b7:d0:74:5a:
         0a:44:55:5e:04:0f:9c:72:80:25:f7:a7:9b:ae:f6:29:06:36:
         7d:51:7e:7f:49:d8:cb:78:b4:44:e5:59:07:04:bf:e7:78:e7:
         4a:64:84:36:2e:ff:43:0d:4e:58:08:60:30:69:42:73:d5:cc:
         c5:5c:df:12:8d:d0:2c:8d:32:83:de:d0:0d:24:7d:e3:31:27:
         48:c0:e6:81:d7:7e:48:52:44:67:e4:c1:64:73:a5:9a:ad:b8:
         fb:e8:97:e1:b6:fa:91:bd:67:28:bc:8c:c1:c2:ce:8c:e1:76:
         c1:71:00:39:29:9f:21:3a:2b:a8:6d:50:bf:84:c0:6e:ef:6f:
         a8:49:d0:ee:db:47:f6:81:7d:22:e7:d9:b9:69:f7:70:aa:b4:
         27:fc:48:bb:b4:9c:bb:91:f2:f4:65:37:06:2d:6f:f4:ae:c4:
         d4:67:4b:d0:4d:ed:06:91:b9:2a:32:8e:50:75:f7:51:10:a1:
         75:de:34:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:27 2026 by rpki-client