Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
File:                     9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json)
Hash identifier:          h5hiiGXKMz7MEnJyQz1yXbVfXCzSpOZSmzdwlENIELk=
Subject key identifier:   4F:EC:E8:19:06:A4:6E:C6:30:12:E3:A3:A5:F4:B8:31:89:DE:6B:3B
Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Certificate issuer:       /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Certificate serial:       019EBFFF7FCA84D49BEF515C554C2131C841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
Manifest number:          034D
Signing time:             Sat 13 Jun 2026 08:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:53 +0000
Files and hashes:         1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: 5bL+DMfkDALW8q18FeBa4Hg6bGRFSWK9Vtjz7KBdeO8=)
                          2: wpr47QW5yPt3pCsYurF1J3o7Rg4.roa (hash: 0bSRAwMu0O91Emdt4EmzLACfG7UlbU7GDgVzgrcUSBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:7f:ca:84:d4:9b:ef:51:5c:55:4c:21:31:c8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
        Validity
            Not Before: Jun 13 08:00:53 2026 GMT
            Not After : Jun 14 08:00:53 2026 GMT
        Subject: CN=4fece81906a46ec63012e3a3a5f4b83189de6b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:10:ce:b7:87:44:e0:42:27:d9:27:e3:e5:
                    fa:cb:11:9d:08:8d:3f:a1:74:ea:a3:9c:6c:00:6c:
                    b4:0a:41:c6:50:b0:80:01:0b:43:33:e1:f5:57:cb:
                    b1:ea:06:58:20:54:9b:b4:18:3b:64:22:c8:7a:d1:
                    f9:3f:77:1a:2e:8f:5a:31:e3:51:0f:14:a3:60:95:
                    06:80:e7:c7:64:12:42:1f:5a:e1:28:ca:fd:80:fa:
                    ab:1d:6c:de:6d:b4:b5:37:fc:03:20:c5:81:68:a3:
                    d5:52:15:b3:09:f5:5b:42:d8:3e:73:22:c7:8b:38:
                    f8:2e:bd:32:34:2f:57:8d:ad:a1:3e:a3:d1:83:d8:
                    83:85:68:07:38:0a:e7:42:22:08:72:3a:ff:2e:ab:
                    2e:f3:e6:ee:8f:e5:2f:6a:33:35:16:2e:c9:4e:27:
                    eb:ec:e5:cb:f8:a6:06:b8:0f:da:ba:30:09:f4:be:
                    f8:2b:1f:d3:48:dd:ff:78:ed:d2:a3:75:d4:80:23:
                    be:92:02:b0:97:68:74:ba:ff:8f:c3:1f:05:10:6b:
                    1f:d5:a1:54:2e:a1:4f:15:ef:16:e3:81:2e:90:74:
                    f4:23:4c:9a:a0:9b:e5:98:ad:7b:e1:36:3c:cd:7a:
                    55:3f:1f:7e:9a:cf:19:3b:2a:49:37:ac:a6:35:14:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EC:E8:19:06:A4:6E:C6:30:12:E3:A3:A5:F4:B8:31:89:DE:6B:3B
            X509v3 Authority Key Identifier:
                keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:c4:92:19:fa:e2:9a:50:fe:76:75:4d:6b:fa:22:2b:52:
         cd:cb:a7:5f:2d:3d:ef:8f:de:3e:21:98:d1:fd:dd:e4:42:c4:
         dd:9c:94:3c:84:1b:dd:d0:bb:be:75:85:af:a2:7a:71:a9:fb:
         42:37:bf:79:8b:c2:c1:c1:4b:c4:e4:b6:9a:ae:50:64:28:f4:
         48:6a:d7:35:e3:13:96:5a:93:03:8b:1a:0c:a3:95:25:3f:3b:
         19:70:70:cd:aa:b3:93:c3:ee:51:7a:35:22:29:2b:08:84:09:
         61:93:27:15:c1:d9:2b:0d:3f:37:43:49:92:51:5a:05:7f:7e:
         6d:72:17:01:07:4b:5d:55:71:4b:e8:44:2c:fd:f6:d0:73:3a:
         23:7f:c8:cd:eb:9a:b6:f8:b9:6c:4d:a4:d4:34:51:51:53:91:
         78:9a:a2:de:1a:a4:db:f7:9b:21:5c:18:f2:ba:8f:83:dd:9a:
         0c:d1:6d:aa:68:72:81:30:b9:ec:3c:cf:60:8a:56:c6:b6:8a:
         9e:be:a4:3e:bd:51:fd:61:d0:b7:65:e4:a3:8f:cf:a0:15:9e:
         bd:a1:05:5d:b2:51:ce:45:8b:ea:2a:33:69:ca:ff:7c:28:51:
         b2:39:0c:2e:64:f8:f4:e0:cf:99:e0:b1:e4:ee:5f:c2:b1:21:
         cc:fd:63:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:52 2026 by rpki-client