Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File:                     F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier:          07LkezAc/SIs+F1KccgoLhGF0AQZjAeWJmq7B7yoEQ4=
Subject key identifier:   B6:FA:C3:07:52:57:76:53:4A:03:C5:82:C3:B2:D3:D0:74:DC:04:F2
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer:       /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial:       019EC337D52C5BEBFC30C5C3D6A487FF7E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number:          1069
Signing time:             Sat 13 Jun 2026 23:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:16 +0000
Files and hashes:         1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: GrYdCwuhPyvs0xy2Y/J4HxhObwwB7zbkKkD2dMnkncE=)
                          2: J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa (hash: MlQZGeS1jAVBfO3R8nnm0N8oigQzbZ43khot/CP8lDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:d5:2c:5b:eb:fc:30:c5:c3:d6:a4:87:ff:7e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
        Validity
            Not Before: Jun 13 23:01:16 2026 GMT
            Not After : Jun 14 23:01:16 2026 GMT
        Subject: CN=b6fac307525776534a03c582c3b2d3d074dc04f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:8b:78:f8:2d:01:04:cd:37:1a:7d:ae:94:
                    ba:86:45:b3:cf:d5:39:49:f2:f2:61:e6:7c:ed:f0:
                    ea:e2:5b:0b:b5:67:e0:19:b2:28:1c:39:80:a4:2b:
                    2d:0d:80:da:80:9b:dd:60:dc:57:1b:b1:a0:d5:63:
                    18:3b:ed:20:92:80:7a:6a:9a:0b:c0:79:63:51:f8:
                    44:c8:1f:fb:ed:14:17:74:b1:2b:8a:ae:e0:bf:76:
                    e0:a6:61:ca:89:33:d1:40:a7:dd:93:7d:46:a5:b0:
                    3e:af:45:1f:cf:fc:06:75:a7:ca:0e:51:f6:4f:b0:
                    2b:9e:82:ff:00:8b:05:6f:3c:7b:17:f4:ae:3c:b2:
                    c8:e6:02:d2:46:4f:da:45:c6:f0:bd:a8:c3:a8:4b:
                    e9:c8:25:ef:bf:2e:65:49:6a:72:53:88:8f:7b:e8:
                    81:b7:28:7d:52:12:65:45:80:30:e2:32:eb:45:4a:
                    36:a1:ad:69:5a:82:9c:3f:95:9f:de:3a:fa:e1:5d:
                    b9:09:46:8a:6e:a5:12:43:9a:44:38:40:74:37:9b:
                    b7:f7:e5:e1:92:d1:8c:2c:9a:02:66:ad:35:e3:c5:
                    92:60:88:de:fe:f2:37:37:de:d3:32:9e:1e:71:46:
                    51:8b:81:bb:3c:36:ad:af:33:9d:2e:4f:45:14:ea:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FA:C3:07:52:57:76:53:4A:03:C5:82:C3:B2:D3:D0:74:DC:04:F2
            X509v3 Authority Key Identifier:
                keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:18:87:59:e1:e3:da:2d:54:ef:2c:ea:82:9f:62:00:e0:52:
         71:0c:d9:c9:ff:78:2e:77:9b:2e:e5:a2:ea:39:2d:fe:a1:ba:
         3c:86:66:ca:d0:e6:48:06:72:bc:d2:50:5c:e5:bf:b5:6a:ad:
         73:67:31:9c:6f:7a:08:d1:17:20:1b:2c:57:82:b4:ce:0b:20:
         bc:d2:bd:87:fb:18:67:d0:43:82:17:74:bd:83:ff:9f:e5:94:
         70:b2:05:f9:78:91:97:b7:82:cc:16:c0:50:6d:b5:dc:9b:07:
         f3:cd:5f:15:7a:70:b5:89:2e:b5:f3:88:94:a9:2e:c5:de:c1:
         25:7c:ca:74:b8:d2:de:cb:ed:08:f3:8b:83:be:fe:c9:63:af:
         5e:b7:19:74:43:50:0a:32:3d:fb:7e:c8:ea:c4:16:ac:bb:ed:
         e6:75:25:43:4d:4e:37:58:c2:51:98:01:33:2e:67:27:a5:2f:
         2e:b2:8d:78:84:4d:1b:58:f6:4c:49:2f:e7:13:05:ef:e9:b7:
         c9:a7:39:29:ab:56:90:8b:b7:43:34:df:cc:17:a9:12:93:b5:
         5d:e5:d9:2b:3c:cf:1e:93:25:29:aa:30:74:83:aa:93:8c:45:
         44:41:fc:d7:d6:20:f9:6f:78:16:c9:57:5f:d4:ac:52:a4:c3:
         2c:e7:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:10:52 2026 by rpki-client