Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File:                     q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier:          u9GqbFSQKyfTBPYbVtZI0eOYVW8cA9BtXhk97O8W6FI=
Subject key identifier:   DB:11:1B:7B:6C:E9:36:0D:15:FA:AA:6F:25:2D:43:48:D2:9F:6C:48
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer:       /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial:       019EC0366226A85C427ACEB79B462F626DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number:          0EC4
Signing time:             Sat 13 Jun 2026 09:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:49 +0000
Files and hashes:         1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
                          2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
                          3: Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa (hash: PhCalGp+MfsuVT1o+EaqpG+ubg4eyRCw+3C+dRQltm0=)
                          4: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
                          5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
                          6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: groZ0l1LNz7UFRCq66XyM0A/5LzvJCCnbwSTnGgewTI=)
                          7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:62:26:a8:5c:42:7a:ce:b7:9b:46:2f:62:6d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
        Validity
            Not Before: Jun 13 09:00:49 2026 GMT
            Not After : Jun 14 09:00:49 2026 GMT
        Subject: CN=db111b7b6ce9360d15faaa6f252d4348d29f6c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:d9:0e:db:3e:1c:24:62:0e:c1:89:b6:e1:
                    ae:19:2e:14:16:5e:ed:fc:a8:5a:e3:79:e4:49:b2:
                    b2:6d:66:df:14:1e:58:d5:8d:da:0f:92:68:b7:79:
                    70:44:49:50:2a:62:ae:af:64:78:38:8e:a2:62:fb:
                    38:25:27:ba:1b:7d:1d:2a:0a:44:bd:22:04:60:c1:
                    80:99:6b:ea:6a:2f:79:02:f1:a5:8d:bb:a3:ff:40:
                    4d:a0:1a:4a:50:17:88:17:60:eb:9e:34:b7:db:33:
                    32:32:12:6e:77:ae:90:26:48:ea:1f:f5:36:41:5e:
                    61:44:26:19:07:84:06:bf:34:61:0a:4c:57:e4:4c:
                    6f:49:74:a0:de:d8:c0:ed:ef:7d:c0:ee:89:d2:b5:
                    f4:7c:30:e2:00:04:f1:bc:5c:90:7d:78:00:ad:6b:
                    95:01:12:6f:71:a2:e9:3d:a0:b0:2c:e1:a0:46:8d:
                    2a:e2:14:ee:36:05:b1:1b:a0:22:63:5a:c5:8b:73:
                    d4:39:f4:1b:11:3c:4b:bf:f6:43:16:c5:72:6d:42:
                    6b:99:f7:ec:77:51:4b:88:4c:ba:ca:a2:a6:4c:ef:
                    05:bf:b3:03:4d:3c:ea:5f:f2:2b:85:e6:b0:7f:96:
                    42:b9:af:a0:ee:5b:1a:c5:b2:fc:d9:9a:5a:d7:93:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:11:1B:7B:6C:E9:36:0D:15:FA:AA:6F:25:2D:43:48:D2:9F:6C:48
            X509v3 Authority Key Identifier:
                keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:0f:19:dc:9c:84:2a:12:a4:81:6b:90:e9:bd:46:2c:45:
         e9:a2:0c:c0:ae:a7:f2:af:a5:63:72:ba:a2:03:dc:73:c8:78:
         3d:84:86:4b:18:5e:0c:b3:b8:eb:a2:d3:74:43:ae:c2:76:6c:
         cd:57:3e:54:b7:f5:5b:0c:88:d9:cc:1d:92:ab:e3:39:2e:3a:
         85:fe:5e:08:f6:1e:f0:45:8f:a8:86:84:a1:73:0c:c4:19:6a:
         5d:b8:46:b9:ac:12:2e:c6:0c:ce:8a:9e:2e:5f:4d:10:dd:8b:
         86:ae:bd:21:9b:6a:7f:cd:18:0b:91:05:ae:54:5a:52:1e:5b:
         ef:35:cb:9e:d1:72:61:82:04:e5:42:b3:17:bd:a1:73:4b:db:
         e3:5c:d6:e8:84:ff:88:5f:e3:c0:c0:48:dc:c2:0f:1f:ba:ee:
         7d:2e:87:d2:16:a1:1d:17:06:12:0a:2b:3d:0d:87:bf:48:5c:
         ab:77:64:de:5f:c6:4c:5c:c0:2f:71:92:ab:8e:c0:de:58:8f:
         fd:a8:72:2f:6e:ee:ce:d5:5e:6c:b6:1e:38:6b:4c:39:a7:37:
         3e:5f:17:92:22:19:a8:01:d2:3a:a7:ec:3f:e3:ce:b9:46:ef:
         68:b9:1f:ed:5c:3b:3f:6e:f4:11:d2:20:f8:45:b6:83:38:cb:
         c3:a4:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:34 2026 by rpki-client