Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File:                     9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier:          lOpUd9BlAPmJGsShQ0hFdfPUXaCGaW4ym3uEOJc7rCM=
Subject key identifier:   F3:4B:E7:35:B7:AB:6F:B4:04:C5:C0:90:F9:12:7F:00:A3:E8:37:66
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer:       /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial:       019EBE10ED1A10DE4A4705414140D13A3A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 23:00:40 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:40 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:40 +0000
Files and hashes:         1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: v6RogOv2yoCZVzUzG0mQ4yDKBoxkiAjW7ZNcaqEmfT4=)
                          2: CvAwcxB4NQhTMik421cY6D4GJSQ.roa (hash: bDEysHdEoYRzyx+ZtQs8J1SFqsQ1uvog9sHvqZgzUSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:ed:1a:10:de:4a:47:05:41:41:40:d1:3a:3a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
        Validity
            Not Before: Jun 12 23:00:40 2026 GMT
            Not After : Jun 13 23:00:40 2026 GMT
        Subject: CN=f34be735b7ab6fb404c5c090f9127f00a3e83766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:7c:3a:1e:e8:4a:38:47:5d:36:eb:a5:b7:
                    81:85:4a:72:b0:30:7d:4f:bb:a0:97:e0:83:af:bc:
                    20:02:d4:38:87:a0:e2:62:c0:d1:d4:6e:d7:3a:e0:
                    58:b7:47:2e:79:58:78:e6:c5:87:ea:b8:db:95:87:
                    c1:0e:aa:ae:a2:98:52:ab:87:42:9c:f9:8a:a4:96:
                    1b:8a:1b:39:45:95:e5:5c:42:58:a8:87:22:6b:94:
                    cb:71:02:3e:56:a8:00:bf:27:e4:0e:9d:86:32:e7:
                    5b:87:8d:b4:bf:13:0b:b1:87:da:ab:08:d2:48:08:
                    55:35:66:e9:59:ee:44:d7:69:b4:39:e8:ee:b1:f1:
                    4f:6a:1a:ad:e5:53:19:5a:db:b1:8d:2c:44:8c:d2:
                    a7:a5:00:96:e3:03:f5:88:64:c3:9a:35:27:fb:70:
                    aa:5f:3d:b3:1c:ae:74:3c:f6:f8:8a:14:ea:2b:49:
                    3f:a7:e6:95:b2:40:a9:a4:ec:42:37:6c:4d:58:b3:
                    c7:bf:47:4f:cc:c9:af:8f:9d:98:74:ab:d4:ba:47:
                    48:f6:78:90:45:2b:29:75:a2:d9:01:b3:a8:54:4f:
                    34:8b:e7:97:db:78:eb:8b:8e:e8:5f:4f:0b:2a:46:
                    7e:0d:e5:eb:b6:c7:76:98:a2:58:ab:79:5c:ef:8c:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4B:E7:35:B7:AB:6F:B4:04:C5:C0:90:F9:12:7F:00:A3:E8:37:66
            X509v3 Authority Key Identifier:
                keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:39:65:79:fb:fd:b4:9f:7a:26:c6:3a:b5:38:34:55:48:8f:
         aa:31:ef:6f:64:a7:2e:9d:7a:81:5c:3b:f4:c4:58:5c:38:dd:
         a9:8f:4a:ca:7e:ad:3f:f7:ca:a9:bd:6c:d7:1b:6e:d8:9f:4c:
         74:5d:6e:cc:2d:50:21:17:04:0e:55:47:3b:29:a0:7c:14:51:
         60:2e:1e:ba:c6:61:74:6d:a0:5d:c4:41:52:78:48:44:72:8b:
         4d:55:42:ac:d5:ae:67:08:a7:ab:5a:e0:5a:86:83:45:18:20:
         4c:8b:00:76:8a:05:44:c0:b3:aa:14:fb:26:c1:09:70:f9:a4:
         fa:e5:57:fc:ce:53:f2:c4:db:78:a0:25:50:68:d5:23:96:6f:
         49:cc:ab:de:04:31:cb:bd:4f:36:d1:bd:06:19:95:7c:0a:19:
         83:72:fd:fc:08:7e:ee:12:38:bf:3b:55:fe:0a:8b:25:ed:73:
         36:77:8b:be:16:bb:78:70:d8:53:2c:19:80:c6:64:db:61:b9:
         36:f3:3c:6b:53:0d:3d:61:bc:b6:6f:aa:55:09:02:3f:76:03:
         e5:ba:a1:53:34:2c:34:8f:cc:8a:e0:83:12:e4:a4:d5:be:e4:
         e5:af:26:3e:fd:8d:17:84:e7:d7:09:f7:56:b3:a6:eb:fb:e5:
         5c:58:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:03 2026 by rpki-client