Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File:                     9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier:          +K32N7pCwOZl16RAqIZZYTCgBJDLH5LPUL5ZKqslKqQ=
Subject key identifier:   46:9E:20:87:CD:3A:EC:B1:0A:C0:C8:66:6C:7A:0E:43:64:50:B4:8E
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer:       /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial:       019EC06DFA47293F3CAF2AFBD873EF6C0D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 10:01:33 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:33 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:33 +0000
Files and hashes:         1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: bxjCLIGllNc5utwZZO92DB3m7s7ps6YQinRV9H/D0dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:fa:47:29:3f:3c:af:2a:fb:d8:73:ef:6c:0d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
        Validity
            Not Before: Jun 13 10:01:33 2026 GMT
            Not After : Jun 14 10:01:33 2026 GMT
        Subject: CN=469e2087cd3aecb10ac0c8666c7a0e436450b48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:f5:22:d5:1e:7b:18:c3:de:8c:53:ac:f8:
                    1b:34:e4:cc:a3:af:b7:0b:b1:91:87:e7:9f:dc:0d:
                    67:04:fc:18:21:31:1a:25:ea:3f:69:9f:aa:ae:cb:
                    f7:c4:95:a3:3b:a1:d6:36:35:aa:bf:14:28:f8:48:
                    26:be:76:b5:f9:03:c9:5d:57:3f:31:1a:b8:91:00:
                    4b:36:a8:e8:0a:ba:74:4e:94:5e:21:2c:f3:fd:aa:
                    1a:13:b3:c5:d0:18:32:d6:f7:31:63:21:5a:82:c8:
                    d5:69:ae:a2:06:d9:1b:eb:3d:de:aa:92:e8:ea:94:
                    4e:2e:9b:e3:db:15:c1:3c:98:5f:4e:15:37:30:81:
                    8d:43:cd:ea:52:f2:6f:e7:31:11:02:74:03:7f:56:
                    37:cd:97:1a:df:da:0f:b2:d1:e7:52:93:58:c4:0a:
                    ab:ee:d6:61:13:ef:8b:a8:69:ee:01:fa:8b:e8:44:
                    64:00:3d:b3:86:05:d9:f4:ca:f4:27:76:bb:6f:f5:
                    5d:85:3f:8d:18:c6:16:ba:32:4c:d1:16:34:5a:ce:
                    ad:57:0f:c7:b6:e6:97:0a:79:c0:3c:2d:e1:00:e8:
                    c2:ac:6d:73:e5:86:38:ca:ed:5f:ab:83:17:90:1a:
                    3a:3e:bd:1c:88:ed:45:69:35:ae:08:74:58:8f:35:
                    76:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9E:20:87:CD:3A:EC:B1:0A:C0:C8:66:6C:7A:0E:43:64:50:B4:8E
            X509v3 Authority Key Identifier:
                keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8a:d8:9f:88:de:4c:71:5c:47:dc:98:38:ca:e1:08:f8:8f:
         85:34:57:28:03:17:25:db:7c:77:b7:96:7f:08:4a:55:8d:71:
         bc:1f:25:70:a9:80:d3:66:55:72:44:ab:fb:52:71:75:99:fe:
         70:f7:4c:ec:65:0d:85:b1:38:4b:7d:22:bf:22:5b:1e:54:43:
         f2:6a:c6:03:e4:92:06:72:5e:9f:23:f0:d2:e1:dd:9a:57:30:
         28:f4:2c:7b:3d:87:ab:b4:50:29:c4:55:7f:81:bf:35:5f:6b:
         8f:de:44:54:31:8f:f6:91:32:a7:fe:63:2b:cb:25:41:eb:08:
         ec:3c:aa:a0:65:3b:63:a9:28:fd:38:d2:38:f1:6e:5c:44:01:
         88:e3:07:08:6d:9b:db:60:f0:41:a6:4f:cd:19:52:37:e1:ea:
         00:2e:7a:48:f8:b7:a2:cf:0f:76:84:9c:83:7f:a9:ae:6c:44:
         4f:ff:48:2f:98:20:07:85:65:20:30:c9:0c:91:59:7e:c8:dc:
         68:97:bf:b7:87:83:cf:68:34:d8:ab:3b:98:cf:b2:0d:7e:f6:
         d9:2b:64:6e:15:49:4b:da:9b:1a:fc:76:f8:23:53:ce:d9:0b:
         7e:dc:61:a2:92:c5:f9:7f:f0:7d:ae:b4:47:27:9d:33:6a:0d:
         fb:86:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:55 2026 by rpki-client