Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File:                     P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier:          FjAtbFvEQ3E2dq+Sw+vSXnPSSZbxzxAeoNlNFI1AZAo=
Subject key identifier:   B0:EC:F8:3D:41:69:70:7D:42:9F:AE:AF:E8:A0:3C:9A:E6:55:63:13
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer:       /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial:       019EE743FB07DF217EF78C1CEE207C4B0AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number:          196E
Signing time:             Sat 20 Jun 2026 23:00:52 +0000
Manifest this update:     Sat 20 Jun 2026 23:00:52 +0000
Manifest next update:     Sun 21 Jun 2026 23:00:52 +0000
Files and hashes:         1: OsxR7yFdFRenycaE_q8hld1AbUQ.roa (hash: Fufnasj3vyQ/2zEL9UqegZtuU29Utyi2U8r5NLTadZk=)
                          2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: 2G57Ny/Eydd5kmrGW3Et9sa2BJT/CTiO/XtvDK6lcqE=)
                          3: q1MdFgrztAHRD55dweODJfa4RK4.roa (hash: aZ5l1yMm02BT+qNFooS+z/TzrtnqLkZdfbJDBupopYk=)
                          4: v09tww-7oHxZ6sHFn1E1sm8TLy8.roa (hash: b5FXRSJZMeoKM16WUIwE96LX1QoLUNfwWW43UIqRREE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:43:fb:07:df:21:7e:f7:8c:1c:ee:20:7c:4b:0a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
        Validity
            Not Before: Jun 20 23:00:52 2026 GMT
            Not After : Jun 21 23:00:52 2026 GMT
        Subject: CN=b0ecf83d4169707d429faeafe8a03c9ae6556313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:25:77:10:d9:07:4d:38:ce:2b:c4:9d:4e:
                    e4:23:36:a9:b0:f0:f8:f6:4b:18:70:36:9d:a5:85:
                    47:47:1a:34:f0:51:d4:bd:d6:c0:c0:f4:ce:9e:47:
                    37:be:66:f7:05:57:df:ea:ef:3f:d0:4e:e0:27:6d:
                    5f:66:8b:67:94:a4:30:79:be:cf:36:a6:9b:40:69:
                    24:74:0d:47:65:9b:36:e3:52:a1:b9:d3:5d:f8:ab:
                    79:f8:ca:79:4d:c5:ca:3b:37:e3:c0:0b:4c:16:26:
                    39:5f:5d:92:f2:6e:bd:c5:53:b3:c9:c7:11:29:8c:
                    6e:ec:c4:95:ce:f2:96:6d:8f:5e:2b:72:f3:fc:07:
                    05:37:1c:fa:cd:95:f0:49:88:2f:31:75:ec:37:ee:
                    a6:f8:08:51:72:dd:fa:3f:a3:65:84:44:ae:1b:de:
                    3f:84:af:07:2c:4c:fd:9f:20:28:72:a9:ea:02:d3:
                    55:61:a7:52:0f:ba:ae:0a:50:f5:74:bf:7a:3a:53:
                    59:32:a4:83:73:cb:eb:33:95:df:16:d7:fb:02:b9:
                    c9:18:2d:b1:bc:0c:3e:46:b3:ea:6f:4d:b8:73:1f:
                    11:af:dd:9a:01:62:99:2f:ec:1d:cc:09:ac:23:77:
                    a7:d7:20:3b:a6:33:2a:97:a7:60:59:7d:27:ea:83:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:F8:3D:41:69:70:7D:42:9F:AE:AF:E8:A0:3C:9A:E6:55:63:13
            X509v3 Authority Key Identifier:
                keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:49:c5:c7:d0:e4:53:9f:ca:fc:d5:1d:af:99:80:c8:c3:fa:
         29:98:d5:aa:8c:eb:cd:84:18:0f:cd:76:35:53:0d:8e:46:0e:
         9f:2f:3f:be:2c:a2:5f:14:ed:3d:10:a1:e0:6a:f1:ab:d4:ee:
         0a:6b:35:7c:f1:09:a7:05:e5:59:82:81:85:99:70:43:d6:b5:
         73:d4:d6:25:e8:66:ef:cf:a8:91:83:29:39:55:3d:2e:2d:42:
         23:7d:b0:5f:7c:5c:fb:f7:b6:8e:2d:f9:ff:83:b5:5b:d1:97:
         b3:7d:ab:85:5e:a4:a8:a0:d1:dd:b8:e2:90:75:12:76:5a:8d:
         cd:70:cf:53:db:ff:c0:be:da:ba:d1:20:4b:25:c1:77:f5:30:
         d0:90:37:02:10:ae:6a:09:66:e3:d3:33:fa:c3:a3:f5:2b:1c:
         5d:18:a9:ab:b1:f2:c2:df:60:bd:3f:09:39:ba:37:b2:a9:dc:
         0a:81:b3:5e:a4:8b:8c:10:51:cb:26:6f:3b:b6:fe:4a:d9:e4:
         05:ee:18:fe:50:d9:27:a9:ab:ca:8f:b5:5c:fe:d4:76:22:d8:
         f5:fb:3a:97:9a:6e:94:4c:e4:74:86:c5:ad:6d:e1:82:03:74:
         68:d5:1a:0e:3d:3c:66:fc:89:5e:39:bb:51:08:cf:74:b0:85:
         2e:ec:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:21:44 2026 by rpki-client