Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
File:                     obtQVKF8yU__wrwpWhW_74qQQwo.mft (raw, json)
Hash identifier:          H42CA7IWzxRvNIiLDZceJ3bq766E5AO6cydbFeUNJDE=
Subject key identifier:   8A:1D:0E:18:A6:87:62:82:79:3F:4A:8D:09:C8:6D:9D:67:D1:D4:AC
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Certificate issuer:       /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial:       019EBEED1976EABFF4E5C1047405E0B37429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
Manifest number:          096F
Signing time:             Sat 13 Jun 2026 03:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:10 +0000
Files and hashes:         1: 7PC27OPKTmB0TCcSiVXYJK9WFIs.asa (hash: yw12opdZtS3FAbe5nCehts1Uh2Vll7TupGePhAN8/WY=)
                          2: obtQVKF8yU__wrwpWhW_74qQQwo.crl (hash: wZGj6jBFCp76X+UympxBVE/Ago5HGwkQ9NDU3Fy0ib8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:19:76:ea:bf:f4:e5:c1:04:74:05:e0:b3:74:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
        Validity
            Not Before: Jun 13 03:01:10 2026 GMT
            Not After : Jun 14 03:01:10 2026 GMT
        Subject: CN=8a1d0e18a6876282793f4a8d09c86d9d67d1d4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:be:89:8f:4c:62:89:12:bc:dd:94:d9:ec:
                    a3:24:34:20:a1:fd:08:af:97:a8:3b:30:cd:8a:f3:
                    8a:56:62:d4:d2:35:91:86:ed:21:57:76:96:33:d9:
                    1d:cc:ff:11:1c:2d:28:01:1f:bb:49:3b:63:a5:c4:
                    c5:22:fe:76:29:30:23:d7:3d:c7:e5:5b:12:65:98:
                    73:55:1e:df:76:7f:88:cb:75:f1:05:e3:6f:cf:c1:
                    33:35:96:b7:ff:40:44:9f:72:9f:6f:37:a8:73:94:
                    ce:c9:95:b4:4a:c1:67:01:28:a6:13:7c:48:df:f5:
                    21:26:40:06:e7:3b:05:ac:d7:bb:a2:d1:19:af:e1:
                    34:a2:9e:5a:ed:7b:28:e4:e2:a9:cb:5e:04:4a:a0:
                    5d:78:6a:78:56:80:ff:f9:47:8b:b5:b6:77:c1:9f:
                    5a:9e:9a:df:dc:f9:34:75:90:c8:42:a3:5e:9c:aa:
                    37:b3:8c:30:eb:08:d6:cb:98:de:fb:97:12:37:98:
                    9d:6a:be:59:4e:8d:4f:ad:68:42:52:bc:c5:2c:d2:
                    58:05:6b:c3:a1:b5:07:7c:ba:8b:56:4e:28:6a:e4:
                    52:0d:0a:06:9c:39:ee:40:71:ec:bf:b9:c3:5d:4b:
                    b1:81:2b:e8:c9:97:f1:5e:29:3a:7b:cf:ac:a8:c9:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1D:0E:18:A6:87:62:82:79:3F:4A:8D:09:C8:6D:9D:67:D1:D4:AC
            X509v3 Authority Key Identifier:
                keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d3:ac:3c:11:f9:14:ce:fc:6b:5a:e1:d1:0c:a4:a4:90:00:
         a3:1d:6b:a5:3c:67:c9:12:1a:0f:ba:bd:fc:bf:b5:51:29:fb:
         a0:96:9d:4d:cc:1e:1e:28:1d:2b:56:47:7e:1f:e9:2a:9e:af:
         bf:4d:d4:49:ae:76:f7:8c:90:8b:f7:7e:df:18:96:eb:a5:f2:
         0e:ca:d9:ec:17:62:37:c0:46:f0:4e:69:55:cc:00:a8:c9:5e:
         d0:60:10:80:e4:cd:89:18:ec:49:aa:4f:7d:64:a6:7c:30:7b:
         78:86:97:f0:6c:84:7e:c9:83:46:7a:d9:ff:b6:b2:0d:dd:e0:
         b4:6d:4e:e6:26:9b:b8:a8:6e:12:dc:a9:5b:6b:a2:4b:17:82:
         4a:a9:2b:3f:80:10:2a:08:60:7e:ec:9b:27:6f:26:39:83:45:
         3a:6b:f1:dd:77:0a:36:ec:99:47:29:6f:30:58:b5:76:51:f0:
         93:b1:74:f3:51:88:fd:c7:d2:7f:57:63:12:95:22:b4:c0:47:
         a1:7f:9d:25:e5:59:12:f5:76:ab:42:4c:9c:96:8c:52:c5:e2:
         67:f0:88:f1:56:b8:e5:9c:1d:f3:59:fb:eb:16:f6:c8:36:d3:
         f0:1c:d3:f9:2a:46:d5:ae:d5:85:83:ce:62:34:50:e1:c3:4d:
         28:de:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:27 2026 by rpki-client