Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
File:                     95u9TEfb9fza_nkDH2kCWgI-W7s.mft (raw, json)
Hash identifier:          Wp0SFp7Qz8qxUbvT7U4Z1WebBH//qNVfCYx3Yt7ivA8=
Subject key identifier:   A9:BD:0A:DB:20:1E:BA:E5:99:0E:03:58:44:97:6A:EB:E4:DC:D6:0E
Authority key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB
Certificate issuer:       /CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
Certificate serial:       019EBEB649C7475FF4A9910150086F8D3415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
Manifest number:          0171
Signing time:             Sat 13 Jun 2026 02:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:17 +0000
Files and hashes:         1: 95u9TEfb9fza_nkDH2kCWgI-W7s.crl (hash: 1jRhJqAwUka0+13pFHACiWsTG3Z3O9jr5ZeyUlH2z2M=)
                          2: by0eY8jt_L5fx9W87L3CZluMFdU.roa (hash: hRQTXarZIjD/2yMGzFBr+0z1wRW53BZA15ZD3Lfkxvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:49:c7:47:5f:f4:a9:91:01:50:08:6f:8d:34:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb
        Validity
            Not Before: Jun 13 02:01:17 2026 GMT
            Not After : Jun 14 02:01:17 2026 GMT
        Subject: CN=a9bd0adb201ebae5990e035844976aebe4dcd60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:bf:ca:f8:01:df:32:bf:72:20:d0:b6:61:
                    5a:7a:41:72:bc:c1:e5:8f:4e:96:c1:17:d8:03:fa:
                    bb:fd:63:8f:39:04:42:d7:20:78:f5:56:25:0b:b2:
                    c1:5e:2b:8d:b8:0d:41:cc:7e:3a:63:74:aa:af:92:
                    d9:28:23:7e:c7:a6:b9:2f:29:9d:9b:4d:24:e8:b9:
                    13:b5:16:32:ce:f3:53:98:bc:4e:63:b6:59:64:90:
                    2a:49:a4:95:1e:5a:c1:dc:e6:87:bb:d0:8c:0d:a8:
                    50:c1:87:de:ac:41:4a:b8:f8:e7:a8:6d:09:74:51:
                    b1:f8:bd:6d:a6:13:97:04:ca:a3:a2:59:67:4c:0a:
                    be:a1:6d:20:29:f7:16:82:82:32:de:85:7e:c0:74:
                    c4:50:3f:2e:64:35:8d:ab:45:54:58:71:c6:5e:88:
                    1f:b5:47:c7:cf:aa:df:22:45:80:dc:e7:38:9e:59:
                    34:d8:0d:a0:87:6c:02:0e:78:35:04:80:2e:f5:44:
                    1a:92:4e:db:50:4f:48:4d:65:9c:2f:c3:fd:cd:99:
                    e9:11:04:6c:a5:29:ca:9d:f9:bf:96:36:33:f1:a6:
                    39:01:ff:62:5e:79:fe:12:48:44:af:c0:ef:17:4c:
                    59:66:a0:20:fd:5d:9f:c7:aa:3d:57:ee:af:51:31:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:0A:DB:20:1E:BA:E5:99:0E:03:58:44:97:6A:EB:E4:DC:D6:0E
            X509v3 Authority Key Identifier:
                keyid:F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:46:d8:8c:24:8f:61:86:6a:30:00:32:15:1a:c1:b5:ca:64:
         78:b8:a9:5b:24:60:e4:ac:86:12:1c:93:7c:1d:dd:f9:c5:3f:
         5c:2a:69:f4:f4:2e:36:b5:69:6f:b7:3f:0c:d6:88:dc:d2:23:
         37:93:90:d7:3b:1c:12:79:11:75:e3:d1:90:3c:d8:72:e6:cd:
         64:a6:3a:51:67:48:73:20:6d:8a:23:4d:b9:32:83:4f:cb:d4:
         9f:2b:93:48:7e:d8:a5:78:6e:df:c9:91:1c:16:58:98:a3:fb:
         59:f8:b9:da:ef:0e:20:e4:1d:13:f7:b0:ca:02:a7:02:35:ac:
         e0:a8:00:0e:80:3a:89:fb:f9:43:90:3e:ca:38:60:2c:a2:53:
         21:d6:ab:b8:27:13:d3:68:52:e3:f3:35:be:04:b1:38:e5:22:
         84:a5:c2:1d:aa:8e:73:be:cf:3e:5f:29:2c:25:ba:00:49:a7:
         be:2a:08:b8:19:da:28:54:52:ad:13:b8:49:05:c7:bc:f2:fe:
         db:83:33:76:a8:27:a9:78:b1:8e:52:23:c5:06:41:ad:ca:21:
         ef:bd:62:17:75:f4:8e:d2:52:35:35:ac:4a:59:9f:c2:ce:49:
         20:56:a2:d0:80:6f:a7:87:0d:0d:89:61:f9:e1:c5:8a:e3:d9:
         21:56:55:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:10 2026 by rpki-client