Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File:                     9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier:          lrqBu7ykN4githW9NQwdT5/D7K7TiVQFHH/N0miTxxA=
Subject key identifier:   11:61:DC:C9:A9:08:DE:12:7D:57:71:56:49:9A:E3:77:30:38:B1:91
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer:       /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial:       019EC22463757994E15F029B08B7C2060E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number:          0C8D
Signing time:             Sat 13 Jun 2026 18:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:25 +0000
Files and hashes:         1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: T8c3l6zyKy0QZvWbm94LX/OuNtUeNZR/71TdbP/rJzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:63:75:79:94:e1:5f:02:9b:08:b7:c2:06:0e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
        Validity
            Not Before: Jun 13 18:00:25 2026 GMT
            Not After : Jun 14 18:00:25 2026 GMT
        Subject: CN=1161dcc9a908de127d577156499ae3773038b191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:76:6e:9b:ad:58:51:fb:ad:90:b2:5d:43:
                    f8:e2:6f:1d:62:d0:27:00:4e:1c:10:5f:38:3c:f7:
                    46:07:04:87:79:28:ba:72:21:75:d5:c3:57:61:ce:
                    d0:1d:39:52:ea:8a:5a:21:a0:91:b5:2e:ef:1f:4a:
                    8f:4a:dc:c9:7d:fc:2a:69:b8:9b:6a:6f:91:21:70:
                    6f:20:6c:a4:78:6d:32:12:26:1c:8d:e0:34:f5:e5:
                    19:31:fa:9a:8a:5b:d3:2e:b2:62:0e:98:c0:91:df:
                    fb:9e:0f:5d:cd:06:ad:85:06:c5:b0:5c:51:47:7e:
                    30:a0:a7:54:f8:88:eb:2b:96:c2:5f:04:46:27:59:
                    b2:0b:40:3e:b0:26:51:6e:5b:b1:19:fb:ae:20:bf:
                    52:50:43:4b:cb:25:e9:fd:a3:53:34:bf:aa:0e:24:
                    43:54:88:67:7d:3c:78:27:2f:ce:d9:77:02:ad:e0:
                    a4:72:2e:3a:ff:55:86:4c:d6:3c:50:10:8e:8a:81:
                    eb:88:b6:b5:2c:4a:55:e4:cb:3b:c4:31:31:95:b3:
                    a4:ea:09:79:0d:cd:b1:10:6f:11:2b:34:8f:b4:f8:
                    6f:ca:3e:52:93:c6:46:e0:19:20:37:f6:22:66:04:
                    ff:74:3f:39:13:26:97:54:c3:63:7f:96:3f:7e:67:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:61:DC:C9:A9:08:DE:12:7D:57:71:56:49:9A:E3:77:30:38:B1:91
            X509v3 Authority Key Identifier:
                keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:4e:6e:f8:61:1f:ff:cb:2a:51:df:b9:98:37:df:a7:cf:
         2e:53:9b:7b:36:a7:76:17:a8:72:ba:a8:8c:54:ce:5c:55:f2:
         4e:f5:93:db:f2:2f:2c:8c:48:35:06:65:a1:87:be:78:f1:ab:
         73:4a:9f:03:58:99:05:33:2f:c4:da:5f:d0:f5:73:e1:be:77:
         f3:20:6c:7f:08:67:86:20:fb:fa:cc:5e:dd:01:08:9c:f9:02:
         42:cc:d5:77:64:a9:29:7f:51:9d:98:5f:b9:d1:c2:48:38:a2:
         4e:83:72:b6:7b:63:06:ef:e5:34:a3:6a:02:1c:fb:68:bb:09:
         ac:0b:eb:03:83:05:43:0d:73:72:ca:a0:ef:6a:dd:a3:c9:26:
         b2:f9:0f:33:db:39:a5:3a:5e:e4:b4:3d:50:93:66:da:8f:2b:
         cc:01:92:68:fa:33:30:7b:0b:9a:3f:8a:75:f3:51:ff:a8:39:
         53:cd:79:01:1d:a0:93:79:2f:68:5e:ba:80:38:eb:f5:2a:c9:
         69:77:8f:5d:8c:e0:ed:3a:03:8d:ff:1e:7d:0b:1e:e4:06:60:
         7f:87:9b:d5:84:85:a1:27:27:de:c9:41:c8:da:0c:bc:88:a1:
         66:90:f8:3f:b5:a2:d5:7e:d9:75:0b:be:50:33:70:e1:0e:ea:
         0a:bb:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:28:50 2026 by rpki-client