Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File:                     9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier:          IlY7K3lNF/ZAddsdhBvFyR1BAn+i4W2MQcxDfIH+wqM=
Subject key identifier:   1A:CB:3D:37:6C:60:E6:70:15:50:39:65:12:68:08:D8:15:0C:0F:20
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer:       /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial:       019EBFC8FD5E79BF4F99EA516C0E792ED513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number:          1966
Signing time:             Sat 13 Jun 2026 07:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:20 +0000
Files and hashes:         1: 3hmmFfAkaIr3Xc9gq50WV7B77zQ.roa (hash: TgVTzYdGFCqlHMqgg6AtuqEuLwbjRjyy8jaNrkkXEao=)
                          2: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: azrxK8fz1+c8VZvuG6nSi8cG7ax9EOBnxgFQzxgXzM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:fd:5e:79:bf:4f:99:ea:51:6c:0e:79:2e:d5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
        Validity
            Not Before: Jun 13 07:01:20 2026 GMT
            Not After : Jun 14 07:01:20 2026 GMT
        Subject: CN=1acb3d376c60e67015503965126808d8150c0f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:75:6d:84:e3:ee:25:4d:e6:84:20:74:11:
                    09:c4:67:a4:55:26:18:bc:66:fa:e4:2b:f8:5c:4e:
                    e1:59:ca:28:03:22:97:ba:09:05:a7:e1:7c:ff:73:
                    68:e7:12:8d:38:95:d3:5e:a2:d6:05:25:91:c8:8c:
                    37:5e:e3:6c:96:e5:4e:ae:9a:82:d3:c3:21:2c:b3:
                    74:39:2b:01:e3:48:53:83:3a:23:ed:37:24:33:f9:
                    4f:c4:5a:09:58:1f:01:eb:a9:07:11:22:f3:51:0f:
                    6a:25:22:77:cc:f0:b5:6f:7f:5f:82:48:88:e5:2e:
                    c0:44:46:73:79:81:29:3e:76:8f:dc:37:61:1e:8a:
                    c9:19:c3:7b:44:e3:8f:3a:7b:ef:86:76:f0:fe:44:
                    0d:cf:6b:bc:a6:17:0e:7e:7d:0b:f1:72:c3:ea:98:
                    e2:03:08:96:d0:48:f4:bd:93:74:81:3b:75:4d:3f:
                    9a:68:3a:07:47:d5:b0:b5:6e:52:37:69:05:da:a9:
                    a1:a7:d6:34:d8:2f:1e:c6:ac:0c:52:14:e2:75:c4:
                    92:cc:5d:b6:79:70:9a:15:08:e2:18:83:87:5c:84:
                    5f:4d:f6:7b:25:39:2d:ed:c9:f8:4a:32:a9:bd:b1:
                    95:b7:8e:18:18:a1:d7:89:84:19:ca:3e:fb:f2:22:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CB:3D:37:6C:60:E6:70:15:50:39:65:12:68:08:D8:15:0C:0F:20
            X509v3 Authority Key Identifier:
                keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:77:46:30:56:59:37:bb:b2:a0:f1:23:b0:85:c6:23:b3:16:
         0a:5f:ef:55:58:4d:0a:c4:7c:6d:7f:1c:8a:cc:54:90:de:0c:
         58:da:b3:ae:f2:32:db:1b:e6:30:72:90:91:d7:59:18:38:95:
         49:9b:40:01:d1:11:44:90:26:6b:2e:b5:78:40:ec:ae:9b:d4:
         b8:48:56:a8:3c:db:b5:78:45:1d:7d:8c:f4:bf:b3:27:ed:0f:
         e9:8c:07:a8:64:a5:2b:e2:85:20:36:9d:45:59:12:87:b8:4b:
         85:f9:07:a1:8f:c6:61:c7:67:7b:0a:88:19:6d:0f:a0:90:42:
         74:5a:f8:9a:f2:ae:0b:21:dd:1b:90:09:8a:6b:fb:9d:c8:6b:
         18:3f:48:91:b0:ba:be:4a:30:fc:ea:9b:dc:89:c2:65:3c:e2:
         b9:1c:61:4e:47:b1:92:83:09:73:1f:e8:fe:52:ed:f5:00:4c:
         77:7d:7a:22:93:8f:48:4c:69:2b:f8:ef:2b:47:dd:38:4b:9d:
         96:dc:46:93:3a:6a:c2:d2:73:48:da:53:64:fc:90:4f:c7:6b:
         ad:8b:09:a4:c9:91:da:f6:32:59:2d:3b:70:24:fb:2e:21:eb:
         81:06:03:f9:c1:51:98:99:9e:22:1d:fc:5e:c1:56:58:32:97:
         40:f0:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:09 2026 by rpki-client