Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
File:                     9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json)
Hash identifier:          uIZlSBocqXK4OgM3wC4wLDnsWe793o0526ZZHE0BitM=
Subject key identifier:   A4:5A:5E:5B:60:91:D6:76:2F:E6:39:E9:A6:EC:A3:23:6E:26:57:70
Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82
Certificate issuer:       /CN=f510c7b9dcc925983e59b586cd59ab554be25982
Certificate serial:       019EC0DB306B6AEB196079EF892C3B6F6C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
Manifest number:          01F3
Signing time:             Sat 13 Jun 2026 12:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:50 +0000
Files and hashes:         1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: n7MlDJDB/dhjVIHpbrH6fFG8Nk3HoFnbac0zEXRHR6A=)
                          2: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (hash: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:30:6b:6a:eb:19:60:79:ef:89:2c:3b:6f:6c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982
        Validity
            Not Before: Jun 13 12:00:50 2026 GMT
            Not After : Jun 14 12:00:50 2026 GMT
        Subject: CN=a45a5e5b6091d6762fe639e9a6eca3236e265770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:61:1b:d4:d9:28:59:3e:63:2e:97:81:26:
                    ee:a0:2e:ad:63:b8:7f:bb:94:83:be:fa:30:33:1b:
                    1d:91:1f:24:54:b0:41:b1:94:f6:89:1b:a0:ea:33:
                    5c:28:55:b9:fc:20:5c:67:c6:8a:be:c3:55:ea:e5:
                    be:05:41:46:e4:89:61:94:ba:c2:85:6e:f7:4d:ad:
                    b6:45:d2:71:54:47:98:51:66:fd:fd:d0:fa:4c:d6:
                    20:bf:cf:29:fa:2c:4d:18:ec:81:71:2c:e3:b4:85:
                    c0:e2:66:9e:bc:aa:4d:27:8b:1a:70:5f:1a:5f:50:
                    94:bf:0e:7b:ab:72:38:c0:72:c5:ec:16:f2:13:0e:
                    1e:eb:ca:67:14:4e:67:13:6c:0f:63:00:76:9b:a2:
                    76:0a:59:56:31:92:21:88:f1:e1:9b:24:50:27:f0:
                    a7:25:51:c1:8c:95:db:be:29:83:f2:34:f8:9c:e7:
                    9e:da:35:29:d8:9c:b7:54:01:46:78:08:64:3f:80:
                    8c:af:58:49:fd:f8:57:52:ff:35:f0:05:d2:e8:d4:
                    71:df:4e:2d:bc:e1:fb:bd:1e:09:7c:01:07:be:78:
                    47:fe:e0:87:81:78:7f:34:cb:d2:a9:82:f0:31:af:
                    4e:4e:64:f0:b8:11:b4:ba:7e:29:1c:97:dd:a7:27:
                    96:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5A:5E:5B:60:91:D6:76:2F:E6:39:E9:A6:EC:A3:23:6E:26:57:70
            X509v3 Authority Key Identifier:
                keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:bb:f1:ac:fe:98:e9:a5:fa:66:e2:c5:12:43:80:63:6c:03:
         5e:f1:f3:0e:aa:fe:1a:1c:46:0d:69:7c:19:c8:2d:72:cf:31:
         c9:78:de:8e:0d:4c:17:50:14:7f:b8:09:77:3f:64:9c:0d:aa:
         60:b7:64:f6:c4:3c:32:2d:43:82:c1:f0:a1:26:11:eb:93:2f:
         b6:a1:7a:67:fb:60:52:f2:e2:ea:47:7a:fe:df:9e:ed:4a:9f:
         77:32:64:46:49:46:bd:ac:57:45:45:56:65:52:8b:56:40:9c:
         29:b4:5c:5f:dc:4b:c3:59:25:52:e9:98:d3:40:c4:7d:b9:db:
         e0:5e:bb:8b:a0:fd:d7:a1:0a:a1:19:2d:82:e2:2e:31:55:9f:
         6c:36:ef:b9:62:85:f4:35:28:de:fe:e0:10:c9:43:45:5f:91:
         ea:62:a7:28:43:95:26:26:a4:be:e8:8d:9f:c4:ca:b4:2d:75:
         b2:b6:e5:24:f1:22:5b:e8:b9:6b:0b:ff:df:38:e4:b9:07:6e:
         f8:09:88:2b:50:73:59:5b:e1:43:0f:53:5d:1b:3f:6f:15:73:
         aa:09:06:12:23:a2:ec:cc:0b:41:14:0d:28:33:44:57:cc:1d:
         cd:2c:e4:e8:61:64:f4:58:df:ae:fa:92:38:6d:d7:5a:0d:d4:
         34:46:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:50:49 2026 by rpki-client