Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File:                     0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier:          dq2Y7J4jnbiKBNFlHN3NnUSTTgncA0jlfMhrT7hAXo4=
Subject key identifier:   F9:B0:6F:53:29:05:A8:C7:FD:43:7F:6E:EB:26:C4:AE:A1:8E:29:30
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer:       /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial:       019EBDA2CE5B3D88AA093DAC4ED92964A577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number:          090F
Signing time:             Fri 12 Jun 2026 21:00:23 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:23 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:23 +0000
Files and hashes:         1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: wOoCS2UBn3eSJtZQTQs17k8xmFg+Bd5+Y2rNAtIGdbU=)
                          2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:ce:5b:3d:88:aa:09:3d:ac:4e:d9:29:64:a5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
        Validity
            Not Before: Jun 12 21:00:23 2026 GMT
            Not After : Jun 13 21:00:23 2026 GMT
        Subject: CN=f9b06f532905a8c7fd437f6eeb26c4aea18e2930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:8f:1a:60:21:74:a4:37:0a:01:d6:0d:0d:
                    4f:8b:2f:5b:6c:6b:d2:9c:9d:e1:58:6c:51:cc:25:
                    dc:92:93:6c:19:36:c7:30:2f:77:6f:10:3c:a2:d6:
                    1e:f5:7f:d5:7e:e8:51:ae:cd:ce:4a:3d:a3:ce:ac:
                    68:b7:ab:a0:2c:99:fd:87:45:87:aa:46:68:00:11:
                    bf:63:37:a3:95:e2:8c:96:00:d3:e4:af:bc:5f:09:
                    f8:05:60:1c:4a:19:c5:28:e8:36:59:1b:77:c2:46:
                    67:08:25:15:4c:2b:47:a7:73:64:77:9e:ac:7b:8c:
                    8f:41:99:70:ef:e8:5f:ee:ad:dd:08:3e:6d:94:4b:
                    c0:fa:56:6e:4b:10:f1:ab:79:ea:6b:9f:26:36:02:
                    f3:f0:75:35:ee:8f:f3:16:eb:ea:47:b1:fa:bb:38:
                    74:bc:a4:2e:d5:37:d1:98:6c:f7:a5:75:9f:a3:f1:
                    9a:26:89:02:50:91:2a:76:6f:ed:5e:fc:a5:b4:98:
                    3e:37:08:ab:e7:b9:b7:a5:54:02:2e:a2:f7:e6:32:
                    9d:21:04:2a:eb:e3:b4:0d:76:86:dd:be:24:82:c3:
                    11:77:13:b4:cc:e2:8f:ac:e2:d9:73:63:a9:2b:fa:
                    02:10:70:91:2e:d8:37:79:e5:7e:09:be:68:ce:02:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B0:6F:53:29:05:A8:C7:FD:43:7F:6E:EB:26:C4:AE:A1:8E:29:30
            X509v3 Authority Key Identifier:
                keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:19:07:7e:21:de:b2:8d:23:4e:7b:18:5c:f1:9d:94:79:
         28:83:e4:59:aa:51:b5:9e:43:f2:fe:f0:99:eb:35:04:2a:8a:
         d5:26:0a:b8:37:2c:d1:6c:82:da:f9:f6:9b:e2:bf:36:ed:ad:
         39:85:95:7f:d1:92:27:fc:e3:23:23:43:7a:8f:c8:5c:80:69:
         7b:d7:fa:10:f6:4c:9e:6a:5d:52:ff:ac:3c:88:ad:d2:f8:46:
         76:97:9e:fb:26:dd:7f:e2:df:ad:a3:03:77:9e:f2:86:76:9f:
         67:c4:46:de:b4:5f:fb:31:97:b1:cc:9e:5a:f7:44:cf:e5:b0:
         ed:a1:b0:69:42:2c:4d:eb:7c:e8:97:42:51:c0:5b:91:21:3b:
         05:0f:65:42:2c:94:e8:05:98:8c:df:a6:cc:13:4c:82:e1:bc:
         8e:f7:60:42:e9:bf:70:b0:6d:fb:3b:7a:51:a3:d9:60:cd:3a:
         26:1b:53:d4:ef:a7:b6:fb:37:71:e8:be:3a:78:05:00:0b:1b:
         13:57:47:03:88:99:4e:59:a2:88:16:ed:eb:dd:cf:de:75:5c:
         2a:80:9c:f3:69:29:ca:5f:79:fe:c0:c1:d4:2e:64:64:48:76:
         58:8d:29:53:03:29:43:ad:3b:68:8a:c7:a1:89:f2:fe:2b:90:
         dd:8a:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:37 2026 by rpki-client