Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File:                     fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier:          zuJiE4IRlPnis3LEpA2562sAJUAdtV+w7IAx1zrr/vE=
Subject key identifier:   A9:EC:72:41:80:2C:22:A7:B7:9B:15:AB:3A:D4:94:63:A4:63:B1:5F
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer:       /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial:       019EC25C5B2957EA86C809CDD6B93ED3D908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 19:01:32 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:32 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:32 +0000
Files and hashes:         1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
                          2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: DT4v/zGzmS7UZqT4P9qB8V6zbSQL7BhWCISuom2kMGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:5b:29:57:ea:86:c8:09:cd:d6:b9:3e:d3:d9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
        Validity
            Not Before: Jun 13 19:01:32 2026 GMT
            Not After : Jun 14 19:01:32 2026 GMT
        Subject: CN=a9ec7241802c22a7b79b15ab3ad49463a463b15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:41:88:e4:f2:5b:d3:b0:24:6e:bf:c6:6b:
                    7e:1e:4c:e9:47:34:e5:7e:db:0d:52:be:a5:a1:8e:
                    02:19:30:ef:a9:3b:82:d4:c3:94:a4:f2:f0:2b:ce:
                    50:5a:6e:1d:5a:a2:03:50:e2:70:c8:3f:60:42:e3:
                    be:5c:7f:6a:ac:f7:c1:5e:c0:bf:a6:6b:91:d1:ae:
                    09:60:89:c8:9f:4f:b1:f1:8c:d3:ba:80:16:51:ee:
                    cf:f8:67:1b:55:29:2e:b5:90:62:5c:10:27:a0:e6:
                    e7:d4:72:3d:4f:ca:7a:8d:ec:88:85:27:c9:5d:a8:
                    eb:ca:3c:74:63:8a:5c:5f:f1:6f:e5:bc:75:b4:89:
                    29:a5:9c:d3:1e:77:e4:cd:6b:9b:76:6f:ab:7c:da:
                    3b:bd:8b:8c:89:af:3c:8d:4f:df:8d:51:5b:77:0f:
                    f1:19:86:9e:1b:24:94:46:df:f5:4a:a0:4b:83:4b:
                    6c:7d:ad:f3:2f:ac:77:59:42:91:e1:2f:c8:2b:68:
                    ba:d2:08:d6:7f:56:5a:38:21:ec:26:98:b0:89:07:
                    ee:f4:d4:59:c3:b0:16:4b:eb:fe:3b:ed:0d:c2:4b:
                    fe:d8:ce:af:50:85:af:9e:cf:44:f5:4e:74:0b:2e:
                    3a:ae:d4:65:43:61:a5:cc:bd:44:97:e1:4b:ef:a4:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EC:72:41:80:2C:22:A7:B7:9B:15:AB:3A:D4:94:63:A4:63:B1:5F
            X509v3 Authority Key Identifier:
                keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a2:b4:a0:6f:eb:64:e8:3d:db:5e:4b:1f:c9:4e:44:bd:e2:
         38:18:2a:7c:56:be:a5:f2:bc:5f:ca:e1:b0:17:85:fe:3a:c5:
         fb:c9:11:9f:fd:d6:a6:58:3f:d6:97:87:23:e0:f8:10:35:b0:
         db:8c:e5:6f:50:27:35:7b:ac:77:6a:81:bc:25:2f:c5:0b:95:
         e7:97:f6:bb:46:c5:5f:e9:9b:30:57:f5:19:a1:07:af:2a:3c:
         6c:93:32:d6:57:bc:97:03:5d:35:98:48:60:b7:9a:68:82:7a:
         53:92:e9:9c:74:57:00:28:01:65:84:42:67:37:46:73:d7:65:
         a1:ed:cc:f4:4e:d4:dd:0e:34:26:3c:be:be:be:0e:ae:f7:e9:
         ae:91:66:7f:a2:7d:f5:9d:a0:13:67:88:68:0e:f1:97:6f:c9:
         cd:b5:19:96:dc:ab:de:f6:31:b3:c5:bc:e7:d9:8c:a2:f4:72:
         2f:00:7f:fa:20:64:1f:f4:fd:86:84:e1:92:c4:f7:24:dd:98:
         94:59:9c:e3:2f:df:68:f7:43:f0:ef:b6:b4:ae:f2:2c:fd:b0:
         49:6d:d3:66:5c:31:ff:d3:36:7b:0a:91:61:c6:d2:10:99:39:
         55:bd:01:a7:72:c9:9c:e6:0b:46:09:f0:64:d2:04:72:c1:89:
         a8:de:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:33 2026 by rpki-client