Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File:                     9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier:          OvJJ3CPRKDzOZryLoFhnA+kDDGZjrF8Pnv72YBbW2P0=
Subject key identifier:   63:6C:DE:64:72:AA:C7:2E:89:94:32:6F:41:33:EE:01:DA:2C:EB:4E
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer:       /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial:       019EBE7ED5A72812B45458BC3B3E4876B306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number:          1955
Signing time:             Sat 13 Jun 2026 01:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:43 +0000
Files and hashes:         1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: eNdZ9LP8oOASyklA4v9Yc6vuOCivnqz37T/wVG0q3S0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:d5:a7:28:12:b4:54:58:bc:3b:3e:48:76:b3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
        Validity
            Not Before: Jun 13 01:00:43 2026 GMT
            Not After : Jun 14 01:00:43 2026 GMT
        Subject: CN=636cde6472aac72e8994326f4133ee01da2ceb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:11:a7:43:41:07:cf:b7:e6:4c:ec:d1:0a:
                    9f:54:72:58:b1:05:d7:94:a1:b5:c6:64:b4:bb:9f:
                    a2:c3:9a:2f:d0:6f:a2:9d:04:67:bf:bf:41:c6:53:
                    ec:6e:69:48:ab:2a:1a:af:7b:26:fa:50:51:c5:49:
                    23:8f:31:ab:92:5b:ea:a9:11:17:f8:fc:11:f4:b4:
                    e3:36:92:fe:3f:06:2b:90:c7:21:b3:cf:7a:23:c7:
                    02:c0:53:e0:a5:25:4d:85:e4:15:7a:1c:c6:c9:65:
                    d7:b6:4c:fe:c9:4c:f8:82:67:24:f2:0c:ce:1b:9d:
                    f4:a2:cb:96:92:44:b7:b2:30:8d:45:78:e0:4d:eb:
                    1d:75:66:c7:cf:12:88:cb:6d:43:b0:38:1a:37:c5:
                    18:4c:bc:dd:80:88:15:0f:58:00:99:63:45:4f:8f:
                    f3:50:97:02:dc:16:06:d4:93:c1:53:e2:1c:c4:cd:
                    0d:12:68:4b:89:a4:43:2d:9c:da:a5:e0:2d:42:47:
                    30:5e:44:4f:fc:34:72:ed:42:14:8a:7b:b6:b5:5d:
                    6a:07:09:fb:2c:1f:d5:e6:52:89:fe:d0:0c:58:a1:
                    88:8f:bc:27:60:30:c8:27:17:16:40:a2:fb:d9:ca:
                    e9:5d:e9:ec:82:cf:a4:c3:8d:90:b4:80:d1:da:a8:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6C:DE:64:72:AA:C7:2E:89:94:32:6F:41:33:EE:01:DA:2C:EB:4E
            X509v3 Authority Key Identifier:
                keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:93:c3:be:dd:e7:2a:bb:20:b8:d3:b3:d5:50:04:0e:7e:d4:
         c0:ed:68:e5:9e:32:23:d4:e3:0a:a2:f1:f9:57:c9:7f:41:46:
         37:51:d6:e2:be:1d:22:ce:7e:29:e8:f0:ec:f1:67:72:00:50:
         e1:73:f8:62:e1:b2:27:5c:8b:8e:38:ef:fc:70:3e:68:bf:6a:
         4c:8d:55:f7:a9:6f:91:22:7d:60:7f:c4:14:b3:64:a8:71:6c:
         81:f5:af:0b:b7:e3:64:8f:4c:46:a3:f6:d3:aa:a8:81:80:90:
         88:c5:fc:5c:e2:a4:e5:37:fb:15:8f:f5:e6:a7:1d:50:85:22:
         3e:b9:9b:cc:0e:32:d8:12:ab:7a:ef:14:44:f6:70:4b:5a:0b:
         d6:9c:58:c6:2b:55:aa:c2:c6:e0:11:73:6c:61:0b:cb:88:9d:
         fa:b4:e6:6d:dc:09:46:c8:cc:3c:87:ac:2a:91:ef:b6:10:2b:
         21:86:c7:49:0d:55:b7:8d:1b:3f:3b:d7:e9:0c:7c:19:01:39:
         bc:26:66:7e:fb:e5:bb:d5:a2:f3:40:63:c8:78:94:4e:80:60:
         68:99:b6:a4:d6:f6:3f:30:69:1d:f6:17:47:1e:8e:99:65:ff:
         05:d3:d6:f9:65:a2:74:38:08:b8:93:26:ba:53:1b:3e:18:45:
         ed:71:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:16:06 2026 by rpki-client