Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File:                     9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier:          E0Jo9FMZl1+oLmkw/8sveMoVeTV6kuokiBmDjOzFU10=
Subject key identifier:   CA:53:9A:30:09:94:2C:D8:43:31:05:5B:48:BF:75:29:48:5B:B0:BC
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer:       /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial:       019EBE10A472C69FC8957125CD6A780517E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number:          195B
Signing time:             Fri 12 Jun 2026 23:00:22 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:22 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:22 +0000
Files and hashes:         1: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: 2e+YE4Q/CuNplp9lB9DEH/+2Je91TCn+QPK8Zk/Na5A=)
                          2: ZEzLOpu5XtR6NBna_6IDb8EqXXs.roa (hash: 3osUcSjQKH0ELMcPBLnQ81viVvl9FJ67k0/UaKaDqp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:a4:72:c6:9f:c8:95:71:25:cd:6a:78:05:17:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
        Validity
            Not Before: Jun 12 23:00:22 2026 GMT
            Not After : Jun 13 23:00:22 2026 GMT
        Subject: CN=ca539a3009942cd84331055b48bf7529485bb0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:c2:af:c9:ae:d2:e7:fd:4c:84:e2:9e:23:
                    dc:b9:93:42:bd:8a:e4:8b:1a:c7:56:23:0c:b7:73:
                    20:6d:54:2b:dd:2c:3b:61:d4:1c:64:09:f7:e7:e5:
                    6b:b9:10:d9:99:24:21:f4:bc:c4:1b:00:24:5d:58:
                    40:a8:84:af:63:23:a5:cf:01:64:a0:18:ec:53:40:
                    15:de:70:78:b2:00:cd:aa:23:f3:01:a9:88:3b:a2:
                    69:ec:f0:ca:70:79:de:78:be:d0:d5:5c:0b:1f:95:
                    f2:8c:dd:38:c7:26:01:3e:4e:0f:87:e5:06:12:8c:
                    93:ec:24:31:c8:a7:0e:f0:ad:a1:e1:30:c8:0b:fb:
                    43:8e:2d:b3:a4:f0:6a:6b:8e:2c:96:f5:c7:9d:11:
                    99:b4:04:d9:da:05:46:71:1b:eb:fc:ca:3d:7b:b2:
                    99:be:de:d1:9a:c0:46:47:2b:d8:78:93:7f:cc:8b:
                    51:a2:68:d0:04:2e:70:3e:72:36:5b:76:b2:a0:61:
                    f5:63:7c:c6:24:11:39:fb:91:35:f5:50:35:ab:f6:
                    b6:7e:bb:ca:97:96:19:94:46:75:45:78:8a:d9:ad:
                    f5:be:66:77:2a:43:83:17:97:a1:02:0a:01:db:68:
                    a8:e6:9f:60:30:ce:22:db:1c:fa:4d:b5:32:ec:37:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:53:9A:30:09:94:2C:D8:43:31:05:5B:48:BF:75:29:48:5B:B0:BC
            X509v3 Authority Key Identifier:
                keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:eb:bb:e9:2b:c6:4b:13:45:65:7d:20:62:24:4e:11:1a:7e:
         59:37:c8:e3:0f:b2:f5:c8:a7:81:c8:02:9f:8b:47:53:b0:d0:
         f1:cf:86:61:f1:63:c0:5d:ba:61:a0:3c:76:d7:fd:d0:44:0a:
         20:3c:b9:d8:59:c6:89:1d:dd:8f:bc:ca:a5:05:a4:2b:cb:6e:
         65:bb:90:bd:81:68:36:ca:bd:48:1c:55:87:60:27:07:2c:61:
         67:39:e6:0c:f2:8d:5d:c1:c0:79:d3:bd:90:2b:68:c0:b3:df:
         df:e4:00:fa:9b:1a:7c:e4:93:ae:da:79:29:37:70:a1:61:70:
         e0:aa:26:61:ab:85:d3:11:bf:66:a8:f8:ec:d1:39:30:f7:dc:
         ea:4e:d8:f5:75:4a:55:41:ae:4d:0b:4d:72:95:f7:12:b9:db:
         06:2c:f2:f8:42:c1:a8:fa:26:2c:a6:19:a6:59:53:75:53:f6:
         b3:43:4c:3a:96:3f:8c:6b:ee:41:7c:80:14:8b:6a:6a:71:d7:
         36:d6:36:c0:7b:69:4d:a5:ed:2b:22:8b:ed:c7:13:6c:c5:54:
         4b:ce:4e:e8:1f:73:d4:64:73:55:44:26:86:b1:8d:5e:5d:ea:
         fd:c9:34:06:28:be:6d:ec:82:2a:7b:b1:33:04:82:37:3b:09:
         c1:6d:bc:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EKRyxp/IlXElzWp4BRfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YTE3MjJlOGJhZGRjMzU4YTE1ODc0MjY1YjQ2Njc0M2U3
MDM2NTYwHhcNMjYwNjEyMjMwMDIyWhcNMjYwNjEzMjMwMDIyWjAzMTEwLwYDVQQD
EyhjYTUzOWEzMDA5OTQyY2Q4NDMzMTA1NWI0OGJmNzUyOTQ4NWJiMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0/Cr8mu0uf9TITiniPcuZNCvYrk
ixrHViMMt3MgbVQr3Sw7YdQcZAn35+VruRDZmSQh9LzEGwAkXVhAqISvYyOlzwFk
oBjsU0AV3nB4sgDNqiPzAamIO6Jp7PDKcHneeL7Q1VwLH5XyjN04xyYBPk4Ph+UG
EoyT7CQxyKcO8K2h4TDIC/tDji2zpPBqa44slvXHnRGZtATZ2gVGcRvr/Mo9e7KZ
vt7RmsBGRyvYeJN/zItRomjQBC5wPnI2W3ayoGH1Y3zGJBE5+5E19VA1q/a2frvK
l5YZlEZ1RXiK2a31vmZ3KkODF5ehAgoB22io5p9gMM4i2xz6TbUy7DeLmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpTmjAJlCzYQzEFW0i/dSlIW7C8MB8GA1UdIwQY
MBaAFPahci6Lrdw1ihWHQmW0ZnQ+cDZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2It
NmUwNzkwNjliNjViLzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2ItNmUwNzkwNjliNjVi
LzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReu76SvG
SxNFZX0gYiROERp+WTfI4w+y9cingcgCn4tHU7DQ8c+GYfFjwF26YaA8dtf90EQK
IDy52FnGiR3dj7zKpQWkK8tuZbuQvYFoNsq9SBxVh2AnByxhZznmDPKNXcHAedO9
kCtowLPf3+QA+psafOSTrtp5KTdwoWFw4KomYauF0xG/Zqj47NE5MPfc6k7Y9XVK
VUGuTQtNcpX3ErnbBizy+ELBqPomLKYZpllTdVP2s0NMOpY/jGvuQXyAFItqanHX
NtY2wHtpTaXtKyKL7ccTbMVUS85O6B9z1GRzVUQmhrGNXl3q/ck0Bii+beyCKnux
MwSCNzsJwW28sA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:27 2026 by rpki-client