Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File:                     8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier:          NVyC+FzhCSohElm8VpvGZOR4NrZOUbA6PkTX5xoxIiU=
Subject key identifier:   D5:07:B8:B0:06:76:3C:9D:4F:8B:49:42:54:82:87:F2:A8:91:8C:83
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer:       /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial:       019EBDA2AF5DF011B3690D6DC50E5E856F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number:          185E
Signing time:             Fri 12 Jun 2026 21:00:15 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:15 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:15 +0000
Files and hashes:         1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: NK7j3esw+ABt1SPzpDZj4WGxITCbuY4HHQ8BJMjCzc0=)
                          2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
                          3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:af:5d:f0:11:b3:69:0d:6d:c5:0e:5e:85:6f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
        Validity
            Not Before: Jun 12 21:00:15 2026 GMT
            Not After : Jun 13 21:00:15 2026 GMT
        Subject: CN=d507b8b006763c9d4f8b4942548287f2a8918c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:90:35:a4:ec:6c:ea:89:d1:0e:3e:e0:25:
                    ac:a0:93:82:9f:69:c3:e9:9a:6d:ec:d8:fc:8b:c5:
                    c4:83:d7:c2:4a:64:4f:6e:dd:80:7e:93:dd:93:98:
                    42:da:a7:15:d7:78:44:4e:4a:48:d9:d3:e6:92:a3:
                    77:98:26:74:2d:fc:78:9e:c1:92:d8:06:7e:21:aa:
                    74:a5:38:8d:ff:90:a2:ae:e3:e8:0c:37:fe:cf:98:
                    52:12:00:2e:93:b4:1b:8c:eb:58:f5:c2:2e:ce:81:
                    de:c1:49:58:e8:ba:8c:18:e0:0a:bc:70:a7:9c:56:
                    6f:b8:01:46:91:52:b5:aa:f8:c6:13:6f:9c:f9:75:
                    fa:ba:5e:de:dc:28:2b:73:37:c9:25:cd:ec:ae:90:
                    ec:02:11:89:24:3a:69:90:eb:7d:c5:1b:e2:7d:7c:
                    1c:af:60:4a:e6:e9:a0:78:14:73:95:5d:07:72:0d:
                    2c:bf:1f:b3:9d:58:00:01:1b:34:83:f7:4f:58:29:
                    f8:7f:46:87:11:ed:99:3e:81:96:b2:75:72:62:a0:
                    64:f0:8a:1b:d5:8a:28:5b:04:92:ca:77:4a:df:b4:
                    14:a6:cb:aa:b5:7b:7c:ce:4e:3d:77:25:df:8c:dd:
                    e0:5f:42:8b:a7:f2:45:b9:c1:92:9b:7c:2e:b2:92:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:07:B8:B0:06:76:3C:9D:4F:8B:49:42:54:82:87:F2:A8:91:8C:83
            X509v3 Authority Key Identifier:
                keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:62:1a:5d:22:1b:20:50:9c:5e:d8:60:f8:ed:f3:da:88:
         60:e1:48:7c:3a:93:3c:13:7b:98:10:64:14:af:c1:0c:07:8a:
         c5:8b:bd:9d:e2:0f:21:8a:8b:22:eb:e4:f7:b4:6d:30:e5:41:
         d7:2c:95:30:a9:dd:0a:09:0e:cc:cf:ee:a3:72:1d:e0:41:22:
         c5:54:43:50:bf:af:dd:37:02:38:0c:8f:9b:25:89:74:de:5d:
         13:7e:08:b4:54:1a:11:38:65:5c:14:4e:db:52:f7:d0:bb:b4:
         03:4f:06:69:5d:d7:ee:66:f0:6c:10:d9:6d:2e:1f:42:19:19:
         7d:54:e4:5b:c4:3a:70:50:81:37:79:70:12:d5:b3:55:c6:e1:
         31:1f:3d:cb:ae:9d:97:29:9a:ed:77:0f:d5:91:04:0b:b0:93:
         69:f9:6d:b2:b1:f9:6c:49:ca:db:8f:2b:9f:51:05:08:3d:99:
         81:b6:5c:41:32:d4:d8:40:90:da:3d:2e:45:73:c5:bb:c3:84:
         12:48:c3:34:a2:5b:fc:ee:9f:20:aa:f6:1f:f1:7a:1c:ef:cd:
         b5:1c:d6:3c:11:d0:7c:47:56:c8:5d:de:1b:ea:44:da:d5:30:
         c7:0e:4a:54:86:65:13:60:f6:8e:c2:6f:40:bb:59:26:17:f3:
         4a:f8:10:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:47 2026 by rpki-client