Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File:                     P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier:          AiQSIb/KSKcgcvCHsNimW95+3PZtaWRLg5mO40MDtO4=
Subject key identifier:   EB:93:E4:02:BD:BB:0D:C1:DA:BA:59:DD:72:73:F6:F0:9B:8B:49:75
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer:       /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial:       019ED499762599946AA08401BBD81D3BFED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number:          094C
Signing time:             Wed 17 Jun 2026 08:01:27 +0000
Manifest this update:     Wed 17 Jun 2026 08:01:27 +0000
Manifest next update:     Thu 18 Jun 2026 08:01:27 +0000
Files and hashes:         1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=)
                          2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: dufHYKYlhYE6S3DYnn+4KOE4GwttsXtyuqmGDO8ECiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:99:76:25:99:94:6a:a0:84:01:bb:d8:1d:3b:fe:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
        Validity
            Not Before: Jun 17 08:01:27 2026 GMT
            Not After : Jun 18 08:01:27 2026 GMT
        Subject: CN=eb93e402bdbb0dc1daba59dd7273f6f09b8b4975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:23:95:b7:88:9b:ae:05:a9:f4:65:b8:15:
                    61:8c:53:5a:e2:ef:3d:cc:9c:83:95:ba:51:f4:8c:
                    ce:22:ff:cf:77:53:03:77:af:76:98:2f:4b:ba:1e:
                    73:6c:98:d6:36:96:76:2f:23:53:51:02:12:a5:e8:
                    77:ee:1f:29:eb:53:d1:ed:2e:f6:1a:ca:11:2f:d3:
                    af:b3:34:a1:11:2e:4e:c4:d1:c3:a5:db:b4:33:a5:
                    d7:dc:60:7f:9d:32:c0:de:50:ae:05:ab:a6:5d:22:
                    be:9a:e7:60:79:5a:27:f8:2c:4f:09:2f:f0:f5:92:
                    c7:0b:64:f4:50:bd:08:5f:ec:4a:aa:d3:79:d4:14:
                    25:a1:84:b9:0e:8f:fb:09:b7:60:37:a3:10:3c:68:
                    e8:8c:1a:f3:28:77:bb:e2:2d:f0:5b:f3:ee:63:db:
                    b8:67:fe:77:43:66:16:19:15:e9:47:0d:ee:0a:ae:
                    82:66:9c:d6:d5:c7:8f:18:22:95:58:31:bf:79:6e:
                    79:fe:1c:cd:3a:26:fd:c9:1d:62:9e:19:c6:8d:0f:
                    ab:d2:b3:3e:f7:64:f4:91:e2:e2:7d:d9:8f:01:55:
                    f3:f6:f8:54:81:66:04:81:b8:86:24:a6:33:a2:6e:
                    b9:01:b6:42:1f:13:88:38:d7:e5:01:8b:52:a0:82:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:93:E4:02:BD:BB:0D:C1:DA:BA:59:DD:72:73:F6:F0:9B:8B:49:75
            X509v3 Authority Key Identifier:
                keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:ef:b1:ea:45:0b:5c:9f:23:22:2d:14:23:65:aa:32:5e:
         6a:21:d7:41:5b:24:ba:03:10:00:f5:3b:7d:83:f6:0b:bb:a9:
         ec:ef:56:7c:4a:6a:2a:2e:69:e4:50:85:bd:4b:fe:38:7a:30:
         9b:9a:8b:ed:07:23:51:a1:9e:fd:1b:92:0b:28:cd:7a:c7:26:
         cb:e8:89:1b:53:3b:3f:f3:d1:b0:95:54:97:ec:7d:11:e2:f2:
         1d:54:c5:9e:29:2a:21:a2:52:3b:21:9d:74:8a:80:bf:04:2d:
         6f:a0:a6:74:1d:e5:ae:a9:f0:03:ae:b2:eb:51:cf:df:f5:8f:
         22:77:0d:ea:64:8d:fe:c0:fa:21:ba:1b:8a:3f:05:5f:dc:d2:
         ec:ed:40:18:ac:98:da:aa:a7:52:1f:fc:e3:ea:5a:6e:53:bd:
         cb:2c:91:31:72:17:d4:e7:e3:22:79:06:c9:55:0d:0e:d1:fe:
         2f:b3:f4:e3:d8:d2:7f:cc:b5:27:2e:06:c1:a8:06:19:61:27:
         94:93:49:db:97:40:2d:ed:90:a0:49:ba:f8:8d:8b:ac:2e:b4:
         1c:cb:fd:7a:55:43:3c:71:0c:fc:e0:16:ca:18:81:c2:f8:eb:
         fe:28:3a:e7:38:96:8b:cf:05:bf:00:7e:36:aa:c1:f4:12:53:
         4c:43:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:17 2026 by rpki-client