Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File:                     9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier:          uGUGWPrO3a+no2Ysom/capzJ6Pc9sxoGoyQx92hEPbk=
Subject key identifier:   C4:0F:E3:E3:06:B7:68:DE:87:DB:3D:AE:85:BF:DF:5B:78:87:B8:5D
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer:       /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial:       019E1C7D57A605DB66DC4C1814E941E79D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number:          16D6
Signing time:             Tue 12 May 2026 14:00:36 +0000
Manifest this update:     Tue 12 May 2026 14:00:36 +0000
Manifest next update:     Wed 13 May 2026 14:00:36 +0000
Files and hashes:         1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: qYYO73kMT0fPJSpd0fv7iVsB4Va4Wzc//BY7XdSI1us=)
                          2: QlPUYBIgA-X6jp0IaJHxAc-p46U.roa (hash: HXbV30gZlG5FM4CNzA/Ff6hakg3IrjI+qN7q3gKgozw=)
                          3: tyC-pTUzo6nFgSSwAa_6pbmsyAg.roa (hash: RK6LVWTWWbUKXe8FdCeUVJN0A7lPCOyvPPPfNNmHAao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:57:a6:05:db:66:dc:4c:18:14:e9:41:e7:9d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
        Validity
            Not Before: May 12 14:00:36 2026 GMT
            Not After : May 13 14:00:36 2026 GMT
        Subject: CN=c40fe3e306b768de87db3dae85bfdf5b7887b85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:7f:95:c5:ee:2c:54:bf:4c:e5:63:85:dc:
                    12:cc:99:d1:71:af:59:b7:13:95:f2:6e:47:b0:44:
                    dd:54:26:b0:dc:ee:a1:14:42:0b:e6:aa:1d:8d:f8:
                    0f:0d:41:ff:d8:52:97:7a:b3:3b:ee:32:1b:23:d3:
                    be:de:53:a5:6f:65:b8:1a:6e:48:84:ce:5a:62:55:
                    a6:69:a1:d2:2a:b2:9e:d7:58:0d:80:98:70:78:89:
                    bc:39:cb:e3:18:85:7e:e9:67:6f:3a:c1:58:e0:58:
                    59:d5:5f:f4:e2:99:19:d5:bb:fd:0f:6f:ff:09:e8:
                    22:b8:60:70:ac:06:56:a6:e0:01:e8:da:cd:8d:0c:
                    d1:7c:f7:c2:c3:43:2e:8f:f6:46:d9:0a:bf:8d:59:
                    58:5a:b0:da:9b:8c:e3:dd:c6:b0:f9:ad:8a:ff:14:
                    8a:f1:c5:f7:30:41:3b:16:4a:ad:ee:91:71:95:0c:
                    c5:5b:c8:b7:fb:df:c2:2f:db:ef:e4:de:6f:b4:e3:
                    f4:18:81:f1:ba:d9:80:08:52:56:48:33:f3:49:02:
                    52:8b:72:0b:bc:27:1f:56:10:a3:81:38:60:6a:4d:
                    2e:49:c5:32:e1:fc:b4:8f:c5:43:dc:e0:e2:37:96:
                    de:eb:21:a7:a3:3a:86:d0:5e:b8:70:7f:35:12:8c:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0F:E3:E3:06:B7:68:DE:87:DB:3D:AE:85:BF:DF:5B:78:87:B8:5D
            X509v3 Authority Key Identifier:
                keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:83:39:d5:34:8c:07:a8:90:d9:21:ac:76:c4:fa:0b:8d:f2:
         2d:59:77:54:f6:e2:36:8d:5f:97:99:6a:a7:98:0a:af:f9:89:
         45:93:54:be:9f:74:b0:7b:a4:74:99:18:b3:50:01:0e:4b:ec:
         8a:54:82:6e:4f:14:fc:08:93:4a:cc:f5:85:60:12:47:2e:42:
         35:26:80:0b:91:40:3e:e5:b7:0d:d7:44:db:c0:64:be:66:20:
         2f:4a:ca:9c:8c:91:96:1f:e6:67:60:b0:e7:c2:28:80:e8:38:
         16:0c:57:0f:43:fa:d9:ae:d3:be:ef:eb:0e:6b:f9:30:59:cd:
         e1:25:9b:56:e9:6c:eb:fd:2f:19:db:c9:53:89:af:ed:a2:7f:
         72:93:07:e8:da:93:24:6a:46:fd:2e:79:02:fd:80:96:d6:a8:
         86:15:41:d7:76:59:2a:09:10:fa:b5:e2:48:0b:7e:07:dd:27:
         17:4f:e5:03:52:09:ac:07:e7:db:66:56:3e:6e:b3:f1:df:9f:
         57:ce:48:b2:e0:55:4e:48:0a:60:9d:13:6a:d5:0d:12:03:65:
         db:28:ff:b9:8c:46:9f:a2:fb:a5:56:6f:81:0e:b1:6e:ff:24:
         09:e7:7e:b0:c4:b3:fc:95:56:c7:e9:a8:e0:a7:18:01:c8:be:
         5c:7b:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:04 2026 by rpki-client