Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File:                     9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier:          Ii4y/iXDMt9Uv7iZ4TTRGlDUujNz2qZsH1023bHWIJg=
Subject key identifier:   04:EE:E0:70:3F:27:F8:55:35:B9:C5:33:9F:92:F6:F6:70:A9:45:83
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer:       /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial:       019EB87C54C73CD075679AE0841C66010AEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number:          045C
Signing time:             Thu 11 Jun 2026 21:00:16 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:16 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:16 +0000
Files and hashes:         1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: +31kdS/Ytu6Gs7a2gkYivbIUJ8FWqa7Hem/uE+0cORM=)
                          2: wxYzOEFFE7ZvQ_jUpzfcf7qWdJY.roa (hash: zi/D1IuQaIKBqfBUtIU/P0ojOtlc8op63UfckXGc4cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:54:c7:3c:d0:75:67:9a:e0:84:1c:66:01:0a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
        Validity
            Not Before: Jun 11 21:00:16 2026 GMT
            Not After : Jun 12 21:00:16 2026 GMT
        Subject: CN=04eee0703f27f85535b9c5339f92f6f670a94583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:92:74:75:27:bb:44:9d:5c:1c:df:36:71:
                    07:2f:19:c6:89:40:a9:59:c5:eb:14:d0:44:2a:8a:
                    a5:56:90:68:60:ed:39:4b:36:b9:53:3a:a4:44:c6:
                    bd:5f:a6:8a:f0:ed:72:ee:74:25:67:09:8e:9f:98:
                    86:cb:72:e1:32:9e:05:56:a2:1a:a7:73:0f:1a:6c:
                    06:bb:13:de:84:ae:bb:cb:b0:00:47:6b:77:5c:36:
                    2a:15:38:6a:a2:f4:bb:1d:49:ef:91:71:3d:3c:19:
                    86:96:01:f6:e9:c4:7f:d2:4c:e8:d9:dd:98:7c:4b:
                    d7:96:9e:da:0d:c5:2b:d9:61:e8:d4:46:2d:4b:97:
                    d6:53:39:83:08:d1:fa:a9:2c:14:81:82:67:09:4e:
                    e3:dc:b8:e2:b3:39:25:c9:9c:d9:18:c8:a3:57:33:
                    a5:66:ce:b8:b8:5a:24:08:3f:43:13:37:85:60:c6:
                    ec:62:c1:0a:60:34:02:e9:9f:9b:cc:a3:48:ae:23:
                    c5:4c:31:54:0a:5c:bf:4a:90:94:09:bd:3f:5c:82:
                    74:b4:fc:7e:c4:d9:6f:34:37:b8:49:14:1c:7b:c3:
                    5c:b8:18:fb:fb:93:80:4a:52:98:78:92:6c:12:11:
                    6b:eb:42:6e:9c:25:96:b0:2c:62:9f:98:90:3e:56:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:E0:70:3F:27:F8:55:35:B9:C5:33:9F:92:F6:F6:70:A9:45:83
            X509v3 Authority Key Identifier:
                keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:da:3b:ba:2e:7d:8f:1e:a0:3d:27:12:10:d2:59:1f:b8:06:
         2e:56:10:d0:65:01:5f:77:93:bb:9d:df:5f:b1:55:08:8e:49:
         95:19:33:7e:2c:09:4f:db:3f:1b:44:6b:fb:02:28:63:25:1d:
         c9:ef:42:ed:43:85:08:01:55:c6:3c:0a:3d:f8:ef:b6:5b:74:
         35:41:76:eb:e2:ae:55:e5:03:39:33:3d:6b:00:8b:fe:b1:f3:
         a0:b4:c1:78:f3:c6:6c:95:fd:9f:71:4f:d4:42:cf:a9:9c:dc:
         75:c3:f2:66:1f:0d:79:1f:fa:8f:4b:c9:0a:80:6b:0b:62:ff:
         df:f7:b1:a2:2a:4a:80:e0:6d:f5:07:26:45:97:b9:fe:76:9a:
         1a:42:4c:45:9a:fc:3d:da:59:65:91:73:3f:94:7d:7d:43:9b:
         60:7a:00:92:79:a9:52:db:a6:ec:a2:9d:32:ce:82:1a:6e:4d:
         b1:d4:39:5f:0a:7c:53:f9:5a:a9:28:67:b3:df:58:3d:a2:e8:
         81:44:4a:a0:92:ed:19:4b:57:17:68:b0:01:3c:ed:d3:8a:7b:
         12:33:8b:96:37:d7:09:b0:05:74:95:87:be:29:b9:8d:32:d9:
         24:a9:f4:b1:bb:66:e6:f2:35:c3:35:80:88:55:51:bf:e5:f0:
         bd:02:cc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:37:10 2026 by rpki-client