Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File:                     9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier:          uGL5bnP2Y5yneF0rHQoiCcC+XOR3I0uk0887zm1lNaw=
Subject key identifier:   E6:0D:7E:D7:38:5E:F3:60:CD:A9:74:CD:8C:2B:30:4E:09:E7:75:E3
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer:       /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial:       019E28B92E831109625B177B7DA3396A9D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number:          0129
Signing time:             Thu 14 May 2026 23:01:25 +0000
Manifest this update:     Thu 14 May 2026 23:01:25 +0000
Manifest next update:     Fri 15 May 2026 23:01:25 +0000
Files and hashes:         1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: QzY7ZrfEdRJ3JY5iE06jX1cRCCljE4Wc2nn6dx3K1Fs=)
                          2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
                          3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b9:2e:83:11:09:62:5b:17:7b:7d:a3:39:6a:9d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
        Validity
            Not Before: May 14 23:01:25 2026 GMT
            Not After : May 15 23:01:25 2026 GMT
        Subject: CN=e60d7ed7385ef360cda974cd8c2b304e09e775e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:3c:1b:37:67:d6:4b:35:2e:e4:70:39:c3:
                    cc:cd:c6:18:a8:55:d1:e5:1c:40:b7:ce:11:88:9c:
                    b6:29:d2:d2:48:28:92:3d:56:8e:ea:3e:ed:89:b2:
                    06:0b:7b:81:f6:f8:73:fe:af:fc:33:9a:0a:f5:76:
                    a1:b3:4c:78:b4:2e:28:a0:a4:ed:a2:48:a6:ff:9f:
                    5e:ce:fd:80:73:ae:dc:75:ee:f3:be:e3:a5:48:d7:
                    bb:c9:bc:85:96:25:20:70:6e:7e:d1:10:af:0d:34:
                    26:63:6d:50:48:e9:59:8e:d7:5f:7a:08:9d:d4:05:
                    95:1a:54:5e:de:d0:46:19:da:18:03:61:98:cc:e4:
                    81:86:c5:94:65:a4:ce:ad:84:38:1b:b4:a8:f7:db:
                    c1:bd:16:07:53:33:16:02:56:b3:ae:7d:36:9b:31:
                    c0:aa:c2:cb:84:36:7e:75:a7:76:02:89:09:7f:c5:
                    51:e0:b7:cf:17:51:4c:70:f7:83:8a:57:fe:99:e9:
                    83:21:42:59:c2:d7:a5:6f:43:cd:60:a0:33:9c:c1:
                    72:93:a2:b1:03:dd:01:b3:6e:97:a8:af:28:fb:89:
                    61:7a:2a:b9:f6:62:4b:39:6a:d3:0a:32:e4:e7:2c:
                    b9:5d:69:16:12:91:25:1e:ed:01:04:8e:57:09:71:
                    67:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0D:7E:D7:38:5E:F3:60:CD:A9:74:CD:8C:2B:30:4E:09:E7:75:E3
            X509v3 Authority Key Identifier:
                keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:3b:25:40:d1:eb:89:a7:c2:9e:fb:33:37:da:8b:c5:83:
         0d:35:96:5e:bc:8e:a9:be:c7:4b:8d:82:4d:70:c0:dd:1f:49:
         cd:db:e2:09:fb:1e:26:10:57:06:58:ec:85:9e:2b:c9:3a:36:
         9b:38:f8:35:5a:55:ce:a8:97:93:c0:20:26:03:79:24:cf:c6:
         80:60:f8:5c:f5:20:7c:56:d0:19:68:9f:8e:75:58:97:62:53:
         80:80:83:28:66:d6:92:eb:bd:7d:dd:cf:5c:b8:ff:3e:7c:20:
         8f:0a:f9:b9:79:35:b6:e2:e0:dd:3b:06:fa:d4:26:86:8e:42:
         94:a3:64:a7:6a:d7:72:34:b7:2f:3f:dd:19:de:52:03:3f:8f:
         6f:a6:a8:76:6e:8d:f2:26:55:26:dd:70:d5:82:8e:18:ff:9c:
         29:bf:32:38:12:9d:84:40:5c:bf:d1:bf:43:99:00:5c:60:2e:
         13:12:3d:27:1f:3f:a4:f9:16:cb:d9:19:61:9f:06:d6:55:e8:
         4a:6b:28:7d:9b:2a:ed:d5:0b:c3:62:cd:94:16:f7:c5:3b:56:
         bd:e3:e3:7a:2c:21:68:fb:14:10:4f:26:c9:dc:5f:a8:15:65:
         47:54:07:af:05:32:1d:36:cc:bb:84:d0:ca:d1:f2:b5:1d:64:
         c7:33:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:43 2026 by rpki-client