Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
File:                     b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft (raw, json)
Hash identifier:          Im5cdIZty8tGYvu0s+DMZ0CoKw8kxImJLdcVCBJ7hoA=
Subject key identifier:   D1:9D:B3:03:BB:51:CD:D3:10:69:AC:71:57:AE:E4:36:13:95:73:C3
Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1
Certificate issuer:       /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
Certificate serial:       019E3229F612135C292730CD23846E25E06A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
Manifest number:          12DF
Signing time:             Sat 16 May 2026 19:01:11 +0000
Manifest this update:     Sat 16 May 2026 19:01:11 +0000
Manifest next update:     Sun 17 May 2026 19:01:11 +0000
Files and hashes:         1: 1-wan3b-ajvxmgxKzG2_bCriESyE.roa (hash: OT/P/yJmBbJTLWUNPmI1kEQL5s4kHqN1N19Q4ZEyjuw=)
                          2: _x8j518GtOzZKIwSFjgw77WJ0cg.roa (hash: qLLB1jWYWXmu3/lWGQcppyz40ROIJakXXeLah7poVjw=)
                          3: b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl (hash: qp2MCOT37CXo2QCcKv1imbWvlw9DBMoQClg47oWsaZY=)
                          4: pzTDdoiRqJT_m82j1zVgjxb2XAc.roa (hash: m6adch5DIkkECliQTrAwnaj3Hlmzg1nCza1B5z8+Tj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:f6:12:13:5c:29:27:30:cd:23:84:6e:25:e0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
        Validity
            Not Before: May 16 19:01:11 2026 GMT
            Not After : May 17 19:01:11 2026 GMT
        Subject: CN=d19db303bb51cdd31069ac7157aee436139573c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:61:65:fe:c2:fb:6b:f8:ee:2a:d2:a9:47:
                    73:25:03:52:77:ab:a0:7a:c8:7b:95:41:46:5d:d1:
                    7d:2e:38:5f:e4:8d:29:24:ad:dd:7b:e8:6b:2b:9a:
                    2c:13:f1:fe:e5:7c:14:cb:ea:4b:f8:d8:2a:01:aa:
                    0d:9e:10:83:62:1b:56:5b:53:7d:27:35:db:14:d2:
                    5a:e8:c9:3d:1d:c7:d2:97:c1:25:f0:60:34:f7:69:
                    ff:b7:e7:10:07:46:67:21:94:11:86:c8:e7:22:a0:
                    fc:d9:02:f6:87:9e:92:78:8a:66:ed:78:8f:ee:2e:
                    49:87:5e:d1:01:0e:e0:7a:ac:38:e2:6f:85:f1:e7:
                    30:10:80:f9:9d:73:31:ff:1c:da:54:08:6b:ef:33:
                    aa:60:b8:94:d6:d9:86:05:5d:72:be:54:7a:00:10:
                    45:b2:b2:a4:85:9e:e7:b5:a3:14:99:5a:df:25:b0:
                    51:ec:25:e3:6e:0a:94:82:d5:40:d7:55:d3:10:9a:
                    ce:0d:b0:9d:34:16:76:c6:e6:5a:13:d1:2b:55:52:
                    7b:b5:f3:58:5d:97:0d:30:ac:8a:eb:61:dc:4e:b1:
                    a6:16:64:37:95:40:c8:d3:52:42:0e:2b:02:b0:d8:
                    3c:3e:5b:ac:b0:8c:b5:0b:ed:79:2f:c1:3f:68:cd:
                    ba:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:B3:03:BB:51:CD:D3:10:69:AC:71:57:AE:E4:36:13:95:73:C3
            X509v3 Authority Key Identifier:
                keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:08:a2:39:54:02:cd:aa:8e:ba:3b:b0:28:bd:bc:a0:81:00:
         a8:49:d4:17:af:25:d2:85:25:80:d2:32:a6:b9:8a:bc:fb:6a:
         ff:39:91:d6:e8:6f:ee:86:4b:3a:b9:fd:a9:b9:52:04:66:df:
         a6:57:48:49:ca:8d:cd:13:42:45:fc:38:38:20:b8:8c:b6:c2:
         1e:99:77:da:27:3a:84:dc:6c:1c:84:c4:fc:6b:3d:97:d0:c6:
         b4:46:42:0c:58:ff:04:64:e7:ee:d4:8a:3b:6f:65:70:8b:aa:
         b3:fb:fd:50:46:2c:c2:51:14:8a:8b:04:7f:6c:f3:eb:e1:6b:
         98:b1:8c:63:bf:6c:ef:d5:00:2d:97:1d:46:ca:1b:3f:45:9e:
         23:76:8c:ee:d9:8e:31:2f:47:25:1b:08:a9:5f:f4:5c:35:7b:
         f7:68:32:8a:9a:a0:b8:b6:70:1f:b9:b5:f2:26:86:1c:14:aa:
         39:08:d4:75:ce:69:1e:e2:25:a5:e9:a3:f2:c3:8b:62:63:33:
         1b:b4:a4:36:eb:bf:b1:c2:94:fa:28:53:06:77:d6:3a:48:5d:
         de:81:b8:fb:0c:2b:23:1f:0a:4a:b0:76:ff:5a:cc:12:05:5d:
         92:33:31:25:1c:25:95:f0:f0:db:db:02:08:83:78:90:6f:c8:
         62:35:f0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:07:35 2026 by rpki-client