Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          js0GaLO/PBgA5S1oWwYUO/LJ8PdSE7t29rJWCBumIfY=
Subject key identifier:   3E:EB:D1:5F:BF:11:F9:69:E0:1C:55:BB:16:96:22:DB:B3:EC:E5:31
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019DE70FA98F44DA99A3060047EBC66C301B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          16DE
Signing time:             Sat 02 May 2026 05:00:56 +0000
Manifest this update:     Sat 02 May 2026 05:00:56 +0000
Manifest next update:     Sun 03 May 2026 05:00:56 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: /OO8lhk6Uwjt4IQ8TMk7RSQ7lavG0YDB9Jn7cHWD/pM=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 May 2026 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e7:0f:a9:8f:44:da:99:a3:06:00:47:eb:c6:6c:30:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: May  2 05:00:56 2026 GMT
            Not After : May  3 05:00:56 2026 GMT
        Subject: CN=3eebd15fbf11f969e01c55bb169622dbb3ece531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:11:5a:65:db:c4:01:27:5e:a8:80:eb:bb:
                    f8:ec:e6:00:3b:73:d6:34:93:85:94:a6:e3:3e:f8:
                    9b:a8:30:22:fd:94:a9:14:41:2d:94:21:29:c1:81:
                    b6:1b:94:4d:89:af:a9:25:2f:3c:3c:aa:72:29:55:
                    ed:bb:16:89:87:fc:6c:8f:25:14:f6:a7:b7:71:93:
                    43:3f:38:4c:cf:11:09:59:0c:13:f4:e2:09:5d:63:
                    ae:56:c1:35:ba:43:d3:8b:0c:b0:05:05:1d:22:8b:
                    52:54:12:55:48:30:c7:d0:c8:76:58:b8:d8:24:7d:
                    b8:89:ea:43:03:f1:d9:04:12:6e:fa:d3:1c:a6:52:
                    0a:68:eb:9c:08:82:bd:74:b0:ce:c4:b8:d5:d7:3a:
                    39:74:fe:ce:99:90:e7:4e:c8:60:fa:a2:bc:47:54:
                    ec:7b:94:4f:34:f4:19:1b:8a:86:8f:3f:de:a4:53:
                    3a:c0:11:7b:cf:fc:bf:e1:7a:2a:dc:d4:5b:99:c4:
                    de:06:1b:df:6f:36:29:73:a7:df:e0:e7:ad:f4:93:
                    b5:bd:9d:a2:97:5d:ee:2f:cc:77:44:ca:cc:62:55:
                    0b:52:f5:d1:0b:b0:d1:bb:57:b3:c2:9c:af:92:ce:
                    d1:0b:b8:df:18:f8:13:dd:1e:00:17:27:89:07:56:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EB:D1:5F:BF:11:F9:69:E0:1C:55:BB:16:96:22:DB:B3:EC:E5:31
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:37:bd:b7:41:e3:71:a9:8a:cf:ae:ed:17:a4:4b:18:53:be:
         1c:7e:32:29:f1:78:6d:29:b6:01:bf:c9:ac:23:01:40:81:08:
         67:b6:a0:0e:00:d8:04:30:7f:b0:e2:e1:4b:dc:f9:01:72:26:
         87:19:04:b4:3a:68:eb:ec:d0:3d:71:89:e3:e6:c6:9e:60:80:
         de:52:51:22:68:37:f5:d6:cb:1d:9c:2d:8f:6e:d7:b0:c0:5b:
         38:b9:38:75:50:22:34:12:b9:bb:36:c9:0b:4d:a4:6e:16:3b:
         bb:a3:cb:6d:eb:a3:fd:6c:59:04:e0:4a:7b:13:0f:a2:6d:fb:
         75:e1:27:fe:05:ce:2f:1e:ef:12:f9:43:d8:1f:2a:35:d8:af:
         df:be:ab:e6:b6:32:36:22:ff:ef:8a:f6:74:31:89:0e:3a:d5:
         26:22:22:d2:b4:24:b7:66:a8:d7:d4:d5:e0:d0:6d:85:12:63:
         f2:3a:77:8c:74:e9:21:3f:09:9c:1f:b6:c6:d8:d4:d2:bd:8b:
         e6:d7:78:c3:3c:f8:b1:08:4f:f2:4a:4d:65:82:02:a1:fa:e0:
         bf:32:82:04:b9:42:70:39:63:84:63:0b:ff:52:9c:6d:08:b3:
         15:ca:63:4e:85:bd:b5:f3:9f:67:c2:28:08:3e:65:84:32:16:
         7c:89:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 08:35:23 2026 by rpki-client