Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          BDWRjMkFQRYh+/zlINKDkcnRfCye74+hmb3w1Z7B83U=
Subject key identifier:   76:20:55:93:01:7E:3B:92:D4:FC:9F:86:66:8F:D5:D3:D3:47:DE:33
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019CD4D4A5ED39ECB161220B8782C7877EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          1650
Signing time:             Mon 09 Mar 2026 23:00:31 +0000
Manifest this update:     Mon 09 Mar 2026 23:00:31 +0000
Manifest next update:     Tue 10 Mar 2026 23:00:31 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: TiTOzHRLwRWj3DodTvz5yOKwTT4CNP/YTPnAZlcqzBY=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Mar 2026 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d4:d4:a5:ed:39:ec:b1:61:22:0b:87:82:c7:87:7e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Mar  9 23:00:31 2026 GMT
            Not After : Mar 10 23:00:31 2026 GMT
        Subject: CN=76205593017e3b92d4fc9f86668fd5d3d347de33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:87:e3:99:1d:aa:c5:18:5f:77:a1:8a:9d:
                    16:b3:a5:da:46:f6:63:f5:8e:65:85:63:77:ee:0c:
                    d9:c3:66:97:25:0e:9f:2b:3b:1d:03:e5:ec:f6:b5:
                    9a:1a:84:38:88:50:d0:aa:05:59:be:82:62:bb:3a:
                    de:4e:41:cf:bf:e4:de:e5:e9:24:78:fd:3b:56:bb:
                    c8:39:41:f6:ce:ee:57:18:a8:4b:f5:e4:93:af:64:
                    c4:1f:20:42:cc:7f:cb:8d:9e:ce:de:03:44:17:35:
                    c5:60:2c:1d:b1:f2:05:ef:45:16:62:f7:59:a9:48:
                    8a:4c:7c:9b:f1:c9:0b:5d:72:3b:e7:7a:a2:1c:66:
                    09:a7:7a:0f:fc:a3:4b:60:f8:9a:f4:ca:f3:d4:1a:
                    cd:81:7f:52:ee:4b:f1:25:a7:5c:65:f2:83:94:8f:
                    46:c9:33:02:88:b4:6c:85:2c:85:4b:2c:0e:83:e0:
                    4c:01:44:58:c1:a5:e4:e1:5a:2b:70:74:cf:cc:03:
                    a3:36:33:15:af:30:b1:61:1a:e9:a2:90:5a:dd:c1:
                    0a:a0:fd:b2:bf:e1:b8:47:cd:74:1b:b9:af:cf:fc:
                    c9:ef:e1:2d:bc:c5:10:b9:dd:81:6d:a9:b4:0c:43:
                    cd:98:86:ac:dd:04:54:3e:49:60:27:4f:ec:35:49:
                    64:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:20:55:93:01:7E:3B:92:D4:FC:9F:86:66:8F:D5:D3:D3:47:DE:33
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:59:b4:e0:e1:fb:00:05:4b:8f:b9:d9:ac:6c:0a:e2:a3:86:
         27:b6:4a:96:61:9e:85:ab:f4:16:0f:b7:d3:b6:a3:e9:10:b9:
         08:e1:d8:0e:09:23:7a:b9:f8:85:98:ed:67:38:5d:56:1c:94:
         83:a2:79:68:c0:19:a3:16:16:98:a7:5d:d3:03:7e:f8:35:73:
         1e:96:73:3c:35:39:f8:69:bf:e7:c5:d1:fa:09:e1:4f:49:97:
         f3:cf:10:bf:30:70:2f:50:59:95:a4:2f:33:21:ac:34:99:08:
         95:e7:9d:db:cd:1d:02:4e:ee:8e:51:44:f0:7a:fa:05:cd:80:
         04:35:e7:e5:6e:ce:e7:dd:20:03:98:b9:90:2c:56:7e:0a:9d:
         6e:2e:bc:01:8b:c7:06:76:49:bf:69:0a:e0:52:b1:34:b5:53:
         90:79:4a:86:08:63:32:b8:87:cc:bd:32:0f:65:e6:03:26:f4:
         6f:db:d7:c0:c4:19:74:3c:eb:bd:ed:b4:bf:89:ca:5a:1a:5a:
         e9:80:8b:da:fd:ee:84:c8:34:e8:c1:63:71:42:6c:b5:c4:04:
         cf:90:b6:0e:2f:40:e8:ef:b3:66:14:70:8f:b2:08:c2:34:cf:
         4f:24:da:01:cf:f2:33:22:a5:b5:24:c2:1b:fc:2c:93:77:6e:
         88:4e:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 02:19:44 2026 by rpki-client