Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          ORMDZDIEZvJnRbTJ56XSPr3IydGUL8TKLdH05VG+SEU=
Subject key identifier:   35:EF:4C:0F:3B:DF:79:80:70:62:4E:AB:88:18:46:A3:B7:7D:7E:9E
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019E0218DCCD1D286D4686FC9FC00C9BCCA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          16EC
Signing time:             Thu 07 May 2026 11:00:44 +0000
Manifest this update:     Thu 07 May 2026 11:00:44 +0000
Manifest next update:     Fri 08 May 2026 11:00:44 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: P0uMycE6XJujO3h06fdi2jCac3IGrgy1NrM0dvf+MoU=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:02:18:dc:cd:1d:28:6d:46:86:fc:9f:c0:0c:9b:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: May  7 11:00:44 2026 GMT
            Not After : May  8 11:00:44 2026 GMT
        Subject: CN=35ef4c0f3bdf798070624eab881846a3b77d7e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:50:f7:8d:0c:08:a4:77:d6:b7:3a:50:4f:
                    52:5b:de:ce:68:ef:88:ea:98:ca:b4:47:69:cd:79:
                    87:93:79:5e:19:a9:92:36:c0:63:87:b4:44:94:48:
                    7f:4f:3f:4f:3d:9c:6d:e9:38:12:6c:f3:99:23:33:
                    5a:19:2e:e6:58:ad:83:bc:79:7c:85:a9:45:fa:07:
                    8c:23:eb:c9:e8:4f:59:c6:b1:26:0f:7f:21:0a:e0:
                    5d:3c:08:db:2e:b9:0a:0d:a0:5a:9b:ef:02:a4:2b:
                    63:78:6e:7b:a3:48:76:ba:03:84:d9:3b:6a:c4:25:
                    e0:48:fc:c7:d5:b7:76:b0:1d:20:c2:0d:21:3a:05:
                    a9:8d:4c:97:9d:e2:bd:ef:a6:d5:6e:b8:a5:2e:3c:
                    23:4b:f4:be:94:cb:d3:a9:8c:d5:18:10:b8:07:35:
                    a9:45:b1:2b:a8:35:c8:25:1c:89:d7:ec:0d:14:33:
                    72:e5:33:fb:7c:18:8e:02:7e:7f:75:07:f0:3a:26:
                    cc:0b:ae:76:96:b3:c8:26:b3:75:39:36:8e:b1:17:
                    52:cd:0b:a9:9a:5f:20:c7:fc:02:10:10:f3:b5:d9:
                    98:6b:a6:67:68:57:d1:81:ed:0c:b6:e9:13:1b:0d:
                    88:45:dc:18:9f:da:c1:69:a4:c2:41:94:ff:1b:2b:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EF:4C:0F:3B:DF:79:80:70:62:4E:AB:88:18:46:A3:B7:7D:7E:9E
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2c:d9:26:b2:83:4c:72:67:fc:72:f8:dd:27:04:64:0e:ef:
         98:ea:8b:78:b7:a9:96:d8:d7:55:61:4c:53:df:b8:9f:b7:7b:
         c9:a0:3f:95:e8:10:02:ba:dc:11:02:11:1e:f4:83:f4:6c:06:
         4d:39:58:51:85:cb:86:dd:0b:d2:0a:ea:3b:11:d5:f7:c7:16:
         02:fc:82:28:70:33:0b:6d:ff:5f:c9:38:7e:8c:e7:01:9e:b7:
         f3:81:06:d2:d8:b2:81:e9:29:cb:5a:c5:f0:ea:a6:c7:92:7c:
         ef:8b:c8:37:7a:a7:b0:3b:a6:23:40:37:8b:01:12:6b:39:01:
         d8:2e:24:fb:5f:0f:54:48:38:3a:67:57:80:40:3b:81:d9:ee:
         19:31:87:6c:47:5d:72:9c:70:1a:63:52:74:53:fd:4a:62:bb:
         1d:af:8f:bc:6d:11:0d:34:df:2e:32:05:2f:0e:58:bf:2a:85:
         2f:2a:3d:63:d5:0d:eb:b8:66:c1:a5:75:ec:1f:fc:05:f2:56:
         55:e7:d8:22:7b:b3:33:e4:f9:fd:fd:cc:7b:e3:04:be:c7:48:
         e0:42:d8:58:33:3f:2c:55:b8:e9:36:e7:81:f7:69:a8:81:9b:
         1e:b6:2b:65:90:55:16:96:ef:43:dc:8a:47:e3:32:4e:e3:df:
         b3:21:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 16:18:47 2026 by rpki-client