Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          +8/39XNIgNiyXtVOVNHbAr4Up62wtSFZGwwsbpA6svw=
Subject key identifier:   16:B3:BD:11:41:14:53:2E:89:C4:06:3B:02:B0:80:89:85:79:37:6E
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019D78FC424C94989A08AD823D2AA44B2D81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          16A5
Signing time:             Fri 10 Apr 2026 20:01:31 +0000
Manifest this update:     Fri 10 Apr 2026 20:01:31 +0000
Manifest next update:     Sat 11 Apr 2026 20:01:31 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: nYlQqUbxVcv6XDFoGAWaB8z4xFknN6ki2fsVuZ3DIdo=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 20:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:78:fc:42:4c:94:98:9a:08:ad:82:3d:2a:a4:4b:2d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Apr 10 20:01:31 2026 GMT
            Not After : Apr 11 20:01:31 2026 GMT
        Subject: CN=16b3bd114114532e89c4063b02b080898579376e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:fa:ef:51:76:c9:cb:83:6f:3f:d9:a2:4e:
                    00:bc:02:d6:35:4e:7d:d4:a9:98:34:e8:52:0c:e1:
                    69:39:69:4f:f0:60:0c:45:cc:b6:5b:6e:37:b5:c0:
                    99:64:c3:5a:16:13:6a:5e:e5:61:c2:9e:95:ab:5b:
                    25:c4:a4:24:b2:da:07:43:e9:5c:87:e4:ff:a5:c9:
                    cc:d2:49:1c:68:78:42:73:e8:d3:24:b9:e1:e5:11:
                    9d:f8:b9:22:0c:ec:ff:37:13:e5:99:7f:f8:0f:e9:
                    94:1a:a5:f4:ca:95:13:d4:df:72:94:64:7e:d9:3e:
                    55:d2:3b:c1:31:eb:df:88:87:f8:ee:76:7d:5c:65:
                    c0:6e:f7:61:99:ea:ad:32:ab:8c:e1:c1:46:cc:db:
                    85:17:2d:41:7f:9e:4e:59:b0:ff:33:e0:4c:94:19:
                    99:29:75:4c:52:6a:be:60:9b:b4:32:27:29:8c:c6:
                    e7:c1:a6:d4:e8:5e:0d:82:0a:50:51:9d:24:92:1b:
                    80:5a:3c:86:05:34:c4:a6:8d:d6:9b:30:fa:2e:39:
                    cb:41:f2:00:ad:00:13:f2:8b:fa:d7:3f:0f:ae:23:
                    a0:a7:f4:86:c6:08:69:24:37:5f:49:6f:2b:52:80:
                    32:4a:f8:44:39:e0:56:99:1f:53:25:fb:a5:08:7c:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B3:BD:11:41:14:53:2E:89:C4:06:3B:02:B0:80:89:85:79:37:6E
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:83:bb:19:ea:fa:e1:2c:4e:f8:6d:3b:d2:23:ac:a5:c5:
         68:b4:7a:3b:8c:69:76:c9:ad:4d:ee:b2:6a:5f:69:8f:0c:b2:
         3b:ad:b2:8e:fd:eb:3d:84:ae:9b:53:78:45:0a:93:8f:56:08:
         0b:85:58:f5:39:1e:e7:a0:eb:87:54:1a:47:40:cc:fc:8b:d9:
         7e:97:9a:77:3c:6b:41:11:f1:d9:db:22:35:4b:d3:97:b8:d6:
         6e:82:ef:a2:8b:82:4f:c4:15:fb:4b:c2:78:c1:24:d7:c8:23:
         99:6c:78:25:b9:ce:3a:c0:ed:9e:2a:19:d7:9b:2e:a9:05:0e:
         c5:df:75:1f:83:c2:d4:be:f0:11:91:f4:a5:13:3b:b3:1f:b7:
         57:42:f5:d5:69:a4:47:88:d0:4f:31:5b:96:f8:29:81:8a:e2:
         5e:f7:2e:2d:39:f4:e6:40:ab:e8:b6:f6:c6:b9:cb:74:ac:6a:
         fb:52:3a:05:8d:83:1b:af:e9:2e:aa:ca:49:9a:f8:7a:a3:6b:
         8e:5e:c5:c2:11:1d:54:2b:d0:56:e2:cc:54:a8:01:7d:db:44:
         3f:04:1a:01:9d:57:b3:55:d1:99:1f:d0:8b:25:71:22:42:6e:
         03:c1:f6:91:0a:c4:7f:1a:2d:17:e4:46:71:14:0a:77:63:97:
         bb:bd:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 04:41:27 2026 by rpki-client