Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          r38Ya6CX/u1mToWreVyezi97D5zGWL6Z6j6iRA39lWA=
Subject key identifier:   01:DF:D0:52:6E:77:78:B5:01:0A:3B:5E:1D:A6:56:8A:D6:43:F2:3B
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019E5CDD1B799AB0E7723D6D7EAF31896087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          171B
Signing time:             Mon 25 May 2026 02:00:54 +0000
Manifest this update:     Mon 25 May 2026 02:00:54 +0000
Manifest next update:     Tue 26 May 2026 02:00:54 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: M7uPXMSCe5capTiaSxyWbvtZ1f3KCaUZLA+lUG9MCic=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:5c:dd:1b:79:9a:b0:e7:72:3d:6d:7e:af:31:89:60:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: May 25 02:00:54 2026 GMT
            Not After : May 26 02:00:54 2026 GMT
        Subject: CN=01dfd0526e7778b5010a3b5e1da6568ad643f23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:c6:8a:0b:13:5d:0e:cb:ab:5c:82:58:b9:
                    c6:56:88:d1:b5:e8:4f:18:08:fa:26:7b:63:32:ad:
                    0a:30:38:69:b6:e4:84:59:b9:a1:70:d8:46:f8:9c:
                    fe:2e:a7:c9:fa:b2:18:6c:10:5a:28:a2:c0:0e:76:
                    de:5f:c7:6b:52:59:42:f0:01:70:96:1d:23:f7:86:
                    f0:9f:0e:7a:e1:f2:01:75:c9:07:24:21:b1:6e:13:
                    9f:e4:f0:f6:b2:93:96:b0:56:62:a0:59:a1:32:12:
                    3a:2c:9b:e7:79:4e:55:77:5f:8a:de:ff:a1:50:df:
                    d0:a9:30:c3:06:12:b5:fd:7b:8f:5c:33:ba:a2:f1:
                    c6:44:c3:64:19:29:34:9e:5a:0f:a7:dd:18:8e:ad:
                    63:1a:ac:57:4c:2e:44:ba:1c:b5:31:72:4a:c0:1e:
                    d0:00:00:37:cd:22:e7:b7:e9:ac:cd:4b:c5:3e:45:
                    6f:24:87:bd:5f:b7:83:cc:7f:54:7b:2f:d6:64:99:
                    e0:0c:6b:f8:09:d8:4f:ca:ed:f1:ed:51:0e:f7:97:
                    b0:0c:48:4a:88:a6:02:bf:fd:ac:51:52:68:6e:ff:
                    24:72:ad:f8:e6:3e:1f:fb:0a:f8:86:b4:0d:ca:ff:
                    77:e4:e0:7f:28:db:3f:48:0c:85:cc:d6:3a:6c:3d:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DF:D0:52:6E:77:78:B5:01:0A:3B:5E:1D:A6:56:8A:D6:43:F2:3B
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:67:7f:7e:ee:4a:8b:7f:df:c8:45:1d:a1:3d:d8:25:11:e8:
         26:1f:54:9f:06:b2:49:95:88:d2:3a:d6:be:fe:ba:12:12:36:
         16:03:11:e1:20:60:b7:d4:a1:54:71:7e:99:91:79:79:62:16:
         33:eb:e8:06:d8:98:3c:59:57:a6:60:6a:a5:c8:62:4a:30:e3:
         3d:2f:12:2c:09:4b:93:72:8c:0e:29:2f:3e:36:39:fa:1e:c1:
         21:24:af:e4:9b:50:55:0d:49:c7:bd:be:0c:c2:9a:da:6c:16:
         a3:14:33:70:2c:e2:05:09:0b:27:95:6f:5b:02:60:97:43:03:
         bb:e1:a5:57:15:c2:45:17:f9:41:09:5f:ad:e5:f9:77:bf:fa:
         e6:35:7e:02:1f:12:df:8e:ef:f3:99:c2:27:2f:9c:65:c2:41:
         eb:cf:7d:b0:81:d1:b3:b2:8c:d8:72:73:f7:40:58:74:79:4c:
         7c:41:b0:0d:4e:6e:a1:9a:78:72:0f:21:42:0e:9e:9a:c1:de:
         2f:9f:e9:d9:58:03:e4:3e:44:a9:07:d5:a4:54:2a:56:58:2e:
         44:30:24:a8:06:64:99:bf:30:15:1c:91:59:af:05:03:c4:ce:
         88:41:ed:8a:4a:12:d4:2b:a8:eb:34:8f:13:3a:39:a4:b1:86:
         77:8b:37:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5c3Rt5mrDncj1tfq8xiWCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjYwNTI1MDIwMDU0WhcNMjYwNTI2MDIwMDU0WjAzMTEwLwYDVQQD
EygwMWRmZDA1MjZlNzc3OGI1MDEwYTNiNWUxZGE2NTY4YWQ2NDNmMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFLGigsTXQ7Lq1yCWLnGVojRtehP
GAj6JntjMq0KMDhptuSEWbmhcNhG+Jz+LqfJ+rIYbBBaKKLADnbeX8drUllC8AFw
lh0j94bwnw564fIBdckHJCGxbhOf5PD2spOWsFZioFmhMhI6LJvneU5Vd1+K3v+h
UN/QqTDDBhK1/XuPXDO6ovHGRMNkGSk0nloPp90Yjq1jGqxXTC5Euhy1MXJKwB7Q
AAA3zSLnt+mszUvFPkVvJIe9X7eDzH9Uey/WZJngDGv4CdhPyu3x7VEO95ewDEhK
iKYCv/2sUVJobv8kcq345j4f+wr4hrQNyv935OB/KNs/SAyFzNY6bD2IGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHf0FJud3i1AQo7Xh2mVorWQ/I7MB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWd/fu5K
i3/fyEUdoT3YJRHoJh9UnwaySZWI0jrWvv66EhI2FgMR4SBgt9ShVHF+mZF5eWIW
M+voBtiYPFlXpmBqpchiSjDjPS8SLAlLk3KMDikvPjY5+h7BISSv5JtQVQ1Jx72+
DMKa2mwWoxQzcCziBQkLJ5VvWwJgl0MDu+GlVxXCRRf5QQlfreX5d7/65jV+Ah8S
347v85nCJy+cZcJB6899sIHRs7KM2HJz90BYdHlMfEGwDU5uoZp4cg8hQg6emsHe
L5/p2VgD5D5EqQfVpFQqVlguRDAkqAZkmb8wFRyRWa8FA8TOiEHtikoS1Cuo6zSP
Ezo5pLGGd4s36A==
-----END CERTIFICATE-----
Generated at Mon May 25 08:25:29 2026 by rpki-client