Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          DjAqFBFz9ZzCI7WX21DaXeL4jq5CiBX88wQ5wuI9ca4=
Subject key identifier:   0F:46:DE:48:56:E7:8B:DE:4B:94:27:54:F8:CF:53:92:2E:B0:81:F9
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019D5A159B54B0A509E651FB19B48AEF253F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          1695
Signing time:             Sat 04 Apr 2026 20:00:58 +0000
Manifest this update:     Sat 04 Apr 2026 20:00:58 +0000
Manifest next update:     Sun 05 Apr 2026 20:00:58 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: JibpmWgJM2/b2lXJNA1WviJgk7I4yvoG8e+RuawlTxM=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 Apr 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:5a:15:9b:54:b0:a5:09:e6:51:fb:19:b4:8a:ef:25:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Apr  4 20:00:58 2026 GMT
            Not After : Apr  5 20:00:58 2026 GMT
        Subject: CN=0f46de4856e78bde4b942754f8cf53922eb081f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:c8:93:05:65:c5:4b:11:c8:01:b8:e0:90:
                    88:a8:b1:40:b9:d6:54:cd:61:cd:48:e8:c0:e2:bd:
                    b5:f7:fc:9a:c3:11:78:f3:8e:4b:a1:3c:81:08:f3:
                    d3:91:f4:74:01:4e:3a:8c:52:18:21:1c:60:15:8c:
                    1c:ff:7a:e3:3a:43:fd:43:f2:36:b6:d5:13:f0:e7:
                    69:48:bf:5c:c8:f0:ef:b5:50:02:31:d7:1b:e3:81:
                    62:ac:aa:54:f0:c1:1a:44:fa:0f:6b:96:e2:13:b6:
                    f5:41:8d:e6:51:1e:f9:bd:28:a4:99:b2:d2:0c:eb:
                    7a:84:27:dc:02:16:55:17:fc:88:11:8d:5c:bd:64:
                    0b:46:21:79:d7:45:91:1f:12:4d:05:ac:cf:db:7c:
                    c5:21:bb:d1:af:4f:0e:90:37:fa:1a:44:54:cb:ff:
                    a3:ac:97:41:c1:8e:46:af:22:3e:e3:fe:6d:b3:f5:
                    1b:12:50:91:4b:76:ba:79:ad:14:00:50:9a:0c:dd:
                    2f:17:03:8c:ea:d7:ac:a4:1e:85:67:0f:11:82:33:
                    51:1f:43:9b:a3:f1:1b:4d:ae:61:67:cd:42:5d:9d:
                    0c:6a:91:db:19:88:23:5a:87:04:e1:f4:f6:75:94:
                    d1:77:17:8f:da:7a:d4:46:eb:ef:93:00:6b:78:08:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:46:DE:48:56:E7:8B:DE:4B:94:27:54:F8:CF:53:92:2E:B0:81:F9
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:30:1d:ae:3b:69:ba:84:65:cf:b2:c4:2a:1e:a5:63:b7:
         9b:29:3a:b8:80:8b:0d:30:4c:03:4c:42:b5:02:93:7d:ef:d4:
         b2:cb:8b:cf:ca:27:e5:20:79:63:50:26:82:7f:b4:de:d8:44:
         44:aa:9e:f5:2c:e3:dc:81:05:a0:e9:d0:bc:de:76:6c:de:13:
         f1:be:ac:22:e9:13:45:74:1d:3e:46:e8:9c:b2:df:cb:50:e0:
         69:0c:f1:e2:c7:b2:e7:3e:31:e8:95:61:29:a7:51:82:ad:c8:
         e0:c6:db:ce:5e:53:15:e2:f1:03:a2:9f:ff:5b:b0:59:57:94:
         75:07:76:fd:8b:02:a8:40:15:52:e6:b1:cc:d4:33:35:c1:58:
         4a:56:53:d1:52:8d:ec:2b:91:38:e9:b4:22:50:95:94:f8:28:
         04:b9:b9:9b:d1:95:f5:0c:d2:dd:e8:1b:87:1a:df:f4:d7:67:
         c1:c7:f8:21:fc:85:34:55:5f:d9:c6:e5:16:8d:c6:4c:c3:f2:
         fb:3e:02:07:7d:51:4f:ec:98:58:a8:4f:51:01:e7:1b:8d:b6:
         89:d7:fc:d9:38:97:c3:5d:e2:f3:67:6b:0d:38:85:ca:8e:91:
         3b:cb:48:ee:94:2d:c6:e6:62:63:87:ec:b1:0f:ec:c1:5e:af:
         f1:13:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 23:02:16 2026 by rpki-client