Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          6mprfzB/0qJHsePt9e+knH3kSt1AZhvHJ0Pbq/N8Z8c=
Subject key identifier:   CB:5B:69:2E:22:26:8A:05:5D:74:6A:A7:A1:88:CC:59:59:D4:49:32
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019DFE3D093ADC09A0C00DA1295BFC444243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          16EA
Signing time:             Wed 06 May 2026 17:01:45 +0000
Manifest this update:     Wed 06 May 2026 17:01:45 +0000
Manifest next update:     Thu 07 May 2026 17:01:45 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: X7x0Mul5bkPBNQo2EsEFhWkElcary7jVCpRiuw6xVqI=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 17:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fe:3d:09:3a:dc:09:a0:c0:0d:a1:29:5b:fc:44:42:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: May  6 17:01:45 2026 GMT
            Not After : May  7 17:01:45 2026 GMT
        Subject: CN=cb5b692e22268a055d746aa7a188cc5959d44932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:a1:65:4e:3b:0d:c1:e4:e7:85:05:37:ea:
                    35:a5:8e:5a:d1:a7:a2:8b:be:3f:9c:80:d0:8b:78:
                    f2:a9:56:d7:87:67:4f:e6:33:3d:07:35:4e:df:bc:
                    9f:72:79:0e:0d:29:23:5f:dc:93:a4:45:a0:18:e4:
                    a3:1d:e0:f4:68:8e:8a:0a:ac:76:50:2a:47:97:1a:
                    c1:23:af:c0:82:df:59:c3:05:d8:25:e4:4e:40:15:
                    6c:84:e6:a7:ce:13:22:1c:40:65:ac:a7:3a:cf:00:
                    36:dc:a3:11:ca:f7:82:13:a2:cd:e8:22:7f:7a:37:
                    0b:b1:dc:ae:8d:dc:43:80:4b:dd:0b:f6:bf:c7:20:
                    05:84:56:5b:1e:95:c5:a6:77:8d:10:4e:d8:5e:75:
                    81:77:79:7b:24:6a:f8:88:4e:ce:54:bb:d8:e1:a5:
                    0d:f5:72:68:85:4c:e2:e9:0c:90:16:b6:73:7a:6b:
                    76:d2:60:ce:2d:b2:73:a1:a6:4b:ad:40:cf:69:a2:
                    04:cc:77:eb:66:ad:d6:0e:2b:c5:5d:3b:72:b0:04:
                    b6:59:0d:cb:05:96:12:f8:36:72:73:94:64:0d:b2:
                    ee:f9:b9:cf:7f:fe:d2:5e:8c:59:12:c4:ba:18:db:
                    85:62:bf:00:68:3e:b5:ff:5f:fe:a8:9b:2e:bf:5c:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5B:69:2E:22:26:8A:05:5D:74:6A:A7:A1:88:CC:59:59:D4:49:32
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:76:bb:da:4f:d9:05:ae:3f:e2:11:22:27:52:58:f1:b7:06:
         45:86:72:61:8c:31:68:8a:0f:43:ae:86:ba:61:5f:64:d5:2d:
         42:e3:37:0d:d9:f1:64:fe:0f:fa:84:dd:0e:70:79:3c:f9:f7:
         b5:4f:3d:93:96:84:0f:7b:d1:a3:72:1a:7d:03:e4:a7:4f:d4:
         31:72:60:ca:73:e9:8f:43:cb:87:c1:17:1a:bf:aa:2c:8f:6e:
         69:d2:cc:8d:05:1d:27:3c:75:6a:20:86:c1:42:09:91:72:eb:
         94:f1:3c:d6:a1:89:26:76:8e:e2:fc:16:74:b3:3c:6d:3b:77:
         a5:a0:c3:dd:43:02:fe:d4:a1:34:ae:b3:d6:ce:e5:2c:07:af:
         f4:e2:6f:ef:2e:2e:ea:78:cf:4f:3b:08:dd:2c:9a:df:e3:83:
         be:10:12:7e:ad:b9:8a:db:59:15:3d:3e:70:2a:5f:f2:48:26:
         9d:75:e7:04:fb:43:58:0d:1c:7e:9a:cb:68:d2:df:7a:7b:96:
         d2:60:a8:71:be:b8:82:40:a6:26:47:d1:6d:1c:76:30:cc:88:
         64:07:b3:43:e3:08:18:2d:ee:cd:a2:6a:41:4d:14:1c:bc:90:
         d8:65:96:23:84:01:fb:ff:69:19:52:48:de:fe:9a:ed:fb:47:
         c3:73:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:58:55 2026 by rpki-client