Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          KYTdg2Shw4iL3eFi3qG28rWdlkvZZe+D0Mp4mTkydJs=
Subject key identifier:   E3:DD:3F:AE:05:FB:0A:AB:40:2D:8F:9F:E2:96:A1:4B:9B:5B:64:11
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019E24DCA76078BC5C0DCC6EC067DE2EF7EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          16FE
Signing time:             Thu 14 May 2026 05:01:40 +0000
Manifest this update:     Thu 14 May 2026 05:01:40 +0000
Manifest next update:     Fri 15 May 2026 05:01:40 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: j0U+dzKNYpKGDdPGsSoxcMQaMh3YZYEFU0a8PeXw+YU=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:24:dc:a7:60:78:bc:5c:0d:cc:6e:c0:67:de:2e:f7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: May 14 05:01:40 2026 GMT
            Not After : May 15 05:01:40 2026 GMT
        Subject: CN=e3dd3fae05fb0aab402d8f9fe296a14b9b5b6411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:39:96:d4:bb:2c:10:14:74:58:2a:a9:29:
                    6d:4a:89:cb:df:32:1c:10:41:d3:79:40:a7:29:4d:
                    02:53:c7:98:e8:7d:6f:b2:1d:21:9e:2c:8c:d9:21:
                    f8:e5:df:44:b0:fb:77:29:e7:a5:ed:a3:72:42:f0:
                    eb:82:2a:41:1e:76:0b:fa:50:15:56:90:7e:bb:3a:
                    49:60:56:e6:1d:cd:6a:78:9d:94:8d:e7:60:3c:c5:
                    9b:45:4f:57:28:a8:0d:e3:24:8a:2b:4d:e7:b6:80:
                    26:6e:0c:c6:ea:a0:58:63:e1:f4:81:ae:86:2f:23:
                    8b:f4:ec:ea:d4:1c:c8:ab:12:76:24:74:97:c3:80:
                    04:15:c3:e7:4d:4d:f2:4c:64:22:ef:4e:d0:fb:53:
                    f5:51:d7:4f:c9:ca:18:17:cc:ed:50:f9:d1:15:10:
                    b9:c2:a2:b0:f8:37:0b:12:dc:f1:53:0c:5a:62:97:
                    00:74:b3:1b:ba:f5:d9:18:39:02:0f:a5:b5:10:c6:
                    12:7b:67:8e:d5:91:a3:b3:37:48:46:f4:07:31:89:
                    f9:0c:e9:13:f7:20:f2:f6:4c:0f:cf:0b:96:b7:b9:
                    e9:b2:48:29:b3:57:6b:ca:72:d5:af:ae:4e:59:da:
                    39:5e:eb:0a:77:23:1c:5d:f8:96:be:d6:cb:31:7d:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DD:3F:AE:05:FB:0A:AB:40:2D:8F:9F:E2:96:A1:4B:9B:5B:64:11
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:91:4f:e2:1e:bc:ba:2b:ef:fb:cf:44:d1:97:e4:05:5d:c3:
         bd:5a:21:c7:fd:50:57:a1:c8:c8:78:b5:8a:a4:7f:fe:a3:51:
         a5:c2:59:ef:7f:9a:e4:5a:a6:97:1e:92:7a:41:74:f0:62:f8:
         85:1b:ab:ad:81:e8:21:09:ec:35:f9:75:db:7a:60:1b:9a:2a:
         e2:3d:38:15:4e:94:c7:67:f6:b1:8a:d3:f8:d2:9e:86:1c:72:
         04:77:b1:a0:9b:09:77:54:9a:87:0c:14:20:d2:7f:a1:d9:44:
         38:55:60:f7:a9:23:ee:30:dd:cf:89:ba:88:37:f0:0b:53:06:
         27:29:73:23:a7:9b:8d:2b:fd:d1:59:40:4d:87:16:45:5a:7d:
         e9:86:34:63:96:c9:8b:0b:b1:29:10:51:89:21:03:da:45:68:
         1c:7c:05:01:c0:8d:a2:9b:a4:33:3c:50:9d:af:41:63:ae:cb:
         94:84:23:d1:d9:8e:20:f3:1c:5f:4c:eb:03:aa:2e:7d:b8:c7:
         0a:25:c2:56:aa:ad:ed:20:14:e4:5f:04:94:fd:84:c3:e8:87:
         d6:6a:ef:99:08:cb:db:1c:6e:d3:20:04:ef:9f:d5:70:57:61:
         d7:75:96:23:33:1c:93:a4:45:b0:97:2c:cc:fc:e9:2b:47:aa:
         f6:ba:e8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 07:42:04 2026 by rpki-client