Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          kN5+6eyu1i9ekrpYZHRNVfdb8ENc41F1HEKXqFygkz8=
Subject key identifier:   E1:72:DC:45:E3:32:A3:52:EC:0F:E7:63:AD:62:61:6B:DD:41:1E:65
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019DF683CF7B64F8BA3D80C5608A936CAAA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          16E6
Signing time:             Tue 05 May 2026 05:02:06 +0000
Manifest this update:     Tue 05 May 2026 05:02:06 +0000
Manifest next update:     Wed 06 May 2026 05:02:06 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: sP0DE8/UqR1y+cgK3yNArOgjlyx7t3p6rNxt7rvX40U=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 05:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f6:83:cf:7b:64:f8:ba:3d:80:c5:60:8a:93:6c:aa:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: May  5 05:02:06 2026 GMT
            Not After : May  6 05:02:06 2026 GMT
        Subject: CN=e172dc45e332a352ec0fe763ad62616bdd411e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:61:e1:ab:fe:61:93:db:6e:56:fb:77:35:
                    15:88:ea:5e:2f:fa:0a:af:ec:ee:63:2f:5d:b1:b4:
                    1e:1d:e6:59:e7:1d:4d:69:e5:63:e8:32:ad:72:8b:
                    2e:e1:2b:eb:86:c5:e1:50:6b:d2:c9:94:55:d8:c5:
                    62:a1:c9:d3:3e:6f:c5:92:f9:ee:ad:cd:ba:63:b7:
                    4d:e1:02:9a:66:89:b0:07:87:5d:1e:89:3a:ca:73:
                    d1:b2:b3:c0:3d:65:19:c0:a3:11:b2:52:a6:b6:c2:
                    7b:d6:df:68:e0:6f:18:87:84:bb:fe:35:24:7d:26:
                    35:51:a6:31:cb:59:d2:ff:fb:64:a5:53:93:d2:bc:
                    17:1f:3a:e9:df:80:fb:dc:d9:ab:d2:8c:2b:0b:b4:
                    3d:f4:d5:d5:d4:06:c5:72:48:9c:22:77:e5:34:b3:
                    00:4b:9a:b3:77:0d:e8:6b:2d:01:cf:71:18:fb:48:
                    17:8d:7d:c7:16:70:e3:11:3d:a3:1d:cc:8a:0c:1e:
                    f7:6f:c1:b6:ac:18:00:3a:21:e9:31:32:ea:e9:36:
                    d0:5f:af:43:95:ba:57:bf:bf:bf:5e:49:cc:04:6b:
                    be:ca:cd:c6:b7:46:27:c5:d8:bd:61:be:4a:ee:62:
                    19:ea:e9:f1:c0:38:90:62:55:c9:05:06:d8:79:ce:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:72:DC:45:E3:32:A3:52:EC:0F:E7:63:AD:62:61:6B:DD:41:1E:65
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ca:32:e4:a6:3d:67:b0:3f:11:3a:f9:bc:c4:67:5a:6d:fb:
         20:d7:79:08:07:5e:21:e7:60:d2:03:e7:64:86:40:cb:e3:8f:
         d4:8a:bd:17:0e:5d:06:bb:e3:20:3e:fc:c6:9f:42:c4:47:85:
         43:54:28:63:ba:a5:73:4c:38:c1:c3:06:19:34:4a:d4:3f:07:
         ed:07:17:db:77:66:aa:92:86:7f:75:5c:2d:f8:ff:35:87:42:
         fc:12:67:c7:bf:5e:27:d5:24:0b:9f:61:6e:97:ed:48:ca:0f:
         1b:37:f8:08:b0:85:0c:80:09:e6:1a:54:8a:62:3e:4a:f2:88:
         a5:52:2e:e8:0b:ca:bc:fb:16:66:d1:09:61:e2:23:64:f8:68:
         9b:4e:e1:8e:59:36:a0:0f:f3:7e:5a:2c:22:4d:34:0a:b4:52:
         45:d8:7b:fd:51:04:22:15:39:fd:a6:1f:29:ce:67:e9:a0:d5:
         ba:f7:21:38:d3:14:45:04:7a:bb:63:73:42:e0:9d:11:5d:09:
         12:18:d5:90:df:c4:2f:f0:61:8c:a6:83:4f:0d:9b:62:8a:25:
         5f:47:85:c4:a4:89:f0:44:d7:00:e8:15:5f:c3:fd:a6:18:ee:
         27:72:98:96:b2:d6:fc:7a:8f:e0:7a:25:a5:ef:11:27:85:ee:
         8c:78:c5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:57:17 2026 by rpki-client