Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File:                     9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier:          Bu4A2cvdJZl4FPS63rC5pAaA7Hor2L6Lnf5ubhSkyeg=
Subject key identifier:   41:23:18:5A:7E:3A:BB:78:A8:2B:BF:DB:65:ED:C2:C1:E7:1B:E9:59
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer:       /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial:       019E30E02257ADB94535C159FDFBBCA4B422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 13:00:55 +0000
Manifest this update:     Sat 16 May 2026 13:00:55 +0000
Manifest next update:     Sun 17 May 2026 13:00:55 +0000
Files and hashes:         1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: pLMfq5o+4CySMHBizFEqPQVVBBblrvjwMlq1yeSgHGQ=)
                          2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:22:57:ad:b9:45:35:c1:59:fd:fb:bc:a4:b4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
        Validity
            Not Before: May 16 13:00:55 2026 GMT
            Not After : May 17 13:00:55 2026 GMT
        Subject: CN=4123185a7e3abb78a82bbfdb65edc2c1e71be959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:99:59:0f:20:46:04:51:1e:02:39:94:56:
                    1e:56:b6:32:28:1a:71:b3:4b:4c:22:a2:b1:99:b6:
                    a7:0d:c2:7e:57:e8:39:c6:f0:29:92:a6:59:3c:b4:
                    14:28:2f:57:1d:ee:6c:63:91:39:a0:e9:35:3a:3b:
                    d2:48:f1:79:fa:8c:ae:4a:05:7b:ae:d0:f9:82:c8:
                    3a:44:b6:b7:c5:2c:64:29:f0:d2:7f:a5:f9:58:30:
                    b2:4b:52:19:2f:5c:19:cf:05:45:e0:3e:5d:36:57:
                    5f:2f:1d:bd:01:9f:89:f9:e5:b3:c4:b8:c5:9a:4d:
                    81:35:cf:19:d8:0c:cb:0c:20:42:3f:56:97:32:c6:
                    53:da:1d:bb:bc:df:3b:2d:b7:36:d8:de:f4:aa:31:
                    67:17:cd:1d:17:bc:b1:71:47:63:28:92:16:03:8c:
                    23:90:bd:b7:8c:73:4d:47:93:b2:7b:dc:5d:d0:85:
                    d3:11:2f:57:d9:cf:e0:f5:86:c7:1d:d8:29:a2:4c:
                    6f:2c:5c:8d:7b:9a:35:08:42:6d:15:06:39:a8:1f:
                    af:39:d9:f6:50:5c:90:1e:2a:dd:74:b0:74:99:8c:
                    40:3a:64:73:93:3a:62:7b:ea:fc:78:68:64:aa:4c:
                    32:97:56:3d:f5:21:06:1c:70:9f:96:fd:e9:0a:a0:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:23:18:5A:7E:3A:BB:78:A8:2B:BF:DB:65:ED:C2:C1:E7:1B:E9:59
            X509v3 Authority Key Identifier:
                keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3d:94:c7:95:8f:10:93:1f:eb:72:42:94:65:1c:e8:23:98:
         4d:d7:54:1e:44:0a:60:5d:83:c2:75:91:c7:7a:49:ce:d8:32:
         4e:04:ad:69:ab:71:1c:44:73:50:a2:0e:1e:72:c8:84:2d:15:
         7a:77:d5:3d:00:cf:fd:5c:18:83:bf:18:40:20:b7:f9:af:f1:
         09:74:0c:03:1e:23:2f:c3:8f:50:b2:b2:1c:7e:4f:f7:40:64:
         97:25:87:9b:73:e2:ff:2a:f2:2a:68:7d:48:87:fb:08:d2:92:
         66:31:bb:ff:b0:ea:f9:92:12:0f:75:75:bd:f8:d2:d9:24:89:
         88:3b:3d:3e:b1:7a:b7:02:07:32:38:ad:eb:9b:0f:3e:e5:c0:
         10:b0:a5:5e:db:de:65:21:3a:23:a4:c5:38:3a:a9:67:42:66:
         67:12:57:d8:6b:db:a7:19:e0:52:73:10:8b:dc:5e:f3:d2:03:
         a2:79:03:58:35:7b:a3:34:90:d2:7d:ce:d1:5a:5f:33:62:55:
         a3:fb:59:27:e2:c4:af:6e:3f:72:73:88:fc:0b:87:02:b8:8d:
         69:e7:9f:7e:b0:15:d6:b6:b9:14:bb:c3:e7:b3:f6:fe:d2:2b:
         bf:e2:24:fd:48:4c:7e:40:f7:ca:1f:87:11:8d:9a:a9:ad:cd:
         aa:19:bb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:39 2026 by rpki-client