Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File:                     9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier:          h2DoZvc4p1hnWM6xoAOn4zXSfo7x1rygxxNjeQlKjGQ=
Subject key identifier:   6B:CC:A5:C4:3E:2D:03:B5:15:22:E6:24:0D:91:4B:F0:8A:CA:F9:09
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer:       /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial:       019E30E004AE363825D7C631E167A75466AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number:          190B
Signing time:             Sat 16 May 2026 13:00:48 +0000
Manifest this update:     Sat 16 May 2026 13:00:48 +0000
Manifest next update:     Sun 17 May 2026 13:00:48 +0000
Files and hashes:         1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: owyjdRV4/rF54Thaxx1Kw3KQqq2a5Fi9ILug9tB3yYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:04:ae:36:38:25:d7:c6:31:e1:67:a7:54:66:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
        Validity
            Not Before: May 16 13:00:48 2026 GMT
            Not After : May 17 13:00:48 2026 GMT
        Subject: CN=6bcca5c43e2d03b51522e6240d914bf08acaf909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:57:95:e3:f0:fc:8a:5c:24:b7:0c:fc:34:
                    a6:7b:5e:cc:4e:a1:b3:5a:b3:fa:83:3d:b5:0d:27:
                    56:87:c7:8d:9e:3c:53:83:e5:fd:18:dc:e3:98:a4:
                    2c:8f:6b:0f:a5:eb:b9:1f:ad:25:b5:e5:6d:de:ae:
                    7c:2b:00:51:1a:26:8f:4f:4a:5e:0d:c2:d7:3d:41:
                    2b:8c:40:de:50:97:d3:ce:51:59:03:5e:c8:90:7e:
                    89:ad:30:60:88:ee:31:29:38:7f:36:8f:25:ee:93:
                    7c:bb:3a:84:72:7f:b8:48:c3:80:ba:9d:84:fd:fb:
                    df:20:04:e5:14:1d:9a:1c:33:9c:68:be:57:e1:d7:
                    81:38:d2:4c:e4:19:60:af:ac:78:91:ba:84:9f:f4:
                    e9:64:a6:3f:5e:76:3c:23:e1:f5:cd:f7:e7:84:bd:
                    17:34:d5:1d:ca:0e:83:00:cf:c4:06:3a:9e:09:ad:
                    07:2f:08:c0:73:0d:85:9b:ea:c4:a7:82:c0:6c:25:
                    a2:0b:e7:21:d1:93:58:ec:7e:a0:82:90:a6:c1:ee:
                    b3:a3:9b:1b:22:a9:31:6c:b8:e8:ee:00:15:de:3c:
                    dd:fc:dc:7e:76:9c:b7:ed:ba:60:1f:ea:89:a4:e7:
                    f0:db:28:af:04:92:e8:e7:86:80:ed:f3:37:ab:c9:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CC:A5:C4:3E:2D:03:B5:15:22:E6:24:0D:91:4B:F0:8A:CA:F9:09
            X509v3 Authority Key Identifier:
                keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:cc:a9:dd:8a:eb:f2:ff:da:6a:55:a5:c8:ca:1a:ae:e5:f9:
         a7:83:bc:dd:b3:e2:3f:fa:e5:66:6c:11:3e:54:8c:bf:cf:29:
         fe:6f:a1:3e:6f:33:03:89:93:fd:e3:3d:bd:b9:81:35:d6:f5:
         3b:79:59:8c:94:25:55:f4:00:f0:7d:a5:c1:84:dc:99:52:bc:
         3b:fa:e3:fc:04:cd:b0:a1:7c:50:bd:1d:b4:e9:15:25:9a:31:
         a5:2e:81:61:d8:19:f4:de:24:11:63:e1:2c:c3:e4:23:60:a5:
         e2:28:61:fb:e2:35:76:03:3c:8d:63:af:07:72:0a:ee:d0:0b:
         e1:d4:54:d8:65:05:48:14:74:88:36:ae:14:8e:a8:66:1b:c7:
         0c:58:f5:0e:11:c9:35:73:ec:54:af:db:a8:5f:1b:3b:6e:f9:
         fe:b9:bd:cd:9b:aa:e8:bc:e5:f3:bf:e3:3e:a6:ad:af:9b:a6:
         fd:fe:7d:8f:0a:43:c9:65:1c:29:db:2f:14:22:3d:1f:47:08:
         60:8b:fc:66:16:93:92:67:be:7b:cb:64:5a:db:2c:e0:c6:f4:
         f1:99:55:e7:82:97:be:95:b6:a1:92:7c:b5:f9:f0:ab:0b:67:
         1f:4f:b3:e4:a5:b6:ee:0a:08:4c:c3:9f:4c:eb:08:d0:07:26:
         4e:5e:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:13 2026 by rpki-client