Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File:                     0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier:          8OeYoUmSuBbdHPjHubH/U4IyYRom17R6E87Q2MTqrno=
Subject key identifier:   E1:31:2A:AF:95:F9:B2:18:2B:8F:B1:F1:70:C8:66:23:65:3B:81:77
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer:       /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial:       019E2F970699755F6FFB8470D76C79812DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number:          15DE
Signing time:             Sat 16 May 2026 07:01:27 +0000
Manifest this update:     Sat 16 May 2026 07:01:27 +0000
Manifest next update:     Sun 17 May 2026 07:01:27 +0000
Files and hashes:         1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: rz9XEH5D6W4tA7uN0qI6PR4ohKU3h/0I6EoFiOkoNgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:06:99:75:5f:6f:fb:84:70:d7:6c:79:81:2d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
        Validity
            Not Before: May 16 07:01:27 2026 GMT
            Not After : May 17 07:01:27 2026 GMT
        Subject: CN=e1312aaf95f9b2182b8fb1f170c86623653b8177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:70:c9:03:a7:4a:ed:f9:84:8f:86:be:ad:
                    87:ec:54:97:67:3c:f4:0b:95:5b:0c:9a:45:60:07:
                    12:ed:6a:67:0a:8c:e7:f2:36:d4:67:af:f3:b0:0c:
                    04:d5:40:03:83:f1:3d:c1:2c:0c:65:35:ac:c7:af:
                    a1:b0:ee:2a:21:a1:9b:4c:36:ef:ac:18:f0:4b:4b:
                    d6:79:44:17:d4:37:41:44:51:ce:89:76:40:d9:cf:
                    46:55:81:fc:e5:81:03:7a:da:43:6d:e7:f0:75:70:
                    2d:da:04:91:6d:9c:36:93:cc:2d:79:4e:ad:db:08:
                    03:f5:67:81:24:35:22:67:6f:23:b3:31:dc:de:07:
                    13:14:77:09:8f:f4:0d:67:4d:e3:c0:e5:5d:a2:63:
                    05:e9:7f:86:69:85:8b:ae:b3:09:b8:29:43:83:48:
                    02:8c:8e:c1:83:40:a3:5b:7b:2d:86:2b:54:5e:e4:
                    40:2c:43:ed:58:ef:dc:c2:3f:a2:5d:94:57:4a:a6:
                    f0:71:31:a1:54:24:23:3b:c7:48:3b:1a:ca:b5:8a:
                    ae:9a:31:ef:ea:56:30:c1:33:b9:c3:fe:ec:ba:47:
                    02:2c:f7:00:53:dd:d2:9d:e8:29:33:87:95:00:f2:
                    1f:2a:0e:6e:4d:d5:63:91:30:24:e3:20:ff:3c:7c:
                    64:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:31:2A:AF:95:F9:B2:18:2B:8F:B1:F1:70:C8:66:23:65:3B:81:77
            X509v3 Authority Key Identifier:
                keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:f3:f2:2f:e0:7d:cc:51:b2:d6:87:e1:99:96:5b:c3:02:
         da:d5:a4:be:05:e5:29:d0:8a:72:0e:b6:18:2f:42:14:8f:19:
         17:fe:7e:45:a2:a5:04:ec:7b:58:3a:ca:7c:b3:97:4e:7e:56:
         3f:bd:e1:bc:82:f1:0a:7a:57:28:05:9c:c6:8a:ce:cb:0c:1c:
         e2:fc:59:0a:18:7c:7f:c4:85:a0:39:d8:c4:5e:fd:de:cd:af:
         45:d5:96:b6:23:ac:18:df:31:12:02:70:4a:bb:fe:06:51:1c:
         9d:40:21:79:3b:fc:47:2c:96:9a:e2:d6:fe:c1:aa:e8:a5:cf:
         c7:67:84:75:67:b1:f1:6d:a4:44:68:c2:91:5f:a6:57:47:8e:
         a3:7a:4e:76:87:9b:f2:0f:0a:9f:31:2d:36:9a:d7:b3:a7:05:
         56:88:2e:ec:9e:06:fc:c9:ff:37:f7:a3:d0:d5:74:f5:98:e4:
         36:36:17:8d:fb:45:4d:bd:08:16:89:10:cf:06:d3:d1:fa:df:
         69:9e:af:1e:38:32:78:ab:15:1c:be:6f:e0:2d:40:79:76:11:
         b6:38:bd:c7:97:02:b2:a3:51:74:65:53:a2:77:57:90:41:d0:
         5f:81:9c:7f:7b:22:9b:21:d3:82:fe:d2:d6:04:a6:7e:b6:fa:
         57:27:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:46 2026 by rpki-client