Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File:                     9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier:          KwLaPr8aAfJkO/BQ0g7bL7Kor05xUCj3Ma1jmm7bO+A=
Subject key identifier:   8D:11:29:05:14:51:0B:E8:07:E3:E3:A6:2C:BA:D5:04:D5:CE:CD:6D
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer:       /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial:       019E30E05E213034D5C89C72D7DB8601A306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number:          1624
Signing time:             Sat 16 May 2026 13:01:10 +0000
Manifest this update:     Sat 16 May 2026 13:01:10 +0000
Manifest next update:     Sun 17 May 2026 13:01:10 +0000
Files and hashes:         1: 48esUEjzOBICw-DAm0mO74jcC50.roa (hash: gMR9bADhJEei6lcf6w7gc94Lp3W0Rts74YHyQSE5Nn4=)
                          2: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: Pi49bpnW4//IWXlH81qAoeQYhhcZdGj3ZKmRZsLEPZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:5e:21:30:34:d5:c8:9c:72:d7:db:86:01:a3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
        Validity
            Not Before: May 16 13:01:10 2026 GMT
            Not After : May 17 13:01:10 2026 GMT
        Subject: CN=8d11290514510be807e3e3a62cbad504d5cecd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:52:e8:1b:21:7a:77:ef:a1:93:f1:c0:af:
                    09:57:27:27:e1:ee:0d:4b:2c:3a:ec:e6:b1:4d:5a:
                    d2:be:a4:46:dc:29:3f:08:2b:ea:9a:2f:fc:78:db:
                    8a:42:87:8c:ad:39:9e:f6:65:3e:36:fb:91:c7:66:
                    81:b1:25:c1:fc:da:39:08:f5:37:37:b2:dd:0f:2e:
                    16:a5:97:fa:f5:e9:02:be:64:a5:02:a6:49:4d:f7:
                    ca:c2:61:af:a7:63:27:50:2c:dd:bd:03:a8:0d:1d:
                    ab:e8:42:9b:02:b0:5c:4f:b2:18:0f:4a:01:4b:20:
                    49:7d:ec:93:8f:42:fb:02:67:09:14:d1:66:31:f9:
                    29:ea:11:da:ad:dc:e8:65:6b:d9:f4:ca:1f:1e:d3:
                    60:df:9a:bd:31:d0:79:51:67:17:61:2d:34:c1:ee:
                    37:33:ee:22:73:df:fb:b1:d2:d0:58:11:a9:25:81:
                    96:d6:0d:1c:df:3b:f1:88:d4:ed:78:f2:e4:68:1e:
                    35:3d:43:37:52:78:40:85:90:22:d1:c6:79:09:59:
                    a5:8d:9b:f7:00:ca:09:a0:6b:b1:0b:89:7e:c9:bf:
                    83:0f:28:ae:98:e3:a8:47:ad:5e:85:d6:c3:c7:f8:
                    43:90:8f:2a:bc:b3:93:e2:fb:42:31:56:9a:9b:22:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:29:05:14:51:0B:E8:07:E3:E3:A6:2C:BA:D5:04:D5:CE:CD:6D
            X509v3 Authority Key Identifier:
                keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e5:e4:8a:09:b7:b2:4b:de:0e:55:36:a4:28:8c:9d:f2:7a:
         db:07:5e:ac:53:b8:16:b3:c0:df:29:0d:7d:6c:cf:b9:10:f4:
         d8:07:43:17:98:a2:6d:8f:84:83:ad:63:83:7e:d7:ed:67:79:
         03:8c:ef:13:5c:bf:fc:66:8d:ac:cf:9f:ca:6c:d0:6e:e4:ad:
         a4:4e:06:b7:c8:01:77:3f:b1:10:dc:18:7d:46:6d:82:d9:5f:
         0f:49:ad:81:eb:26:38:d4:e6:75:d3:03:67:e8:fe:ba:dd:50:
         73:7e:b5:ed:f0:a1:27:d7:d5:59:69:3c:f2:a8:d0:59:4a:d3:
         44:b7:1d:4d:a7:82:60:78:27:64:20:53:61:29:9f:fd:ee:4a:
         e5:e7:b1:7b:46:09:6a:fc:26:f2:4d:ec:ad:94:dd:98:63:c7:
         b8:dc:e0:32:dc:f1:0f:96:c8:64:db:07:f9:3d:ce:58:b9:ab:
         30:c0:d9:a5:02:14:2f:38:2f:39:b3:79:71:88:19:78:d2:f7:
         bc:86:65:25:36:0a:f3:7b:34:26:b1:3c:bc:bd:59:81:fe:d0:
         65:78:5a:48:0d:f6:30:40:48:b1:a7:1b:f6:53:ef:01:01:6d:
         60:fd:fe:52:15:1c:be:a4:dc:ff:01:89:91:68:28:89:c8:ce:
         18:5c:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:44 2026 by rpki-client