Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File:                     9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier:          RvwGaKiafqGL2avUaJLVs3+sDdvNRXGZ/+BkpAqwlsQ=
Subject key identifier:   30:54:9E:FF:D7:D3:88:03:0E:41:9A:85:6F:29:28:F5:73:43:93:6D
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer:       /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial:       019E30A91D888DFBB17FDBE752DA7937C0B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number:          0DB1
Signing time:             Sat 16 May 2026 12:00:49 +0000
Manifest this update:     Sat 16 May 2026 12:00:49 +0000
Manifest next update:     Sun 17 May 2026 12:00:49 +0000
Files and hashes:         1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: IzB0JE2nMQm5OZ8ZOJYI2aRR8/0EhAS+Rtuee4TXKwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:1d:88:8d:fb:b1:7f:db:e7:52:da:79:37:c0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
        Validity
            Not Before: May 16 12:00:49 2026 GMT
            Not After : May 17 12:00:49 2026 GMT
        Subject: CN=30549effd7d388030e419a856f2928f57343936d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:46:66:ab:b5:ce:02:85:6a:93:38:62:d3:
                    40:e7:55:0c:c9:e7:fe:9c:38:68:3a:2c:e1:9b:d7:
                    83:da:c2:05:52:78:90:98:e9:76:ea:f0:6d:ba:75:
                    0d:16:f9:e3:7b:38:df:b8:70:7c:10:0d:85:86:84:
                    c9:3d:bd:40:b6:e4:ad:42:34:3e:1a:b6:ea:50:07:
                    2a:10:26:f6:2f:e6:09:46:e7:74:f1:4a:be:4d:b6:
                    1c:9f:8e:27:d0:48:ce:58:91:0e:08:4b:78:13:28:
                    cb:63:bb:6c:df:c1:a7:32:ca:ed:58:40:1d:97:1c:
                    df:9d:21:bb:7a:f8:b3:5c:95:79:2e:91:05:ec:5b:
                    45:26:66:65:58:97:0b:69:05:f3:5f:50:02:de:c7:
                    71:c2:e6:f2:ee:10:8d:72:dd:9b:4e:dc:e2:01:56:
                    5d:09:11:77:d1:2d:c1:fb:1b:5a:ac:fa:fc:dc:bf:
                    0e:4b:2b:e8:73:50:38:25:7f:06:d2:47:ca:e7:f8:
                    68:89:bc:5e:a3:e3:54:90:22:20:6d:45:e5:86:da:
                    a7:14:ca:58:cb:7e:be:00:19:0f:9f:a7:80:01:62:
                    9a:f8:25:55:58:57:df:6e:e0:06:01:a1:9d:81:56:
                    d5:41:bc:6f:17:64:ce:e3:ea:7b:aa:34:20:7b:62:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:54:9E:FF:D7:D3:88:03:0E:41:9A:85:6F:29:28:F5:73:43:93:6D
            X509v3 Authority Key Identifier:
                keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:85:c9:71:55:36:35:54:96:47:e6:3f:fd:df:7d:a8:d0:
         2b:97:61:ec:ec:a7:b6:b3:62:40:e4:9f:2b:18:64:4d:39:19:
         f0:19:11:92:08:df:1d:33:a3:57:6b:9e:16:e5:b4:dd:a5:ff:
         30:85:3b:3f:c7:23:73:f5:76:e6:6a:40:29:12:01:83:f1:f9:
         12:2d:32:68:0f:cf:da:78:2c:96:4a:6a:7c:ab:a2:d7:9e:d3:
         c8:6e:ec:d1:64:bf:84:b9:dc:e8:ae:8a:8f:1d:bb:1d:6e:a1:
         e7:b0:31:d8:50:60:f6:9d:10:ad:94:38:75:7d:6a:58:b0:23:
         1e:88:32:2c:40:ec:4e:a2:b6:83:87:37:47:40:b8:3a:42:0d:
         3a:40:f4:01:8e:db:94:19:14:9c:56:fd:f5:26:85:3c:0f:45:
         47:c9:c1:68:8a:c5:46:96:63:ee:da:2b:b3:20:53:b2:f5:f7:
         5c:c7:9f:c8:60:a1:4a:12:aa:60:61:08:c8:42:21:29:81:a0:
         b2:aa:eb:24:0c:ef:2d:9a:0a:d5:3c:38:5c:fb:81:18:17:08:
         48:e7:99:07:24:71:f0:e5:b0:b8:bb:ad:90:1d:78:ac:80:bf:
         1f:d5:81:c1:e4:01:e4:b6:88:44:77:f1:eb:d8:c8:61:c6:13:
         97:3a:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:51 2026 by rpki-client