Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier:          Mh746We/dPP+BC2Jdpkn/Nbsrzcoykkhs9ATUAtrHxk=
Subject key identifier:   A5:E1:C1:C9:08:FA:A4:AE:F4:AA:7F:95:79:BA:63:A5:D4:3C:EF:84
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer:       /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial:       019E2A709DA074F4642F9F760D869E15B5DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number:          08F1
Signing time:             Fri 15 May 2026 07:01:23 +0000
Manifest this update:     Fri 15 May 2026 07:01:23 +0000
Manifest next update:     Sat 16 May 2026 07:01:23 +0000
Files and hashes:         1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: NAq0+RjxrskEW+ahpYRholowVWCn7sVWlWmevgZHuh8=)
                          2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:9d:a0:74:f4:64:2f:9f:76:0d:86:9e:15:b5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
        Validity
            Not Before: May 15 07:01:23 2026 GMT
            Not After : May 16 07:01:23 2026 GMT
        Subject: CN=a5e1c1c908faa4aef4aa7f9579ba63a5d43cef84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:1a:bf:05:59:e0:92:79:b1:29:64:a2:96:
                    02:3d:c2:c7:1e:76:c1:e0:2d:55:bf:27:6a:f3:03:
                    8f:76:12:d1:f9:b1:f7:21:97:56:36:82:27:3e:38:
                    30:93:19:d8:27:49:72:6f:82:94:e7:96:32:2e:b0:
                    a9:7c:e5:67:77:c7:2b:b9:fa:60:e6:ba:f9:b9:c5:
                    4f:eb:08:4a:fe:63:62:f3:0e:f9:dc:ee:1d:a2:2e:
                    32:d7:94:07:ed:cd:14:38:6e:86:ca:02:37:aa:f3:
                    89:c5:23:b8:49:0a:75:5d:20:6a:e4:a8:43:a1:69:
                    65:39:be:0e:be:e3:0b:f9:4d:54:62:5f:a0:2a:cb:
                    f9:a7:40:3e:7d:4d:b2:5e:26:c2:6c:cd:e0:6a:e8:
                    db:58:04:fa:03:a2:65:b6:7f:4e:f4:8c:9f:ac:75:
                    62:a4:50:93:65:62:2c:82:64:d4:6c:56:ae:54:6b:
                    a8:6a:51:d3:1a:5c:79:58:c6:dd:77:fe:d5:71:06:
                    2a:af:e5:cf:7b:02:7a:43:f5:60:ca:53:28:c0:72:
                    e6:8d:b8:3d:48:31:c4:3b:02:11:47:9c:05:b6:fd:
                    82:0b:1e:5f:11:7e:d3:8c:80:4b:cc:44:1d:94:20:
                    ab:53:c9:40:bf:dc:d6:28:5a:17:99:63:fe:8c:1e:
                    9a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:C1:C9:08:FA:A4:AE:F4:AA:7F:95:79:BA:63:A5:D4:3C:EF:84
            X509v3 Authority Key Identifier:
                keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0b:b2:f8:fd:f5:3d:d8:2b:cb:42:b8:b5:a0:a2:76:54:86:
         1a:80:59:e4:ef:e3:8f:cf:7d:f7:b0:90:f0:23:6c:2c:83:ea:
         23:b0:93:21:a1:f6:d6:0a:11:74:10:30:d8:e7:90:7a:5c:ac:
         86:d8:6e:b9:72:27:62:2d:5c:9a:c2:5c:00:cd:23:35:45:cf:
         a2:b0:91:aa:78:f7:1b:31:95:3e:cb:35:18:56:30:e9:eb:82:
         1f:da:79:48:29:0f:b1:44:52:5e:bb:7c:57:f5:22:8b:fa:fc:
         a6:ad:26:a7:6e:b2:f0:e1:5b:86:5c:dc:cf:0a:76:54:52:2d:
         8a:13:2d:b0:76:66:99:de:a7:3c:b0:04:ac:fb:f1:6a:61:3f:
         4a:54:d0:a3:21:46:40:91:18:b8:34:cb:d2:e7:d3:93:00:50:
         64:84:15:07:2c:c0:9a:e8:49:db:52:6d:c6:a3:d9:6e:17:80:
         f1:38:df:c8:87:ce:1f:3a:7e:63:61:38:e9:e2:ab:82:f6:c2:
         cc:07:7f:e1:e5:89:47:e5:0b:e9:07:56:a4:85:17:50:88:50:
         4d:6d:89:17:19:5b:44:83:0a:db:f3:c6:de:38:21:cf:f9:91:
         2d:c2:c4:97:47:21:43:ce:c7:09:5c:7a:92:64:54:00:53:b2:
         ce:7f:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:18:23 2026 by rpki-client