Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File:                     d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier:          +CCUOikiRO11fCMrMnG8o/02uotALGlCIe/GdSn20L8=
Subject key identifier:   60:58:42:F2:7B:7C:80:E3:49:B4:20:54:BA:66:32:8B:CF:11:99:44
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer:       /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial:       019E2813DFA1DA2C443835F3F01C88352A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number:          0E86
Signing time:             Thu 14 May 2026 20:00:51 +0000
Manifest this update:     Thu 14 May 2026 20:00:51 +0000
Manifest next update:     Fri 15 May 2026 20:00:51 +0000
Files and hashes:         1: 6h9k6xzi-eiSHNvIfR1iiY1lGdQ.roa (hash: pfVa1UicKiOy2Facu1pK6Uyiw1IMqVl6D7uB18F/7yw=)
                          2: 9Y6XWJ6VWz8otzDPBalCUtCfzZU.roa (hash: sjrsCbBwaUlQ8V+c9dddc6DlyD0j++DkIm2cvSRmRTg=)
                          3: bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (hash: QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=)
                          4: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: T73kvAL+YdBtEDdIizXvX0MeHnC5sfqt+V4RakJ9NI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:13:df:a1:da:2c:44:38:35:f3:f0:1c:88:35:2a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
        Validity
            Not Before: May 14 20:00:51 2026 GMT
            Not After : May 15 20:00:51 2026 GMT
        Subject: CN=605842f27b7c80e349b42054ba66328bcf119944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:b9:80:5d:4a:9f:db:dd:ad:e2:a6:99:d6:
                    4a:7d:cb:8f:5b:bb:2f:c4:28:dc:2f:4a:ab:a2:61:
                    ca:34:49:16:7c:57:7a:db:b0:ee:f4:d2:83:97:5a:
                    62:cc:cf:c3:86:c7:29:0a:8a:71:10:3a:37:49:9c:
                    39:55:88:48:99:19:78:d5:45:2c:41:fe:3e:30:a4:
                    70:c0:fa:45:30:1f:70:e8:17:0f:12:7c:e6:f3:fa:
                    bf:1f:8a:cb:c8:e3:6c:ec:5b:29:97:c3:f5:23:eb:
                    f3:8c:9e:8e:8f:6e:37:25:6f:d5:c2:66:0c:3c:33:
                    09:35:37:25:99:06:a1:7a:1d:b7:0f:3e:88:4e:c3:
                    aa:7d:dc:4a:4a:a7:2f:b3:11:c3:4c:e8:91:df:91:
                    e8:1d:69:8b:cd:01:be:eb:76:c3:ac:3b:e8:7e:5a:
                    b8:2a:62:03:9e:2f:38:3d:2b:aa:b6:5b:4a:bd:4d:
                    67:ae:28:43:1c:92:8c:94:14:60:03:e1:d1:4d:df:
                    fc:0b:45:47:26:b3:2c:42:c3:96:3b:66:1f:8d:6a:
                    82:08:c0:c2:f7:6e:21:a5:a2:b2:63:cd:bf:c2:25:
                    4b:40:4f:b9:4a:7e:4e:82:6c:c4:64:13:89:7a:15:
                    cf:d7:28:92:d7:20:20:83:66:7c:76:4d:3e:c0:b0:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:58:42:F2:7B:7C:80:E3:49:B4:20:54:BA:66:32:8B:CF:11:99:44
            X509v3 Authority Key Identifier:
                keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c7:c8:fc:4b:32:79:69:b7:f4:6c:32:cc:00:b4:2b:93:08:
         2c:61:1c:44:ce:60:e1:d6:89:7d:3d:20:02:1a:a1:ba:7d:88:
         32:11:d0:c9:83:0c:a3:9c:94:64:2e:24:08:18:dd:23:d6:58:
         5c:88:d0:26:fc:8f:4e:da:bf:fa:96:df:1d:28:2b:75:88:24:
         08:f7:56:92:85:10:8e:ab:70:77:d3:26:10:fc:89:30:22:75:
         05:60:e9:1a:74:7b:11:f5:59:ac:f0:40:8d:55:9e:56:71:b8:
         9e:2f:e6:3d:53:dc:8a:bc:4e:84:7f:4c:97:ac:98:f6:93:14:
         42:aa:8e:11:4d:5d:29:f4:eb:b7:4d:fe:1d:ad:33:86:b8:12:
         91:a0:c7:0d:eb:90:70:05:bf:d5:34:43:64:69:5d:a7:83:80:
         0b:6f:57:2a:6b:3d:2a:d0:f2:76:b8:f1:62:16:38:68:37:0f:
         d0:07:c2:cf:38:56:af:67:2c:56:fe:e2:eb:6b:03:42:04:2a:
         d1:46:17:54:89:61:f3:26:07:46:ef:ab:14:11:ab:f1:bc:62:
         c3:28:cf:e4:b9:7c:7a:95:08:28:d8:b4:09:22:9b:ae:22:bf:
         90:ca:b7:89:f6:96:95:e1:e6:75:7e:33:c7:89:d0:d1:33:6f:
         0f:be:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:02 2026 by rpki-client