Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File:                     9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier:          uKu3GttxYGxL0mMeIRPAdXOf21N6PISsn4o8hAMnG/M=
Subject key identifier:   27:AD:19:2B:03:BA:98:4E:08:15:23:01:D7:85:24:BE:42:85:7C:28
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer:       /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial:       019E303B6F5F99D4B095595D656BC2D44987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number:          13E7
Signing time:             Sat 16 May 2026 10:01:01 +0000
Manifest this update:     Sat 16 May 2026 10:01:01 +0000
Manifest next update:     Sun 17 May 2026 10:01:01 +0000
Files and hashes:         1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: AYZ/i+VIAtNO8JO81c1zS5DW5XxBqaxyYt1pk6isQNE=)
                          2: ueo3GEvAi3EUPHegDlQ1GPk4SCg.roa (hash: /54TVaQGpWQlA0th+KPLCMlkXLtNsFvetSrJmgBZFMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:6f:5f:99:d4:b0:95:59:5d:65:6b:c2:d4:49:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
        Validity
            Not Before: May 16 10:01:01 2026 GMT
            Not After : May 17 10:01:01 2026 GMT
        Subject: CN=27ad192b03ba984e08152301d78524be42857c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:56:07:3c:5b:3e:f7:93:1e:6b:e7:b5:97:
                    7d:21:50:0f:61:14:1f:16:71:c2:08:4f:54:8b:21:
                    4d:f9:ea:0e:0a:81:02:d8:5d:d7:c8:cf:61:7d:bd:
                    0f:63:26:2e:c6:f6:52:fb:3b:13:bf:69:ab:1d:35:
                    45:ad:c7:3d:e5:09:bb:a6:c4:69:22:25:89:f8:22:
                    1b:8f:22:1e:8f:a5:5c:04:3a:35:12:1d:71:6b:8c:
                    2c:fd:71:7b:55:3d:ba:8d:4b:45:d1:56:71:40:11:
                    4c:46:14:fd:a5:1a:47:6d:81:28:17:54:5b:e7:91:
                    00:81:fe:59:bf:db:df:77:60:bb:a8:d0:26:9b:88:
                    54:22:e4:28:c6:03:c5:71:ed:f2:3e:0e:84:6f:57:
                    36:d0:68:36:a7:5d:41:98:ad:71:a7:c9:ca:dc:48:
                    6b:a2:94:e8:2e:35:d1:24:a4:12:25:f9:ff:53:20:
                    9c:23:fa:8d:dc:1e:83:99:4e:97:c1:fb:f8:27:3a:
                    31:69:2a:43:cd:6b:4e:e5:bb:90:47:06:78:b5:45:
                    cc:7a:b3:24:ed:e7:a2:4b:e2:9a:b4:f9:6d:9a:63:
                    b2:95:d6:cd:05:03:37:c1:82:87:0b:e1:b9:b2:22:
                    69:e0:3a:2f:86:9c:c2:5e:5c:ba:24:e5:1c:74:00:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AD:19:2B:03:BA:98:4E:08:15:23:01:D7:85:24:BE:42:85:7C:28
            X509v3 Authority Key Identifier:
                keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ac:a7:6d:7c:c6:42:93:39:bc:54:fc:74:a2:26:72:85:1e:
         5b:a5:94:50:2a:11:99:c0:00:39:55:97:1f:01:78:80:01:4d:
         a9:fb:e0:af:b5:85:e2:2a:25:76:8b:02:40:ea:cb:fe:58:b5:
         be:69:c7:13:15:02:f6:1c:8e:ed:ba:1b:96:91:d1:26:2c:df:
         a7:31:28:3a:f2:9d:87:16:36:65:bb:7e:de:3b:1f:25:52:f3:
         fa:5a:59:2d:16:89:3f:f9:e1:0d:c3:c8:25:d4:ee:ae:e9:b1:
         4a:5f:1d:09:c8:8f:e4:29:ac:79:68:18:98:72:87:f8:fa:75:
         dd:48:2f:86:5b:cd:de:4f:54:fd:1c:7f:83:e3:21:be:7c:88:
         33:23:3f:ff:3d:5f:32:de:4b:db:35:96:32:41:37:b3:8b:cf:
         30:d6:2c:12:4d:c4:6a:29:3a:a0:e9:b3:18:c7:58:b0:fb:40:
         27:fe:95:7d:a5:8c:2f:f0:77:f5:36:f7:7f:1a:1e:b5:2f:8d:
         fb:11:8c:73:a5:55:fc:0c:be:b8:86:a1:d4:f4:fd:c9:78:7b:
         a2:29:8e:91:2e:7c:da:55:77:00:f5:34:03:d1:83:4d:f4:4d:
         71:52:75:ce:12:2b:9a:bf:6a:da:74:00:8b:fc:99:a1:20:c6:
         02:f1:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:14 2026 by rpki-client