Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          kIRpUOGpGgFdnX4wrC227bxJZ3dgWhLeYpYfY0YqfUQ=
Subject key identifier:   D9:51:0E:1D:38:DA:E2:AA:BC:EE:F2:A1:1C:2B:89:D3:60:80:E6:C8
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       019E314DD9F1327096A04E7C96C6DC0C09E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          1465
Signing time:             Sat 16 May 2026 15:00:45 +0000
Manifest this update:     Sat 16 May 2026 15:00:45 +0000
Manifest next update:     Sun 17 May 2026 15:00:45 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: e9fxpn+umiYPryMPZpTX9RuFr5P++8Kax/QMfvjpOq8=)
                          2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:d9:f1:32:70:96:a0:4e:7c:96:c6:dc:0c:09:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: May 16 15:00:45 2026 GMT
            Not After : May 17 15:00:45 2026 GMT
        Subject: CN=d9510e1d38dae2aabceef2a11c2b89d36080e6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:53:02:65:4b:18:b1:af:1a:17:bf:ab:71:
                    2c:07:85:ac:3d:16:4c:12:53:14:b2:aa:a4:7f:31:
                    27:94:96:c2:df:15:6d:28:e6:93:24:5d:16:cd:7a:
                    32:c6:84:ed:d8:dd:f6:ba:c3:8d:ad:fd:93:fa:1d:
                    3c:d7:b9:2d:ba:7e:6d:24:7a:25:b7:72:46:82:77:
                    a1:10:08:05:7f:11:58:5b:b4:49:42:3f:50:59:b5:
                    ba:fa:a5:9f:fb:27:44:ec:c7:82:8b:49:7d:c6:f4:
                    be:69:4b:78:0f:ed:33:b9:59:5a:b1:f0:da:9b:72:
                    62:f1:ce:5a:df:1e:57:d0:36:b3:3a:a9:c3:2a:a2:
                    0d:ec:8d:2e:e2:8f:fc:f7:c4:a0:36:0f:88:68:7d:
                    67:42:20:57:90:25:fe:c7:57:62:70:44:47:e3:a8:
                    2e:09:84:02:b9:16:d6:ee:a6:f5:d0:89:34:cd:cb:
                    18:37:45:07:d2:d6:d6:84:5f:78:50:8d:ab:64:b0:
                    eb:ae:7d:ec:eb:07:b6:78:7e:36:ca:4e:08:03:12:
                    af:f2:bc:d0:5e:c2:d3:09:0c:67:db:39:0c:87:da:
                    9d:f1:3f:3b:db:71:fe:a7:85:35:75:4d:9a:f9:cc:
                    35:63:63:1b:4c:9d:3a:21:21:f1:bb:b1:1d:d4:0d:
                    21:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:51:0E:1D:38:DA:E2:AA:BC:EE:F2:A1:1C:2B:89:D3:60:80:E6:C8
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2d:87:87:7b:e1:55:eb:45:b4:44:45:ea:07:95:38:e6:a2:
         c5:39:7f:8d:84:94:0a:53:39:34:12:0f:81:4e:73:bc:41:4f:
         40:a3:30:45:2f:79:03:1c:92:3b:31:55:7f:95:88:6b:d3:29:
         99:70:e3:66:d7:ab:cb:48:fb:6e:06:9d:22:36:a4:6f:e3:54:
         1d:d1:e2:e8:83:ec:25:7f:4a:84:52:cb:4f:6d:97:1b:c4:23:
         d7:2d:a2:3f:5a:51:40:ca:b7:a4:c2:99:0f:24:4e:bc:2b:23:
         2b:3b:85:b0:39:6b:db:57:47:01:62:70:a3:1a:0b:7e:04:58:
         d7:a1:69:a8:fb:ec:99:9b:5d:57:86:db:d8:bb:f7:97:e4:f6:
         c9:7d:fa:0f:d9:e8:92:7d:b3:a9:dc:b6:2c:c5:e1:3b:24:15:
         2c:0c:0a:88:d3:8f:a1:08:39:15:0c:80:fb:91:fa:19:a5:80:
         94:77:32:ea:eb:16:4f:51:7a:c3:54:62:f9:51:84:87:32:75:
         06:7f:04:75:fe:2a:58:b6:50:d0:8b:4e:ab:24:07:88:16:38:
         49:52:89:6f:85:99:60:4f:6d:46:37:59:20:df:b5:d4:03:08:
         4c:f7:c6:59:3e:48:7b:84:70:bc:b3:f7:29:95:31:79:46:78:
         69:af:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:36 2026 by rpki-client