Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          qO6SfRced/1K6T3WXXc4BKefYe35aZ0DRPoy+hRP3XI=
Subject key identifier:   6B:3B:24:CA:A3:0F:C5:6C:D9:23:D2:58:C7:E6:D7:EC:29:25:02:BA
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       019E31176D08E4E13C29E4BFB723A655F0BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          0577
Signing time:             Sat 16 May 2026 14:01:19 +0000
Manifest this update:     Sat 16 May 2026 14:01:19 +0000
Manifest next update:     Sun 17 May 2026 14:01:19 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: C4xKfOIq7L79g5OWSRfHMrtJpUjVS86JymnXBsqOCrc=)
                          2: Q1BIazUMtU491Kfp1prxFz4oeuU.roa (hash: sJo8b2jgePbm04v5Oh4sG6+LqF87DEVfl2ISH3CHQlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:6d:08:e4:e1:3c:29:e4:bf:b7:23:a6:55:f0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: May 16 14:01:19 2026 GMT
            Not After : May 17 14:01:19 2026 GMT
        Subject: CN=6b3b24caa30fc56cd923d258c7e6d7ec292502ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:34:0e:db:1e:89:7a:45:e7:93:2b:15:73:f0:
                    c9:95:4f:37:cd:db:a6:99:7b:14:09:32:9c:6c:bb:
                    f7:8a:1a:5a:0b:01:ae:ce:fe:b8:00:98:21:0f:ac:
                    4d:3b:4d:e2:ea:d9:06:5f:b8:c8:86:9f:3c:3e:49:
                    bc:29:a5:ea:58:fa:4f:08:fa:13:b9:a0:e0:21:82:
                    fc:6f:f4:bc:76:ca:3c:47:57:c4:1f:10:9e:ab:88:
                    7e:e9:f8:bc:e4:b6:c3:13:52:a5:b6:55:56:7b:cc:
                    c1:11:cc:a4:7f:4c:bf:fe:9a:ba:35:9c:78:8c:c7:
                    f8:64:80:1a:4b:30:51:24:57:9a:43:dd:b4:aa:c1:
                    8b:b9:b7:53:79:e1:09:a6:a8:97:77:0f:a0:06:28:
                    20:32:74:10:95:55:33:3a:21:38:4d:3a:83:08:f7:
                    54:f6:e3:c5:16:c4:a0:c5:34:04:c3:8b:37:f4:8e:
                    5b:2c:25:5f:da:15:7c:ef:b9:e7:18:72:b5:e9:a3:
                    2e:8a:8c:2b:7f:e7:5e:63:7e:19:49:8e:a4:d3:ad:
                    83:e3:f5:b3:bc:d1:25:86:ff:95:b9:64:c8:ce:3c:
                    4b:db:53:2a:50:31:37:1d:04:0d:b7:e3:d2:66:00:
                    d5:06:05:12:a6:72:df:de:ba:9f:92:92:8f:75:c3:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3B:24:CA:A3:0F:C5:6C:D9:23:D2:58:C7:E6:D7:EC:29:25:02:BA
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:25:89:5d:e2:38:9d:66:b5:34:44:91:48:e2:f9:61:d0:
         6c:d9:30:6e:32:98:a9:0a:b0:6f:cb:da:1f:a7:58:45:ad:00:
         7f:32:c2:5a:39:97:eb:94:25:70:34:7f:f4:cf:53:7f:cd:da:
         e0:24:43:e8:cf:57:0d:41:43:d9:f0:9a:b1:bc:d0:92:70:80:
         81:32:e1:b1:49:32:2e:42:dc:6f:80:a6:53:2c:e3:37:ca:f7:
         27:a8:95:05:2f:34:be:9e:f1:ae:fa:e4:aa:d1:a4:f4:b7:43:
         c1:23:36:08:3a:bc:0e:a9:8c:45:45:f7:d2:b8:36:18:59:3b:
         42:53:d4:82:71:ea:4c:c2:33:79:46:3e:7d:44:5a:bb:9f:ed:
         6f:9b:8b:e6:71:bd:ba:c7:4b:8f:87:9e:64:71:e7:37:1d:da:
         3a:a1:3f:27:63:99:1b:36:83:5c:bf:c6:77:9b:be:2f:74:89:
         d0:29:05:36:12:53:3a:38:f5:82:ba:a5:73:62:f2:5f:56:e1:
         9e:e5:89:bd:a3:b0:92:58:65:65:c8:f7:5d:9a:5f:a3:5e:95:
         c2:87:b5:5a:9f:53:63:2b:ef:8a:6a:89:ad:67:2a:8d:8e:94:
         ed:95:73:14:69:0f:0c:52:06:ea:fd:53:bd:dd:f6:80:c1:89:
         e4:fc:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:07 2026 by rpki-client