Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File:                     9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier:          EyGxL4RbrRQKPkQIGANvYpqK1Y8xSKTxlJ6s7o2pRJw=
Subject key identifier:   6B:AE:CB:0B:42:6C:A5:51:AC:E7:7E:A6:38:A2:92:D1:BC:EC:6D:BD
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer:       /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial:       019E303BF309ED8D646B6B6A597DDFB83630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number:          060E
Signing time:             Sat 16 May 2026 10:01:35 +0000
Manifest this update:     Sat 16 May 2026 10:01:35 +0000
Manifest next update:     Sun 17 May 2026 10:01:35 +0000
Files and hashes:         1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: Svdlse3zhYKchFJ5aNhCqHKm5mW/lhcyQGpLRHTSxwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:f3:09:ed:8d:64:6b:6b:6a:59:7d:df:b8:36:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
        Validity
            Not Before: May 16 10:01:35 2026 GMT
            Not After : May 17 10:01:35 2026 GMT
        Subject: CN=6baecb0b426ca551ace77ea638a292d1bcec6dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:86:2c:f9:64:31:aa:b9:85:af:57:3c:f1:
                    c3:68:89:16:27:fc:0d:f7:d3:cd:f0:1f:56:45:27:
                    ab:c0:5a:ba:94:1f:12:eb:1c:ed:65:0c:a4:d9:9f:
                    fa:f4:b6:80:13:45:c0:e1:c7:92:46:bf:54:34:59:
                    4d:90:e9:5b:f0:a5:99:1f:80:79:95:bc:b6:ae:2a:
                    eb:82:ff:da:ac:c5:a2:d6:d2:12:5d:d3:6c:69:57:
                    01:11:3e:ff:5b:91:2e:bf:60:9e:70:4b:53:cd:80:
                    01:6b:1d:b0:6f:01:6e:ab:a3:2b:9a:90:77:07:72:
                    f9:cd:70:07:c9:fa:6a:34:a1:ec:67:66:7b:05:d4:
                    04:6e:3e:76:f8:f3:7f:a5:e2:b0:c6:8c:88:63:52:
                    ff:98:a3:86:85:8a:3e:19:db:7c:62:1a:3e:be:0d:
                    19:9c:9f:6d:a9:83:73:45:db:5d:2f:80:71:fc:a9:
                    74:13:6d:3a:90:90:71:71:8a:05:8d:32:15:1b:96:
                    a9:84:77:d9:3c:8a:02:2a:7e:b4:93:69:fb:b8:9d:
                    bd:1e:fe:39:5d:fd:78:6e:e6:93:75:85:5e:bc:6d:
                    76:47:54:7a:65:be:85:19:4c:6e:6a:cc:1b:cd:e3:
                    13:86:31:ce:65:06:a3:f5:b8:de:a7:40:76:3a:a5:
                    51:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AE:CB:0B:42:6C:A5:51:AC:E7:7E:A6:38:A2:92:D1:BC:EC:6D:BD
            X509v3 Authority Key Identifier:
                keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:94:28:16:dd:e8:5f:49:98:d4:6e:c5:5c:87:07:48:3c:
         24:5b:ee:da:d8:fe:4a:b7:8b:ee:38:00:84:1c:fa:91:bd:07:
         94:74:b6:02:f1:62:df:3f:c1:8e:a1:1a:f3:49:4d:ba:a2:20:
         86:72:44:30:a9:93:58:96:a9:e8:93:95:0a:00:7f:6b:a7:88:
         86:16:fd:ae:1f:5b:1c:63:95:52:32:03:84:38:c5:83:7a:cb:
         70:a3:95:2d:28:c4:e9:30:a0:77:43:e5:80:ae:bd:1d:99:d5:
         0e:61:0e:e6:31:79:3e:0a:24:8f:c8:04:f4:e0:4a:b6:36:09:
         07:59:be:47:0e:25:2d:0a:ea:31:f9:a3:03:e0:cf:66:db:91:
         9e:89:68:04:37:d8:43:1b:b4:5d:7e:b6:2b:7b:bf:49:3a:43:
         86:f8:56:74:96:ff:b5:04:a6:73:9f:56:2c:e0:ae:bb:aa:a2:
         36:1e:10:f1:d3:be:ae:06:8f:45:49:a9:c3:aa:ba:32:21:bd:
         1c:5c:db:ab:ce:83:6d:b4:ca:4f:26:cf:ae:00:39:8f:a5:82:
         00:4e:ba:25:d4:22:46:b4:47:d4:a6:74:14:14:31:b8:d6:80:
         fb:14:64:94:0c:3e:51:ef:81:0a:65:76:7f:90:45:a2:c4:9d:
         48:90:de:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:25 2026 by rpki-client