Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
File:                     9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json)
Hash identifier:          cuzJtGkHbYeoEYCzGzyQz0JKIBZ1MY+8PBvwnSSXEy8=
Subject key identifier:   B3:5C:BA:E7:01:61:B9:86:25:49:7C:C1:BC:07:AF:DD:AA:A4:E6:0C
Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
Certificate issuer:       /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Certificate serial:       019E303B49AA178135E8BF9F92C8700B2498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
Manifest number:          09D4
Signing time:             Sat 16 May 2026 10:00:52 +0000
Manifest this update:     Sat 16 May 2026 10:00:52 +0000
Manifest next update:     Sun 17 May 2026 10:00:52 +0000
Files and hashes:         1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: ds2a6sxLHY31TxUhSzuYL4fvStIDNbEq8FU3U9cXlFk=)
                          2: RXJtHW17ga48zDFcubRcsM8yvss.asa (hash: WyEDuaDUlsx2HrDyBKB8PUVqNo4aRQ6m9UiOaGV4R+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:49:aa:17:81:35:e8:bf:9f:92:c8:70:0b:24:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
        Validity
            Not Before: May 16 10:00:52 2026 GMT
            Not After : May 17 10:00:52 2026 GMT
        Subject: CN=b35cbae70161b98625497cc1bc07afddaaa4e60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:04:9e:24:ab:23:aa:e0:24:d2:a6:a8:9b:
                    eb:2f:99:fb:9a:a0:82:61:46:19:19:c8:85:7c:82:
                    35:2a:0e:9f:3b:b2:e8:90:2f:fe:15:4c:34:79:97:
                    19:43:ef:ef:2b:a3:d8:58:ac:11:53:ee:06:23:a1:
                    e6:0c:0a:53:5f:4b:1a:03:ed:b1:88:55:5e:c5:fe:
                    1f:35:19:68:7f:7a:cd:fd:6d:14:a0:c1:c8:48:04:
                    11:71:b8:90:bf:c6:e7:3f:e6:42:78:f4:db:65:8f:
                    37:5a:11:29:4c:8a:9b:9e:78:67:a6:fd:94:5d:db:
                    1d:68:6a:0e:d1:23:19:64:64:cd:88:51:99:3c:0f:
                    b6:7a:4a:e4:65:9c:81:d4:9f:63:be:87:3c:61:cb:
                    c9:78:36:d7:de:fd:ba:1c:e1:35:f0:61:f9:8a:96:
                    6c:f1:a5:0b:5c:ae:46:bf:af:80:fa:32:bc:9b:10:
                    54:23:a9:8e:ff:ea:d2:e8:c1:18:fb:e5:52:4f:f4:
                    34:a5:35:09:db:41:ab:67:0c:f8:9e:13:31:ba:0b:
                    86:9e:39:43:db:d0:49:15:69:98:c6:f0:e2:ac:81:
                    67:67:29:ef:1e:1e:ce:53:9c:fd:50:08:9f:f4:b1:
                    63:b1:c6:b2:2d:48:20:23:42:07:77:09:68:b9:2e:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5C:BA:E7:01:61:B9:86:25:49:7C:C1:BC:07:AF:DD:AA:A4:E6:0C
            X509v3 Authority Key Identifier:
                keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:75:8d:74:f3:88:6d:00:ec:5f:2c:23:a3:70:e0:43:6d:82:
         e4:0f:48:c7:49:6b:19:e9:7d:3e:e2:96:22:56:77:4e:28:72:
         f5:4a:12:0c:de:ff:7c:b7:bf:39:60:a4:01:d0:5a:a3:d6:fc:
         f9:2f:8e:8e:41:9a:e4:16:f7:54:5b:18:16:27:11:ce:b5:cd:
         72:13:2b:65:33:9a:8d:2e:77:f4:42:6f:91:0c:93:fe:88:3c:
         08:ae:71:8b:b2:3a:7c:1c:f4:a4:aa:00:4e:70:0b:38:6f:50:
         c7:08:28:18:11:a4:aa:3a:94:5a:7c:89:d1:bf:76:4c:a3:63:
         84:8a:da:da:2a:2c:92:34:04:a5:d2:3e:b5:11:77:6c:33:b8:
         40:83:d2:c0:59:98:78:92:13:30:22:4f:8b:98:a9:70:92:a1:
         82:0e:2f:9c:a2:d0:de:dc:cd:3d:0d:33:92:bd:91:01:5a:81:
         26:18:4a:8e:97:0b:d7:c2:71:68:35:7c:ee:82:f6:67:b4:cc:
         62:ae:82:0a:01:cd:e0:df:88:52:e9:7b:3c:4f:9b:dd:2c:c8:
         bf:22:5d:07:df:51:30:c8:6f:2a:ef:26:69:13:33:57:ff:7d:
         42:50:3a:a2:9f:e7:a1:67:2a:c7:44:1f:10:80:7e:a1:cc:45:
         4f:6f:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:19 2026 by rpki-client