Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
File:                     9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json)
Hash identifier:          3EBkzPeEdG89jMCCJTCdd4ou4S02e0BJ5o8z4MtU3kk=
Subject key identifier:   B7:3A:AF:D6:81:E2:89:CC:4D:C2:D1:28:A4:ED:86:C0:C6:D8:E6:15
Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
Certificate issuer:       /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Certificate serial:       019D371B87F8E86191F765918AE7D1F39816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
Manifest number:          0953
Signing time:             Sun 29 Mar 2026 01:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:44 +0000
Files and hashes:         1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: dPkIdIL8uzOtEJEyXMGzrrQh23n4pM8ik28XdJtdSjo=)
                          2: RXJtHW17ga48zDFcubRcsM8yvss.asa (hash: WyEDuaDUlsx2HrDyBKB8PUVqNo4aRQ6m9UiOaGV4R+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:87:f8:e8:61:91:f7:65:91:8a:e7:d1:f3:98:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
        Validity
            Not Before: Mar 29 01:00:44 2026 GMT
            Not After : Mar 30 01:00:44 2026 GMT
        Subject: CN=b73aafd681e289cc4dc2d128a4ed86c0c6d8e615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:3f:b2:9e:e7:96:8a:a4:0c:35:2a:5c:06:
                    f8:64:41:73:68:85:8d:bc:99:41:ac:49:36:f4:3f:
                    5a:c1:58:98:b9:f8:bb:b4:a4:a0:a0:5a:b0:fc:49:
                    09:93:10:39:ea:27:8a:48:31:84:94:60:17:d2:3b:
                    93:f6:e9:0e:e9:b3:51:d0:eb:73:8f:fc:d9:16:7e:
                    7b:e3:be:05:85:a5:7b:f8:70:cc:c4:1f:bd:fd:53:
                    97:11:ab:7e:c9:9a:1e:1c:12:14:57:e0:1f:5e:f3:
                    48:46:a7:6b:34:2d:c2:5e:29:67:e7:be:10:c3:62:
                    e7:3c:03:19:f8:1b:01:1d:08:4c:0b:e2:6a:b3:10:
                    a3:36:7b:f3:03:4f:83:0b:83:48:72:4d:6e:e1:51:
                    66:ef:c9:1c:3c:3b:a8:77:60:f9:a1:10:e9:7a:2a:
                    1c:75:ce:39:52:1e:91:e5:a2:77:c5:58:b8:f2:98:
                    00:f7:6f:2e:37:fb:4d:39:58:af:3e:4d:9e:32:a1:
                    01:45:4c:61:57:bc:34:8b:d6:b9:98:36:ab:3c:a7:
                    a6:13:e0:d6:2b:31:a5:0a:4e:ac:41:05:8e:ee:4b:
                    ab:d3:6d:45:42:dc:a5:2f:e6:1a:31:02:78:58:88:
                    19:3d:4f:19:7a:c6:5f:09:0c:1d:d0:81:74:4c:ec:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3A:AF:D6:81:E2:89:CC:4D:C2:D1:28:A4:ED:86:C0:C6:D8:E6:15
            X509v3 Authority Key Identifier:
                keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:53:4f:6a:da:76:67:c0:28:5b:d1:3c:6d:e7:d3:4d:bd:4a:
         25:36:06:07:57:e8:7e:90:36:ac:d4:b0:86:ea:04:5e:f5:93:
         76:1d:48:26:85:58:24:58:8a:69:f1:90:be:8f:39:7b:b5:9b:
         6c:b8:7c:cf:eb:f3:be:ca:66:78:47:c2:d0:3d:b6:9d:73:cd:
         b6:ac:05:0a:57:c5:a8:16:5b:6e:6b:c8:dc:8a:a3:6b:c8:64:
         e2:a2:f5:87:5f:09:73:ab:e8:9d:b2:29:ac:8b:3b:d5:af:2c:
         4b:5d:1b:5a:89:18:a9:83:ba:78:d7:f3:c9:65:71:c8:91:58:
         3e:5f:b9:68:8e:63:51:2c:c5:6f:82:a3:60:49:49:1b:0d:0f:
         ad:76:b6:5d:dc:46:8b:2f:3a:af:36:98:20:af:c6:f9:9c:96:
         8a:ad:da:cb:c3:cd:c0:32:a7:21:f3:f5:d3:66:aa:32:b5:7a:
         ea:d1:ef:e7:fa:44:81:df:b7:50:8d:93:68:09:70:b6:fd:fc:
         12:05:44:cd:ee:55:fc:ea:85:ff:1d:b4:3d:e3:60:93:3a:a2:
         09:b7:19:ac:00:2a:10:69:08:6b:ee:21:57:c0:2d:73:12:69:
         3f:22:91:b3:26:8f:34:50:88:d3:2d:25:22:83:49:37:ae:c5:
         4d:74:5f:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G4f46GGR92WRiufR85gWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Mzg3ZTkwYzRmZTU2ZWUxYjYzOTQ2ZmU0ZDQ2MzFjNjA4
N2U3ZWQwHhcNMjYwMzI5MDEwMDQ0WhcNMjYwMzMwMDEwMDQ0WjAzMTEwLwYDVQQD
EyhiNzNhYWZkNjgxZTI4OWNjNGRjMmQxMjhhNGVkODZjMGM2ZDhlNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0I/sp7nloqkDDUqXAb4ZEFzaIWN
vJlBrEk29D9awViYufi7tKSgoFqw/EkJkxA56ieKSDGElGAX0juT9ukO6bNR0Otz
j/zZFn57474FhaV7+HDMxB+9/VOXEat+yZoeHBIUV+AfXvNIRqdrNC3CXiln574Q
w2LnPAMZ+BsBHQhMC+JqsxCjNnvzA0+DC4NIck1u4VFm78kcPDuod2D5oRDpeioc
dc45Uh6R5aJ3xVi48pgA928uN/tNOVivPk2eMqEBRUxhV7w0i9a5mDarPKemE+DW
KzGlCk6sQQWO7kur021FQtylL+YaMQJ4WIgZPU8ZesZfCQwd0IF0TOwn8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLc6r9aB4onMTcLRKKTthsDG2OYVMB8GA1UdIwQY
MBaAFPY4fpDE/lbuG2OUb+TUYxxgh+ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84YjZmY2MtMTRlZi00N2YwLTg4M2Ut
OGViYWEwOTBjZjZlLzEvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84YjZmY2MtMTRlZi00N2YwLTg4M2UtOGViYWEwOTBjZjZl
LzEvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1NPatp2
Z8AoW9E8befTTb1KJTYGB1fofpA2rNSwhuoEXvWTdh1IJoVYJFiKafGQvo85e7Wb
bLh8z+vzvspmeEfC0D22nXPNtqwFClfFqBZbbmvI3Iqja8hk4qL1h18Jc6vonbIp
rIs71a8sS10bWokYqYO6eNfzyWVxyJFYPl+5aI5jUSzFb4KjYElJGw0PrXa2XdxG
iy86rzaYIK/G+ZyWiq3ay8PNwDKnIfP102aqMrV66tHv5/pEgd+3UI2TaAlwtv38
EgVEze5V/OqF/x20PeNgkzqiCbcZrAAqEGkIa+4hV8AtcxJpPyKRsyaPNFCI0y0l
IoNJN67FTXRfVw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:29 2026 by rpki-client