Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft
File:                     9p-l-dnGtwOCJB6WGgrglnJcD3c.mft (raw, json)
Hash identifier:          FhBo9p/fZMOXOdFscWv8FSqaOCBeP63LJHj8nQWYGDk=
Subject key identifier:   ED:DB:3E:9B:2D:88:17:84:2E:0B:62:15:3E:89:2E:5C:1C:DB:CB:B1
Authority key identifier: F6:9F:A5:F9:D9:C6:B7:03:82:24:1E:96:1A:0A:E0:96:72:5C:0F:77
Certificate issuer:       /CN=f69fa5f9d9c6b70382241e961a0ae096725c0f77
Certificate serial:       019E7D437F02F5391EA690B36D0DA68B8A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p-l-dnGtwOCJB6WGgrglnJcD3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft
Manifest number:          61
Signing time:             Sun 31 May 2026 09:00:35 +0000
Manifest this update:     Sun 31 May 2026 09:00:35 +0000
Manifest next update:     Mon 01 Jun 2026 09:00:35 +0000
Files and hashes:         1: 9p-l-dnGtwOCJB6WGgrglnJcD3c.crl (hash: YXwDStidno/pvHktjanFITOJ2lps4yG2kcxFTnQgfvE=)
                          2: HmlJTSh98j2b4r1IpFlj1CVeIc0.roa (hash: E16zHYKL/NoTKgyVCojIMSFHddr9iDrUl04ERlr6eDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9p-l-dnGtwOCJB6WGgrglnJcD3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7d:43:7f:02:f5:39:1e:a6:90:b3:6d:0d:a6:8b:8a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69fa5f9d9c6b70382241e961a0ae096725c0f77
        Validity
            Not Before: May 31 09:00:35 2026 GMT
            Not After : Jun  1 09:00:35 2026 GMT
        Subject: CN=eddb3e9b2d8817842e0b62153e892e5c1cdbcbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:b7:e3:51:f0:67:cb:0d:a6:e2:91:df:1c:
                    e2:6c:6d:f5:b4:67:57:81:16:f8:ac:12:d4:3a:6f:
                    d5:35:7c:4e:32:80:66:73:a4:72:9a:05:ce:8b:af:
                    9f:c9:bd:2b:b2:d1:51:a3:39:47:20:fc:6c:f1:11:
                    e6:00:b2:55:e3:46:54:5e:05:bb:00:01:c8:ec:ad:
                    a8:4a:2b:32:bc:69:99:7c:89:63:8c:a4:26:2a:79:
                    9a:41:62:e9:48:6c:c3:28:b4:74:2c:dc:41:74:15:
                    a7:fb:d7:dc:bf:6c:2e:ab:b4:9f:54:83:e4:d6:11:
                    2c:fe:c7:0a:c9:66:dd:83:e8:09:ba:e3:61:6a:f4:
                    57:7d:ad:cc:f7:96:e4:cb:51:38:ea:60:77:6d:41:
                    c5:ec:a4:0e:83:57:ff:b4:66:d1:a4:53:a3:f8:3e:
                    3c:bd:56:9a:44:e6:c7:48:71:b4:72:d4:52:39:dc:
                    72:c8:91:eb:f6:5a:e2:0e:cc:5c:39:4e:76:1c:09:
                    f9:cb:46:a9:3b:aa:ae:c3:39:93:4c:2d:17:83:e6:
                    17:9d:24:31:4f:7b:19:1d:06:f4:f5:1f:1f:48:26:
                    95:75:bd:64:a7:4d:a7:c5:a0:a9:82:72:14:87:74:
                    42:a7:f5:ae:e8:6e:b7:28:1c:d0:82:6a:68:13:d3:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DB:3E:9B:2D:88:17:84:2E:0B:62:15:3E:89:2E:5C:1C:DB:CB:B1
            X509v3 Authority Key Identifier:
                keyid:F6:9F:A5:F9:D9:C6:B7:03:82:24:1E:96:1A:0A:E0:96:72:5C:0F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-l-dnGtwOCJB6WGgrglnJcD3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1fb518-c29b-49d7-b264-6a21355cc02e/1/9p-l-dnGtwOCJB6WGgrglnJcD3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:8b:39:5d:60:a8:04:8b:d5:25:43:2a:d4:a4:3d:e3:f8:
         34:91:72:47:c3:b5:98:c2:81:c2:3a:d5:0c:9a:17:7e:8c:76:
         d9:7a:1f:d9:07:17:96:84:97:1e:74:7b:e9:2c:73:79:73:eb:
         22:4e:12:d5:6d:4d:f3:4f:c7:a3:db:4c:e4:a3:f9:94:eb:07:
         f4:33:3b:90:e3:ea:aa:ba:ca:8c:5a:4e:be:ad:99:a2:af:3d:
         36:05:c1:03:49:85:d9:34:df:b8:23:f0:0f:0c:d1:55:07:9b:
         81:f7:72:5b:8d:08:3e:81:84:a3:e5:f9:5c:89:08:f8:f3:cb:
         df:7f:82:6f:87:87:25:4b:c9:d0:97:d5:5e:97:5c:af:60:e3:
         bd:87:98:fa:e9:5a:f8:b3:1e:45:7f:f8:34:b1:70:d8:47:fd:
         23:8e:d9:bb:ad:22:1a:94:b1:72:7c:b2:38:99:30:25:19:8d:
         97:7b:b6:ec:b7:3e:4b:73:f8:3b:6b:57:07:f0:17:fd:5b:ef:
         b3:61:c8:ab:5d:1a:28:3d:a6:bf:78:f7:d9:6c:fb:cd:c6:7a:
         fb:bd:10:d8:6f:30:a5:c9:c3:29:32:25:95:56:a0:4a:b5:6f:
         c7:ee:0d:00:6b:f5:c1:0b:42:67:f4:4d:54:65:39:c5:2a:a5:
         bd:16:8d:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ59Q38C9TkeppCzbQ2mi4ozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWZhNWY5ZDljNmI3MDM4MjI0MWU5NjFhMGFlMDk2NzI1
YzBmNzcwHhcNMjYwNTMxMDkwMDM1WhcNMjYwNjAxMDkwMDM1WjAzMTEwLwYDVQQD
EyhlZGRiM2U5YjJkODgxNzg0MmUwYjYyMTUzZTg5MmU1YzFjZGJjYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A6341HwZ8sNpuKR3xzibG31tGdX
gRb4rBLUOm/VNXxOMoBmc6RymgXOi6+fyb0rstFRozlHIPxs8RHmALJV40ZUXgW7
AAHI7K2oSisyvGmZfIljjKQmKnmaQWLpSGzDKLR0LNxBdBWn+9fcv2wuq7SfVIPk
1hEs/scKyWbdg+gJuuNhavRXfa3M95bky1E46mB3bUHF7KQOg1f/tGbRpFOj+D48
vVaaRObHSHG0ctRSOdxyyJHr9lriDsxcOU52HAn5y0apO6quwzmTTC0Xg+YXnSQx
T3sZHQb09R8fSCaVdb1kp02nxaCpgnIUh3RCp/Wu6G63KBzQgmpoE9NMTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3bPpstiBeELgtiFT6JLlwc28uxMB8GA1UdIwQY
MBaAFPafpfnZxrcDgiQelhoK4JZyXA93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXAtbC1kbkd0d09DSkI2V0dncmdsbkpjRDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZmI1MTgtYzI5Yi00OWQ3LWIyNjQt
NmEyMTM1NWNjMDJlLzEvOXAtbC1kbkd0d09DSkI2V0dncmdsbkpjRDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xZmI1MTgtYzI5Yi00OWQ3LWIyNjQtNmEyMTM1NWNjMDJl
LzEvOXAtbC1kbkd0d09DSkI2V0dncmdsbkpjRDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeiLOV1g
qASL1SVDKtSkPeP4NJFyR8O1mMKBwjrVDJoXfox22Xof2QcXloSXHnR76SxzeXPr
Ik4S1W1N80/Ho9tM5KP5lOsH9DM7kOPqqrrKjFpOvq2Zoq89NgXBA0mF2TTfuCPw
DwzRVQebgfdyW40IPoGEo+X5XIkI+PPL33+Cb4eHJUvJ0JfVXpdcr2DjvYeY+ula
+LMeRX/4NLFw2Ef9I47Zu60iGpSxcnyyOJkwJRmNl3u27Lc+S3P4O2tXB/AX/Vvv
s2HIq10aKD2mv3j32Wz7zcZ6+70Q2G8wpcnDKTIllVagSrVvx+4NAGv1wQtCZ/RN
VGU5xSqlvRaNMA==
-----END CERTIFICATE-----
Generated at Sun May 31 12:53:59 2026 by rpki-client