Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File:                     9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier:          TJVEcEkXw4TuTUkdVJNaaPRtnG4Cz2mWPxCDatrzK0I=
Subject key identifier:   E1:AE:5C:1A:60:EC:F8:DE:36:BD:E2:75:6A:9C:F3:76:37:EB:60:7F
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer:       /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial:       019E30721D1596F85CD4713499F44DC87441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number:          102B
Signing time:             Sat 16 May 2026 11:00:45 +0000
Manifest this update:     Sat 16 May 2026 11:00:45 +0000
Manifest next update:     Sun 17 May 2026 11:00:45 +0000
Files and hashes:         1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: XZY7FAClgLm/CeiUxu5AS57gPmGlEN1GEPv9Bq8LdlM=)
                          2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:1d:15:96:f8:5c:d4:71:34:99:f4:4d:c8:74:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
        Validity
            Not Before: May 16 11:00:45 2026 GMT
            Not After : May 17 11:00:45 2026 GMT
        Subject: CN=e1ae5c1a60ecf8de36bde2756a9cf37637eb607f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:46:b6:10:eb:03:34:f2:10:5c:3e:9e:b1:
                    72:1a:57:74:c3:18:83:a6:ef:73:a7:4d:00:ec:64:
                    bf:fa:3f:f9:ab:6e:1f:57:a1:71:03:99:51:50:5c:
                    a6:37:a0:26:7b:81:61:e5:20:21:30:ae:a3:90:71:
                    40:40:85:67:24:3a:fb:49:b5:30:51:82:88:10:a1:
                    b7:12:65:58:7b:05:b7:84:5a:80:62:b9:6a:57:7f:
                    d5:0b:7e:5a:a5:9d:af:23:49:3d:cd:d0:af:f8:20:
                    a5:da:63:e8:75:b9:0e:7e:55:70:14:10:33:15:52:
                    07:60:b3:e9:a8:31:51:2d:8d:87:57:47:e0:66:93:
                    6c:c5:0e:8e:53:85:41:07:33:ff:5a:a4:91:27:10:
                    70:1a:c5:59:20:21:c2:a3:cf:d6:68:09:93:29:df:
                    ea:f0:7b:9d:e4:3f:4c:82:c5:2f:c0:64:41:2e:de:
                    c2:50:04:6d:fc:cb:29:d6:82:65:a0:54:cd:01:ab:
                    fe:7d:49:0e:d7:0c:8e:9c:76:ad:de:5b:77:a5:f8:
                    4a:8d:4e:a5:b1:e5:b1:99:9e:a4:c3:af:60:6b:0a:
                    23:31:ca:45:ac:d2:2c:a1:31:20:05:ec:49:75:98:
                    55:4d:7f:fe:45:ce:70:a8:52:92:1f:37:3f:a0:2f:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AE:5C:1A:60:EC:F8:DE:36:BD:E2:75:6A:9C:F3:76:37:EB:60:7F
            X509v3 Authority Key Identifier:
                keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:f9:8c:09:5c:2a:7c:ae:2f:70:b1:a0:19:63:2b:ca:65:
         ad:e5:b1:28:a0:78:9c:03:68:0c:0b:48:80:20:ec:87:9f:b2:
         ad:3c:42:76:75:b2:19:64:41:11:bc:ca:2f:db:73:b1:4f:df:
         be:f1:95:d9:e1:54:b5:dd:3f:9f:ed:03:5f:c0:1a:17:1d:e3:
         87:50:8e:fb:aa:58:af:9c:0f:dd:b4:36:0a:f8:61:93:1f:71:
         f1:c2:40:1e:14:7f:1f:7a:b3:df:45:57:6c:60:30:e4:9e:d9:
         05:03:9f:48:cc:b5:be:4d:c9:76:c4:c4:3f:e4:87:cf:75:ef:
         dc:31:d1:e9:6e:0e:af:68:29:94:37:bf:71:1b:a3:9e:71:47:
         81:b0:a4:89:18:75:64:03:1d:09:38:52:00:b6:44:21:2d:01:
         37:4d:bd:eb:5c:37:86:3e:69:5a:92:e3:f7:d7:87:81:e5:36:
         34:9b:85:5f:3c:37:89:2a:b7:91:b2:c7:fe:8f:7c:47:3a:d8:
         4a:a2:f9:62:e4:66:14:16:79:7d:db:43:da:76:51:5d:99:21:
         bb:99:2a:dc:4e:87:5f:5b:a0:09:11:4f:c3:c2:31:90:aa:af:
         77:9b:2b:af:56:58:b3:1c:59:17:6c:e0:e5:86:d2:3d:a7:6b:
         82:e0:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:50 2026 by rpki-client