Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File:                     9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier:          eaVvT4ZO0FrcvxcsVTdELJezLeOZjIPrIrryFTw544c=
Subject key identifier:   28:79:C8:5A:24:EF:8F:8C:21:58:12:56:FA:F4:F3:24:11:B7:DA:9B
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer:       /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial:       019E30E0927CAA195FB2C80A25F1B41F83BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number:          1916
Signing time:             Sat 16 May 2026 13:01:24 +0000
Manifest this update:     Sat 16 May 2026 13:01:24 +0000
Manifest next update:     Sun 17 May 2026 13:01:24 +0000
Files and hashes:         1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: xfyIqA6yTrjHsLd8PB10EAfk1NHFUx5kQZu/ZPMw028=)
                          2: F_LtpihnOZSFHJv85nIVJ4V102M.roa (hash: 8yvnxuLRYXxGLDUJznrlW7WBOZGiJ5tUpgMx642UXWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:92:7c:aa:19:5f:b2:c8:0a:25:f1:b4:1f:83:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
        Validity
            Not Before: May 16 13:01:24 2026 GMT
            Not After : May 17 13:01:24 2026 GMT
        Subject: CN=2879c85a24ef8f8c21581256faf4f32411b7da9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:61:e9:63:61:ab:1e:e0:68:1b:7e:74:bc:05:
                    93:0d:0c:41:19:0f:0e:48:0b:34:a0:bf:98:94:6d:
                    a9:04:40:ff:c3:51:1c:fc:a3:15:2e:0c:c4:07:64:
                    3b:d7:94:71:8e:47:f4:3a:80:05:8a:cf:d9:32:ca:
                    ee:17:29:f8:43:01:8b:db:6c:c5:f5:22:13:b0:4f:
                    ad:be:0b:05:e7:02:98:fc:d9:74:ec:a5:d7:4d:73:
                    9d:cd:41:a0:88:56:92:d1:ed:1f:69:8b:3f:00:7e:
                    82:80:db:df:b2:50:c0:7b:17:be:c9:c3:12:63:62:
                    fc:9f:7e:70:b3:c5:0e:e2:c8:9b:33:62:97:56:71:
                    92:dd:fa:6a:f9:1e:80:dc:a6:7e:9f:c4:6d:d1:10:
                    87:02:8f:5c:58:d9:47:c2:fe:bc:7d:38:35:e9:fd:
                    3d:ec:19:fc:81:23:82:70:8c:5c:83:8f:9e:85:40:
                    73:4e:49:eb:31:66:0b:bd:24:97:61:3b:95:c8:59:
                    69:24:6d:f1:cb:b9:a7:9f:b0:b9:a7:81:f5:5c:aa:
                    39:48:ca:1a:ee:7e:1e:de:e1:a1:75:1b:34:54:58:
                    d7:02:b3:d9:c3:63:b2:c3:95:2e:ef:e5:53:0f:bb:
                    4f:77:81:c7:6c:1f:96:7a:83:3e:2c:5c:3f:a4:25:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:79:C8:5A:24:EF:8F:8C:21:58:12:56:FA:F4:F3:24:11:B7:DA:9B
            X509v3 Authority Key Identifier:
                keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:23:75:91:9f:51:e8:bf:03:70:ae:ae:7c:d7:b1:94:d2:21:
         c9:1d:e3:46:06:60:7a:85:80:4e:0c:88:35:33:49:da:b0:f8:
         41:16:bc:ae:98:04:24:fa:d2:1b:cf:8a:c5:c3:30:ef:1e:49:
         69:f2:a7:82:b9:f0:a4:2d:7c:e7:bc:99:35:bc:f0:49:65:ee:
         c8:f2:2c:b8:d2:74:8f:df:15:a9:c4:76:a3:b3:60:5a:e1:9d:
         b7:8e:d7:b6:63:e4:74:82:ee:f4:b7:b7:cf:6a:1f:b0:c7:be:
         16:20:8e:19:f0:fd:8c:fb:84:3c:bc:af:4d:9d:76:16:3a:1c:
         2b:79:5b:56:19:4a:fc:f8:01:8c:86:07:3b:82:41:a1:b5:64:
         9e:b9:71:d3:49:61:91:09:7e:f9:6d:7a:3b:a8:dd:a7:97:80:
         07:1a:5a:fb:25:1f:db:97:93:c3:4e:7f:b4:c0:6c:c8:c1:b7:
         9b:39:bd:b0:df:47:db:f9:de:09:04:8a:c6:4b:ae:70:be:6a:
         72:1b:df:b0:4c:ee:b5:3a:71:32:a7:ea:e5:2b:78:b7:9e:a5:
         f3:d7:2e:68:c8:7d:4a:ae:48:73:5d:3a:ee:19:52:3a:16:cd:
         88:16:7a:7b:7e:dd:f9:f8:73:04:9b:9c:cd:33:64:e8:46:84:
         e3:48:9c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:00 2026 by rpki-client