Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
File:                     9mKtW4G4BxPe0-__RCmfzXZfKrE.mft (raw, json)
Hash identifier:          OJukR619vttYB8ghpkhQLWhzMY1wV+dtZg0V6Xx3HII=
Subject key identifier:   D2:F0:F7:C2:F0:CC:FA:B7:AA:83:68:B1:0F:6D:C8:7B:24:88:56:51
Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
Certificate issuer:       /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Certificate serial:       019E295E0DD7E81844987320A263CA5E072D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
Manifest number:          027E
Signing time:             Fri 15 May 2026 02:01:30 +0000
Manifest this update:     Fri 15 May 2026 02:01:30 +0000
Manifest next update:     Sat 16 May 2026 02:01:30 +0000
Files and hashes:         1: 9mKtW4G4BxPe0-__RCmfzXZfKrE.crl (hash: g9HK5AoDTgEqlXn16mpmWbWZsAhH+7rIY8ZuWwmXu3A=)
                          2: jO3T1-EOvm7phVXV6edT90rIeh0.asa (hash: 6/Ul++o9f4AGDv6T10uaHtnXB8UK/eOuxrUr++EWOSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5e:0d:d7:e8:18:44:98:73:20:a2:63:ca:5e:07:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
        Validity
            Not Before: May 15 02:01:30 2026 GMT
            Not After : May 16 02:01:30 2026 GMT
        Subject: CN=d2f0f7c2f0ccfab7aa8368b10f6dc87b24885651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:67:1e:a8:0f:21:7a:e4:14:be:5f:c5:c8:
                    eb:11:6f:97:00:b6:67:4b:59:97:81:05:ef:d4:55:
                    03:7e:dc:f9:88:94:8c:90:12:5e:26:31:ba:dd:a4:
                    c2:c6:11:ed:93:54:6f:41:c5:e2:c8:b5:a0:c8:3a:
                    fd:8a:57:a7:eb:86:ff:90:dc:be:3a:dd:b5:86:3d:
                    43:2f:cd:32:3e:ba:2c:1e:38:bd:3d:5b:6e:61:67:
                    5e:c4:93:fe:ec:b9:35:a8:ed:9d:42:ff:a4:8b:d6:
                    30:6c:d5:38:c4:d6:88:56:c0:59:38:e1:ee:a7:4c:
                    34:86:e0:d0:70:0b:2c:19:53:9a:3d:57:bd:f5:6d:
                    fa:a5:7c:d3:04:33:58:a5:ef:37:ae:92:d5:60:44:
                    ad:5c:b6:3d:24:dd:d5:f3:44:fb:5d:af:96:b5:9f:
                    b8:11:fb:32:c3:b6:7c:7b:c2:3f:41:40:a0:d5:5e:
                    b2:f3:c2:b0:5d:9a:e2:15:f6:99:2e:cf:db:c9:24:
                    6e:15:f4:e1:e4:79:16:47:e5:0a:31:a7:ec:5f:9b:
                    80:40:fc:70:32:57:90:51:ee:58:c0:e3:6b:8a:6a:
                    ea:53:17:73:33:b1:ef:a8:89:ad:3d:66:21:7a:5e:
                    7b:19:ba:ba:5b:2c:91:bf:5c:f4:c4:ee:bf:91:3e:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F0:F7:C2:F0:CC:FA:B7:AA:83:68:B1:0F:6D:C8:7B:24:88:56:51
            X509v3 Authority Key Identifier:
                keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2d:ed:af:e1:4e:47:7f:a9:15:d5:d3:1d:56:7b:fd:ed:7c:
         41:e7:2e:0a:67:f0:e5:59:f6:26:83:6b:c3:d3:c0:3b:59:a9:
         a5:e3:6d:61:6a:4f:9b:eb:ef:cf:f3:f3:3e:16:2f:d3:80:92:
         65:39:c6:da:b2:f9:22:c6:a2:6b:bd:2f:26:70:ad:86:8f:40:
         85:d0:dd:57:dc:e0:5b:db:25:1d:e7:f8:1e:cd:d8:8d:f8:c5:
         76:8f:1c:00:a6:da:11:2b:6e:d1:28:db:ce:24:12:da:7e:5b:
         10:d4:99:6c:b2:6f:69:ea:ac:af:d7:ce:67:fb:7b:53:0c:a1:
         e8:a6:c3:13:2f:0e:ca:c7:ae:31:a5:01:11:eb:04:86:14:70:
         1d:7f:93:2e:8d:94:74:04:72:5e:43:c1:52:4c:58:67:87:93:
         3f:d0:f3:6d:b3:cd:10:1b:91:69:19:1c:e3:6d:3a:11:61:03:
         4b:23:df:77:0e:0e:be:ce:6a:7c:17:9a:d4:d5:68:d1:e5:8a:
         9b:14:04:64:8d:86:88:d9:84:ae:7d:a1:eb:b9:44:0e:c1:00:
         20:65:2c:8a:a4:49:84:a8:04:91:d0:7a:38:62:3b:5b:ed:e9:
         10:05:99:5e:fa:78:92:43:b6:31:40:ed:48:86:72:1e:cd:75:
         e8:84:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:15 2026 by rpki-client