Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
File:                     9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json)
Hash identifier:          2atTGSM29nKEslp6vRzyo4FkwRNlYQ6GgvgGkzJ2fPY=
Subject key identifier:   CD:36:1A:D7:00:0C:64:B1:85:EE:09:2A:E0:7E:4E:7F:BD:8F:6F:B0
Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE
Certificate issuer:       /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
Certificate serial:       019E2F973E2AF7259C542E8570FD911F3104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
Manifest number:          0A16
Signing time:             Sat 16 May 2026 07:01:41 +0000
Manifest this update:     Sat 16 May 2026 07:01:41 +0000
Manifest next update:     Sun 17 May 2026 07:01:41 +0000
Files and hashes:         1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: 0e0dfd17pGTC/YkfLjRXbIqTmIOkCW9eYylWokz3SPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:3e:2a:f7:25:9c:54:2e:85:70:fd:91:1f:31:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
        Validity
            Not Before: May 16 07:01:41 2026 GMT
            Not After : May 17 07:01:41 2026 GMT
        Subject: CN=cd361ad7000c64b185ee092ae07e4e7fbd8f6fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:96:cb:21:81:28:8c:d2:72:38:cb:a2:a8:
                    4c:01:09:94:90:c7:60:78:de:72:cc:bf:e1:c8:00:
                    c4:02:07:19:51:bf:cf:3b:07:5b:3f:b0:0e:e4:65:
                    a5:7d:ba:e9:8d:d7:bb:95:0f:44:d6:f8:96:7e:23:
                    87:49:98:68:ce:a2:4a:4b:a1:91:74:85:e9:70:5a:
                    54:67:11:63:37:5d:92:77:a8:d8:f5:96:d7:69:52:
                    93:5a:b4:8a:3d:c3:82:fb:64:07:93:9a:d3:8d:63:
                    de:e3:13:52:f8:d8:04:81:6a:e3:0c:c9:5e:61:b8:
                    8c:d9:5a:1f:c2:45:69:ae:a5:4d:cc:a6:20:37:36:
                    da:ee:79:a3:b2:56:dc:65:ee:ca:09:71:19:16:28:
                    db:1b:68:0c:b9:72:cc:13:07:a8:ea:18:be:85:7c:
                    76:f2:ef:36:d6:fe:39:28:d9:9e:95:ed:61:c1:09:
                    02:31:e5:39:fd:92:3c:61:76:17:fe:e8:37:36:a2:
                    0e:48:e9:91:f1:9b:d3:df:ce:68:2d:5f:e4:4a:30:
                    0a:76:dc:97:6d:b9:25:f6:81:f4:24:c0:22:da:4c:
                    bc:68:cb:69:e5:2c:d0:7a:53:6c:ae:f9:7e:cb:76:
                    46:bf:d7:92:3c:1b:0d:39:c8:33:d0:8d:ff:14:b4:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:36:1A:D7:00:0C:64:B1:85:EE:09:2A:E0:7E:4E:7F:BD:8F:6F:B0
            X509v3 Authority Key Identifier:
                keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7e:7d:0b:ce:e8:b6:eb:6a:f5:6d:7b:eb:9e:0c:aa:ac:a7:
         bc:12:06:d5:29:83:54:9a:99:9d:23:92:8b:15:a9:38:cc:e1:
         01:24:ce:48:b7:03:c5:83:f6:d2:d4:2c:a5:fa:45:62:f7:d9:
         be:2c:6b:b8:69:02:ee:3f:2d:3e:bd:66:e5:84:d8:6d:f0:54:
         a4:8e:02:7a:9b:91:f1:bb:e8:b6:ec:8c:d0:01:a3:d1:69:c8:
         c6:dc:3a:41:ba:cc:9f:5f:be:00:7b:43:3f:0c:8d:ad:e7:f4:
         bc:cd:58:a3:4a:b5:16:5f:31:88:5b:5f:21:b0:fa:64:e7:c2:
         91:70:6c:8c:ff:7a:87:f4:28:b2:67:09:7f:1b:80:a7:34:b1:
         d6:a3:c0:89:56:c4:f0:94:bf:f3:53:a4:a1:63:7d:ca:30:21:
         60:dc:49:73:12:f4:b2:97:2f:9d:78:04:a4:30:b7:72:4f:c5:
         41:5e:6b:7a:57:73:c4:f6:83:2e:dd:d7:bb:18:e6:4b:88:10:
         51:ac:f1:99:03:e0:80:27:86:79:b3:cc:a1:4a:aa:91:f5:55:
         96:03:27:8d:d7:56:84:5e:59:1a:5f:18:55:ad:c2:0c:59:13:
         3e:89:74:55:7d:de:46:48:24:a2:0b:85:15:98:53:ac:e1:9f:
         f5:bc:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:37 2026 by rpki-client