Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File:                     9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier:          NvGNjynS9z735T0Ifqh4a2IubC5WtngG+20a+GHCQMY=
Subject key identifier:   2F:60:14:4F:7D:25:F4:DE:EF:3A:86:63:AB:F8:65:2D:13:CC:78:4E
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer:       /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial:       019E2F5FE015DEA1777A10502442BF1DB3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number:          1704
Signing time:             Sat 16 May 2026 06:01:12 +0000
Manifest this update:     Sat 16 May 2026 06:01:12 +0000
Manifest next update:     Sun 17 May 2026 06:01:12 +0000
Files and hashes:         1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: w4/C6BWOC2h50qzCBS2xuePW0qUs07f3yHm5aviJ8U4=)
                          2: UEAaPo6VUETHn6B0u4mE40cQPvI.roa (hash: oDl/sgYlJlPoPDa6gI6+975HLzl7ybSw7kcsMPOBkCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:e0:15:de:a1:77:7a:10:50:24:42:bf:1d:b3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
        Validity
            Not Before: May 16 06:01:12 2026 GMT
            Not After : May 17 06:01:12 2026 GMT
        Subject: CN=2f60144f7d25f4deef3a8663abf8652d13cc784e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:53:dd:e9:2b:a4:d0:6b:d2:a2:48:45:2e:
                    78:d3:bc:6c:2a:a9:5c:1c:f0:4d:f0:dc:5a:27:85:
                    9d:89:48:e3:30:a2:3f:d8:04:2d:97:d8:19:43:44:
                    57:3e:99:ea:a6:b0:64:5f:e7:45:14:88:0e:a9:c7:
                    85:3d:30:eb:9e:20:de:c1:99:5d:30:00:21:2e:21:
                    09:04:d4:40:20:84:50:cd:9f:00:37:ee:86:45:45:
                    bb:d5:ae:14:db:aa:e0:20:7b:79:1b:2a:7b:dd:ef:
                    4d:27:8f:1c:6f:e1:c8:5e:a3:a3:ee:3e:29:5c:e6:
                    69:6a:83:2b:b1:17:bf:23:ec:ba:74:dc:b6:0d:e6:
                    41:f5:c3:ed:f8:3c:de:21:b6:2b:3e:a8:8c:cf:57:
                    11:f1:eb:2d:32:48:e9:dc:f7:c5:08:35:f0:ae:0a:
                    b6:10:51:43:42:f5:73:15:cc:00:41:e0:96:dd:a8:
                    f9:28:85:38:6b:be:58:18:0c:b4:8f:47:f4:86:88:
                    9c:25:e0:29:23:82:5c:d4:d9:02:7b:48:ed:4f:0a:
                    ed:5e:7e:f9:b2:17:c9:8c:ea:b7:7a:dd:fe:87:e4:
                    45:7a:cd:16:31:ff:30:2b:71:02:df:86:c0:f4:d0:
                    39:a3:35:04:2e:3b:16:47:9f:0a:83:aa:c5:ba:b3:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:60:14:4F:7D:25:F4:DE:EF:3A:86:63:AB:F8:65:2D:13:CC:78:4E
            X509v3 Authority Key Identifier:
                keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:7e:26:2b:48:a8:3d:5b:8e:4e:3b:eb:2d:5f:36:f6:78:
         5a:6f:83:d9:74:1e:4b:99:53:58:94:0a:3a:d3:e7:62:80:23:
         41:56:92:e7:38:18:28:d6:6c:6c:fd:0c:41:fd:29:3f:a9:2c:
         f8:94:2e:34:a9:78:4e:ec:3b:7e:0e:4a:a1:85:ba:a6:40:87:
         93:29:05:38:51:a8:01:e2:bd:67:2a:1c:78:15:a3:3d:df:c2:
         5f:23:8b:e9:01:ed:97:37:65:3b:db:20:97:1f:2d:be:f4:54:
         bd:d0:ef:73:7a:98:a4:24:86:c3:e2:f8:19:81:ba:48:8c:b8:
         42:87:61:20:63:82:26:2e:5c:87:a2:47:c3:a3:4e:09:e2:8b:
         73:78:dd:63:57:41:ed:36:3c:34:c1:63:cf:65:09:bb:59:85:
         27:6f:d6:c5:9b:d3:d3:e3:51:44:3e:86:a9:a0:de:d5:96:c3:
         c9:34:ba:64:ed:32:c8:9c:5a:58:ce:d7:48:60:33:1a:b9:fe:
         9b:16:bb:90:bd:0e:6c:b8:ff:7b:6b:41:5d:fc:8b:47:9b:f4:
         fb:b5:09:4f:98:93:35:17:b2:b9:34:c8:94:7d:b6:e3:a8:d4:
         cb:3b:fd:b4:09:7e:df:f0:9e:ee:08:19:66:62:1c:28:09:b8:
         3b:b7:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:55 2026 by rpki-client