Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File:                     t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier:          yUHNokEiiJn6kYTnFXc2wXqHUvf1NrwSpOTHWqwdQlE=
Subject key identifier:   34:A7:37:F0:33:B7:73:09:7F:23:BA:6F:7A:54:F1:DE:7A:D1:C2:81
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer:       /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial:       019E2A706426D08132224418609C12F008DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number:          16B0
Signing time:             Fri 15 May 2026 07:01:09 +0000
Manifest this update:     Fri 15 May 2026 07:01:09 +0000
Manifest next update:     Sat 16 May 2026 07:01:09 +0000
Files and hashes:         1: QkD6kvbjOFF159SqIoxtVy6uYtw.roa (hash: moRNSt3cT3MEpll0Dp7Um5vSYqeXw33T13RgwrHAltU=)
                          2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: lm0ALK3cNZozZOwN3kz6kK+OZ7zguEwqIfGAmnztbiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:64:26:d0:81:32:22:44:18:60:9c:12:f0:08:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
        Validity
            Not Before: May 15 07:01:09 2026 GMT
            Not After : May 16 07:01:09 2026 GMT
        Subject: CN=34a737f033b773097f23ba6f7a54f1de7ad1c281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:90:8c:d3:dc:5e:5f:69:d5:64:1e:bc:56:
                    e1:f2:ed:c6:ae:ab:28:e5:79:35:d0:59:a8:dd:d0:
                    f8:27:b1:b8:70:68:37:fd:51:44:dd:8a:82:6e:7b:
                    88:17:24:7a:23:0c:35:fe:e5:8e:8c:6b:2e:15:be:
                    6a:6c:a8:47:82:5e:ac:b6:89:38:47:fa:2c:7e:b7:
                    ed:d5:2b:dd:3b:9c:93:e3:cf:b9:3d:ab:06:2f:1d:
                    ae:c0:87:9f:e5:26:7f:01:d2:b1:3d:e3:ab:5e:44:
                    71:3b:f0:c9:38:7e:e6:58:53:a8:af:4b:b4:2b:96:
                    aa:85:3f:f4:ce:5e:aa:70:00:7f:fc:17:cd:95:c1:
                    b5:a5:01:2c:01:d8:ee:f7:f7:e3:e1:66:6e:01:a4:
                    c5:5e:8b:22:0d:04:0e:6a:3c:93:bd:8f:4a:35:f4:
                    06:a9:7b:70:ea:9a:af:b9:f2:d8:35:86:35:e1:fa:
                    71:56:f3:d4:cb:82:57:ac:6a:7a:04:e1:ef:81:54:
                    f6:ec:3b:41:37:fb:52:3b:90:61:cf:78:c7:9c:af:
                    ba:7d:60:a9:5a:a6:5f:76:9d:20:e9:4e:62:88:e8:
                    ff:97:a4:8c:65:16:c6:29:40:c4:13:44:00:b0:0a:
                    7f:a0:3e:7d:19:b0:16:d4:b8:67:59:e4:2e:11:64:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A7:37:F0:33:B7:73:09:7F:23:BA:6F:7A:54:F1:DE:7A:D1:C2:81
            X509v3 Authority Key Identifier:
                keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:91:44:88:f8:b7:91:e9:94:9d:61:23:46:3d:b9:4c:77:
         37:8f:8e:10:7a:65:44:a6:92:71:57:0e:46:f5:4d:0a:94:b7:
         58:cf:61:f4:d8:8e:ed:7f:32:9e:c5:e5:24:61:54:9a:e3:89:
         1e:18:df:f2:87:4b:66:23:fe:a9:a4:9f:62:e7:36:e8:79:0f:
         ba:ec:7f:03:90:c1:97:4e:f7:f6:e7:71:fb:6c:4d:37:bc:2a:
         9f:0b:07:4f:37:91:a1:87:3e:63:b4:f4:8d:ae:2c:3d:ab:4d:
         15:b0:58:f4:0c:47:a5:0e:d6:1e:0c:85:be:12:da:38:36:51:
         69:64:e5:ce:f4:48:7f:eb:17:a2:f8:66:a6:1f:10:1d:ff:27:
         31:17:1e:37:8e:a0:56:8f:28:84:25:d7:07:39:02:4b:05:f8:
         80:20:88:2e:0a:61:85:eb:6d:8b:e9:8a:ad:33:7c:6a:ec:0d:
         dc:94:df:cc:5e:1d:ef:31:5f:16:c8:f1:9c:f2:5c:6d:6a:cd:
         7d:31:a6:6c:a8:64:dd:95:9b:27:7f:7c:24:54:98:e6:c6:ad:
         ec:e7:ff:89:1a:7d:f8:b4:33:80:82:d8:dd:ac:3c:89:ea:1f:
         ab:fd:fb:c7:35:9d:81:83:42:ce:72:52:cc:8c:1c:db:0e:eb:
         d9:b9:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:17:17 2026 by rpki-client