Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File:                     r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier:          BrrxjTvjYeLUmFqR7lZdG75Ugd8kx1O22DxN1ysSoKo=
Subject key identifier:   31:54:A9:F0:63:EC:39:60:7B:A3:35:7D:B2:9C:48:E1:65:34:07:99
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer:       /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial:       019E31F3AB564F53A5F58D53F723F35E01FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number:          0ED7
Signing time:             Sat 16 May 2026 18:01:53 +0000
Manifest this update:     Sat 16 May 2026 18:01:53 +0000
Manifest next update:     Sun 17 May 2026 18:01:53 +0000
Files and hashes:         1: NYQTyqXhO5SfIKalilF-9jPbRJo.roa (hash: 5lrctU6hrWDAzuX+vKa0ZLHPNzNKbXOgcE47QemStpE=)
                          2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: MZ39Vp1IiNyWidzjHM0oS6wd9UUgz5bK6SK5BfmDhQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:ab:56:4f:53:a5:f5:8d:53:f7:23:f3:5e:01:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
        Validity
            Not Before: May 16 18:01:53 2026 GMT
            Not After : May 17 18:01:53 2026 GMT
        Subject: CN=3154a9f063ec39607ba3357db29c48e165340799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:a4:d0:85:c3:ae:94:4e:aa:88:04:d6:dc:
                    5e:c3:fd:ed:c8:f9:74:57:27:dd:36:c3:6e:cf:48:
                    54:7b:38:8f:93:d6:b2:fe:31:82:d4:69:07:43:0e:
                    5c:60:38:a8:b7:8e:7b:70:2e:ec:52:81:8a:51:6c:
                    91:1c:f7:16:1b:16:b0:35:fa:ab:32:da:7b:5e:22:
                    aa:10:fd:2f:8a:fc:03:2a:fd:5e:f7:0e:4d:c9:48:
                    ab:5f:70:89:f5:be:57:6a:90:dd:cb:88:2f:44:2b:
                    82:5c:3e:03:32:3f:64:2a:23:85:21:f5:26:b6:a4:
                    1d:de:de:9e:1b:3e:fa:5d:ec:a6:d3:22:16:2c:73:
                    bb:45:01:7a:82:15:64:9f:aa:2d:21:91:cc:0e:06:
                    2c:84:92:0b:07:e3:94:27:4a:d6:14:ef:cc:a4:0b:
                    a7:4f:68:2e:97:4c:94:78:4d:24:70:a8:eb:78:06:
                    49:a3:54:78:ff:74:38:12:23:1a:3b:42:a6:0f:94:
                    47:ed:97:86:65:90:f7:48:e7:36:d7:39:b7:b5:59:
                    7e:a7:57:30:72:22:4f:6f:ed:b3:e8:e8:72:fa:97:
                    4f:76:2e:71:9c:77:6b:8b:e9:3b:7c:b6:59:81:1a:
                    84:b7:4e:4c:12:8e:30:45:38:85:5e:19:55:4a:8f:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:54:A9:F0:63:EC:39:60:7B:A3:35:7D:B2:9C:48:E1:65:34:07:99
            X509v3 Authority Key Identifier:
                keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:68:9f:29:71:f8:cd:95:81:58:6c:e3:d2:e0:f3:fa:b7:9f:
         e7:2a:bb:fe:a7:23:d0:9b:43:fc:03:cc:3b:75:7d:aa:98:3b:
         ea:06:76:5b:19:ed:27:8d:ab:32:7c:87:f1:45:b7:4e:7f:7e:
         d3:4e:14:f3:d2:69:59:f7:1a:ff:ae:bd:89:b6:78:f6:e0:3a:
         51:fd:b2:63:c2:ec:ae:76:5a:2d:b6:52:e1:74:f9:90:c2:3e:
         2a:0e:68:eb:6d:8a:7f:47:8f:7f:8a:17:2a:17:68:7e:92:23:
         7c:60:99:80:03:46:93:bb:dc:fc:01:3f:2f:8b:b0:53:1e:41:
         f7:0b:8a:88:3a:9b:f0:30:5f:d2:8b:6f:7c:87:8b:1e:e1:aa:
         d7:71:b3:cd:74:f3:86:d2:5a:56:83:f9:1b:b3:76:94:5b:27:
         ad:25:e4:dd:81:1a:11:90:b2:b0:89:9e:9d:7c:f9:e3:3a:5a:
         bc:6b:27:3f:b8:17:b1:7a:30:7e:c8:d7:a8:8c:b7:34:cc:af:
         9d:b4:88:71:29:7f:e5:8a:d9:3e:3c:1d:90:05:3a:a8:0a:54:
         ec:43:44:b1:13:6f:4b:2d:b5:6a:86:d0:48:00:be:fe:d5:0d:
         0e:0f:94:3b:d3:f6:02:09:96:99:6b:ae:62:21:26:42:6d:69:
         00:1c:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:54 2026 by rpki-client