Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File:                     9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier:          LHJzlFBeoG6PpV8TfOqoi4VRn7M9RKVFZdzbvFg9ybk=
Subject key identifier:   F9:7A:3C:61:0F:5C:63:78:0F:38:F1:60:3F:FC:25:1E:FD:CD:B7:A0
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer:       /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial:       019E30A9A6A4486DD4B7FFFC555B3F76356B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number:          1654
Signing time:             Sat 16 May 2026 12:01:25 +0000
Manifest this update:     Sat 16 May 2026 12:01:25 +0000
Manifest next update:     Sun 17 May 2026 12:01:25 +0000
Files and hashes:         1: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: T8vGQNFQK98wou+vK0uzm68GJtKJiQrK9EZsXdX9rRk=)
                          2: epgbRZ451e-4FNMtDUxjsoEsQts.roa (hash: 1bTVs1WZkQ0C5Jeug5kRDuRS7N5Tu6N+va1M7r7izGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:a6:a4:48:6d:d4:b7:ff:fc:55:5b:3f:76:35:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
        Validity
            Not Before: May 16 12:01:25 2026 GMT
            Not After : May 17 12:01:25 2026 GMT
        Subject: CN=f97a3c610f5c63780f38f1603ffc251efdcdb7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fd:41:28:e1:bf:03:79:26:b6:15:94:ad:43:
                    e8:50:30:06:96:fb:16:9a:db:1a:43:36:44:b2:6f:
                    62:b8:49:6a:a9:55:80:ed:3a:b7:fe:34:34:e2:92:
                    b9:5a:29:a7:a7:8c:ac:02:39:4e:1c:64:c4:6b:25:
                    90:95:f6:b5:65:a9:3a:0b:29:0d:2e:33:d0:cc:01:
                    46:21:b2:4c:92:20:b1:08:4f:2b:49:11:be:3c:49:
                    d7:50:9a:0b:47:04:69:48:4f:15:bd:84:f6:2e:12:
                    de:60:03:03:d8:90:48:6d:f9:84:35:08:b6:ea:b8:
                    c4:73:11:47:63:e8:73:0f:fa:82:d3:d5:96:74:90:
                    17:45:da:0a:37:98:2d:aa:c7:f2:ad:b7:fb:44:f0:
                    c9:9d:db:30:7f:7d:7f:23:66:59:fa:51:9d:19:3a:
                    9a:ef:e6:59:72:85:33:b8:90:73:6a:9c:90:83:47:
                    f5:fc:f2:a8:61:97:55:37:c6:59:b7:22:6f:70:ba:
                    f2:74:92:b3:fd:eb:90:a5:9f:97:cb:ae:2b:81:82:
                    60:1f:75:fa:24:30:0e:0b:5e:2e:2e:c1:09:cb:a3:
                    17:37:45:e9:cd:90:4a:b2:43:5e:4c:34:c6:53:4f:
                    84:1b:72:13:60:0d:8c:09:0a:62:e6:77:c9:54:f8:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:3C:61:0F:5C:63:78:0F:38:F1:60:3F:FC:25:1E:FD:CD:B7:A0
            X509v3 Authority Key Identifier:
                keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:6a:bf:47:fa:b0:21:dd:d1:25:32:06:83:e3:66:fe:ef:
         85:3e:66:95:6e:68:d2:f8:59:5e:e2:38:7b:90:d6:bf:49:99:
         0f:7e:d5:c9:ae:a3:8a:b8:1b:ef:b4:4d:b6:61:d2:5b:fb:80:
         8a:55:e8:93:fa:6e:c9:eb:1e:b1:f0:d4:c7:5d:fe:4c:3b:6d:
         80:3a:32:cc:81:3d:6f:41:ac:15:71:53:ce:db:d0:90:07:23:
         70:8f:55:7a:ab:98:91:04:03:cc:af:a5:14:54:40:28:f3:f0:
         f5:dd:02:3c:ea:b2:79:e3:80:5c:38:08:17:fa:aa:ac:e3:96:
         d2:0b:a2:7b:9d:06:82:97:fa:8b:f8:58:75:20:ab:16:32:f1:
         7b:9b:be:43:22:52:13:df:71:46:96:c4:5e:0f:3b:43:7f:68:
         01:58:3e:01:3d:10:63:fd:77:a4:c2:3d:f4:64:a6:d2:00:3f:
         16:39:7b:36:94:02:48:06:cc:82:a1:6a:63:67:e9:3d:ed:51:
         d5:39:ed:6d:7e:05:48:3e:ee:dc:78:90:21:94:aa:a1:e9:bc:
         56:df:b4:70:60:3c:65:ec:11:79:77:ed:f4:f2:c5:d2:3c:2c:
         20:16:2d:3b:a0:7c:e6:7e:cf:02:05:cf:76:26:a9:a9:f4:f2:
         51:a1:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:08 2026 by rpki-client