Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File:                     9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier:          jXWTZ6JnNhxW3N2yMIHvQOl0UyYcx11+YmzIi1Bsgog=
Subject key identifier:   6E:F0:3D:1F:F4:EB:FF:04:D8:29:97:31:7C:F4:E4:F1:0A:12:9B:B1
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer:       /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial:       019E303BD4C628FB005C49FFE76216E59730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number:          117B
Signing time:             Sat 16 May 2026 10:01:27 +0000
Manifest this update:     Sat 16 May 2026 10:01:27 +0000
Manifest next update:     Sun 17 May 2026 10:01:27 +0000
Files and hashes:         1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: mirPQf6d4l4u2cEUfFaNT+q6AojaeNf4NpEAzQYGYvg=)
                          2: H6y7FRGe2OSBbFIjaqZT3Ye0FjM.roa (hash: U6dbvSJYipDEAI96TSbJISnUyXjBkTAwoHhgv4g0uO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:d4:c6:28:fb:00:5c:49:ff:e7:62:16:e5:97:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
        Validity
            Not Before: May 16 10:01:27 2026 GMT
            Not After : May 17 10:01:27 2026 GMT
        Subject: CN=6ef03d1ff4ebff04d82997317cf4e4f10a129bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:69:cd:0f:8b:b8:f5:89:44:dd:c8:2e:7a:
                    cb:d5:c0:ce:42:18:03:cf:83:1e:e7:f6:5f:38:7b:
                    1f:18:bc:10:db:16:d0:0e:1f:c2:d5:71:fc:9b:5b:
                    bb:bd:e8:c1:e4:90:fd:86:be:8a:88:d2:a0:b0:b1:
                    17:11:6c:23:2e:44:ab:ea:f4:6a:b9:78:6e:25:bb:
                    0c:cb:23:e2:01:c6:fd:f1:e0:43:66:c9:2e:03:31:
                    83:56:58:9c:91:0e:de:b4:cf:cc:b1:a6:c3:dc:2a:
                    a5:ce:9d:e0:77:87:9a:71:3a:9a:9c:60:b4:e4:65:
                    ce:1b:c3:b1:5d:19:8e:dc:90:a7:95:7b:e3:f8:b6:
                    16:ee:30:01:1a:d1:08:05:6a:76:8e:dd:74:06:2b:
                    21:a2:4e:3b:43:d3:15:ba:0c:40:76:06:7a:c7:0a:
                    9c:20:f1:f1:2d:8b:fd:d4:be:66:14:69:4b:84:1f:
                    c1:b0:d0:6d:f2:aa:bb:02:af:e5:c3:ab:d0:71:fd:
                    c7:69:9e:41:46:23:6a:b0:67:93:b8:5e:94:e1:39:
                    83:5f:94:6e:e5:d7:f9:50:3f:a8:3e:64:68:45:fb:
                    db:e5:8f:cb:76:ca:63:77:a1:30:11:d2:99:3b:69:
                    71:bd:cc:aa:77:49:16:a8:8e:04:c7:c4:2e:48:8f:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F0:3D:1F:F4:EB:FF:04:D8:29:97:31:7C:F4:E4:F1:0A:12:9B:B1
            X509v3 Authority Key Identifier:
                keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:04:7c:57:5e:f3:72:98:be:15:71:2f:33:4f:83:35:15:
         26:e7:aa:eb:3b:b6:a8:78:63:63:b9:3e:81:b3:b0:0e:0a:7c:
         95:a8:6e:dd:52:91:53:eb:a6:76:db:d7:4b:b6:1c:eb:a9:e4:
         21:07:95:c9:31:40:bf:2d:a7:f8:6d:75:ff:5f:43:1f:11:b5:
         4b:0a:cd:e5:4c:0f:b0:3b:6c:08:1a:37:89:c4:8f:21:e1:4f:
         a8:ae:7f:e0:86:7b:8a:91:75:b0:42:3b:a7:3e:3a:5d:65:63:
         6b:52:ba:cb:05:be:0f:67:08:7d:5e:c1:f6:b4:9f:ed:fe:f9:
         9b:fb:5b:f3:9b:25:7c:6e:3c:f7:9c:86:27:d6:8e:8e:84:a4:
         03:b9:00:1c:1d:e7:90:4b:0e:c3:0a:54:5b:27:cf:df:0f:92:
         cc:8b:32:90:01:31:92:e5:f0:58:bb:fa:c5:f9:3b:5f:33:d8:
         ea:17:28:40:40:6b:75:a6:03:b1:d0:f2:07:e6:3b:e1:a1:53:
         94:1f:c9:c8:a0:f9:49:94:97:2e:24:26:ed:25:cf:80:a7:11:
         7d:46:60:3c:23:e4:f1:fa:7f:7d:48:cd:fe:33:81:db:ac:de:
         80:cf:84:40:3b:71:fc:51:1b:65:4d:0a:d3:4c:4a:1d:4c:fa:
         14:4c:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:12 2026 by rpki-client