Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
File:                     9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft (raw, json)
Hash identifier:          JfhXqxLdOg39QOnPR/tk7zB0XfXzbScjCtq8JV6Ssnw=
Subject key identifier:   04:FA:04:FD:01:5D:E3:50:C6:4B:D3:9D:11:0A:6B:DE:3A:D4:44:FC
Authority key identifier: F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
Certificate issuer:       /CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Certificate serial:       019E3117915365CBD42F347AAD0D4F7F21AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
Manifest number:          13BC
Signing time:             Sat 16 May 2026 14:01:28 +0000
Manifest this update:     Sat 16 May 2026 14:01:28 +0000
Manifest next update:     Sun 17 May 2026 14:01:28 +0000
Files and hashes:         1: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl (hash: dSpOU3C7DqCYRLtoG7kcr0r/cRIIq3zJVZdJLTIlNdw=)
                          2: Gppiqe66tYvTY_bvhtdffeBDXfU.roa (hash: 1bDkhYgVlINVvrOvoqRYuV0vUhahgYtSIbQpuqAq/WE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:91:53:65:cb:d4:2f:34:7a:ad:0d:4f:7f:21:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
        Validity
            Not Before: May 16 14:01:28 2026 GMT
            Not After : May 17 14:01:28 2026 GMT
        Subject: CN=04fa04fd015de350c64bd39d110a6bde3ad444fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:e0:f8:82:e7:b4:43:be:cc:b9:ba:32:e9:
                    0b:1a:f9:07:17:c8:d9:ba:45:4a:c2:05:8d:e8:af:
                    a3:71:78:31:95:50:95:b6:9a:8a:5c:74:74:19:0c:
                    ed:b6:1e:41:7d:46:95:c8:59:17:90:5a:2a:a9:87:
                    70:a9:96:e6:59:0c:55:88:c1:b1:f6:72:4f:a8:65:
                    dc:ed:3b:90:05:90:72:71:4c:86:05:07:4d:1a:aa:
                    77:fc:29:e5:f4:8b:94:06:a2:11:63:fb:89:63:23:
                    b9:d7:4b:03:a7:6c:00:ec:48:61:93:a6:90:0f:70:
                    7a:b6:d0:4e:4f:e9:85:cc:8a:06:f8:82:e0:71:0d:
                    1c:3a:46:c1:58:38:d0:c1:25:47:93:5a:a2:37:e8:
                    32:ae:d0:97:b7:99:56:15:17:11:ba:5a:85:82:fc:
                    b0:91:01:eb:07:a9:ac:ca:c3:07:a9:f8:1e:fc:4d:
                    2c:41:96:9f:bf:3e:4b:6a:22:dc:e2:a5:a7:6b:da:
                    37:29:66:d9:ca:36:93:f7:b5:6d:35:34:67:3b:6d:
                    d7:bb:f9:71:43:55:63:8b:ed:99:7e:2b:3e:75:01:
                    96:19:a1:d2:7e:b7:e8:50:a7:e8:c7:70:d2:f2:44:
                    da:08:d6:55:dc:86:2b:6f:8c:35:cb:68:ef:de:96:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FA:04:FD:01:5D:E3:50:C6:4B:D3:9D:11:0A:6B:DE:3A:D4:44:FC
            X509v3 Authority Key Identifier:
                keyid:F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6e:cd:6e:f7:b6:6f:72:34:53:b2:ca:c6:ef:ac:40:00:dc:
         9a:b9:d7:fd:43:8e:59:e7:0c:0e:b2:c2:e9:c8:cd:e9:32:90:
         c2:87:67:87:18:b5:41:35:9f:63:b1:fc:0e:f4:56:10:f5:eb:
         a1:38:6e:4b:e3:31:fb:3a:53:15:37:7b:50:40:eb:ea:9a:4b:
         86:24:c5:a2:0c:01:49:d8:36:06:a5:97:7c:d1:e0:09:fd:2f:
         df:28:e4:4e:eb:d3:0e:4c:43:14:42:68:c1:61:0a:c1:ea:9c:
         34:a4:33:3f:6f:c0:ca:4d:16:35:70:88:d0:54:62:8b:2c:c0:
         51:61:61:c2:da:a5:9c:5c:50:33:c0:34:7e:29:b4:47:63:c5:
         7c:31:87:93:cf:a4:ea:3c:40:60:bd:8d:46:23:0b:6e:d7:a0:
         00:2d:e0:f7:9b:26:9e:87:3c:ae:71:bb:ad:55:32:6c:70:df:
         61:c1:4f:28:cd:85:17:f4:89:25:68:c8:fa:e3:84:34:72:83:
         28:96:26:31:9c:66:77:77:ba:70:fd:26:f0:f6:43:af:9b:70:
         d5:62:53:0c:ce:29:c2:a0:e2:07:7f:ec:39:de:aa:e8:e1:fd:
         88:26:02:6c:62:54:6d:41:42:fd:07:22:42:fc:a5:00:e5:ff:
         a7:94:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:48 2026 by rpki-client