Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File:                     9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier:          f2NF9XxZhI0LEv2pPHMBvYLSOuDToiI+A4hf3+HwQYM=
Subject key identifier:   E0:26:EB:7B:19:C6:2F:FF:45:69:0A:DB:8D:08:63:8A:D6:B8:15:29
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer:       /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial:       019E2F5FCC1EC017A90384F16BC3FD09E081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number:          0A2F
Signing time:             Sat 16 May 2026 06:01:07 +0000
Manifest this update:     Sat 16 May 2026 06:01:07 +0000
Manifest next update:     Sun 17 May 2026 06:01:07 +0000
Files and hashes:         1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: 58pk1fpVEyfLV59/WJqxrDaxOzJnk5RCh2F0jI6uRrQ=)
                          2: DYss90R4HIuww1mW6-7xbEjXb4M.roa (hash: UMw2Vyr1TU50SIq5R3Ka5Y9X/0d1jW9A+sz46TwWuew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:cc:1e:c0:17:a9:03:84:f1:6b:c3:fd:09:e0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
        Validity
            Not Before: May 16 06:01:07 2026 GMT
            Not After : May 17 06:01:07 2026 GMT
        Subject: CN=e026eb7b19c62fff45690adb8d08638ad6b81529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:5a:b5:9a:4a:39:db:ad:20:30:60:a5:30:
                    b9:1e:e7:fb:80:38:e2:75:8e:cf:93:99:51:da:a9:
                    98:68:89:1c:2b:df:c9:df:a4:ad:31:f8:8d:2c:3a:
                    e2:ee:99:02:57:06:53:e7:eb:c5:79:e5:53:5a:4b:
                    e8:3d:58:77:ed:47:37:7f:63:65:c1:72:73:cf:4a:
                    82:69:ec:c8:3f:e0:1e:68:ec:2f:01:72:b4:c1:36:
                    b1:ff:5b:75:c5:08:c5:78:b9:25:83:d4:f6:55:2f:
                    c0:45:07:10:c8:26:87:ac:c0:bc:e1:d9:48:a6:84:
                    b7:dd:77:08:a3:1e:ea:9e:51:4a:6a:0e:b3:24:97:
                    73:9d:44:3c:a4:86:bf:d8:c9:46:1d:84:1a:0b:f7:
                    44:80:97:5f:8f:f4:29:27:38:fc:ac:ed:78:bf:03:
                    ff:e4:b4:c2:7f:92:48:a1:05:88:6c:da:7b:16:0c:
                    59:0b:e9:e5:a9:8f:ff:e1:72:db:d7:40:d4:92:30:
                    92:86:3f:68:8d:4b:fe:d1:d8:35:65:33:80:ac:3e:
                    2c:96:62:50:f7:17:82:d4:ab:c1:df:d9:7b:47:bc:
                    4d:fe:13:a6:7d:a4:4a:27:ab:a0:59:dc:29:25:e1:
                    5c:f5:f3:99:e6:71:51:66:fb:82:57:9a:65:d2:34:
                    5d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:26:EB:7B:19:C6:2F:FF:45:69:0A:DB:8D:08:63:8A:D6:B8:15:29
            X509v3 Authority Key Identifier:
                keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:8d:ea:af:0f:6a:49:c5:bd:fe:df:7f:d0:2a:72:7b:bc:
         0e:31:9d:40:4f:b1:16:54:dd:e6:71:03:98:a0:53:b7:c7:8a:
         8a:4a:28:33:cd:d8:8b:4d:95:8f:0f:d1:5f:ec:a7:00:ed:36:
         4f:aa:5e:c6:68:7c:e9:02:f8:78:15:26:1b:82:df:f1:e8:a2:
         c3:9c:49:b8:d0:67:0e:68:af:09:b6:2a:0b:5c:7e:16:b5:fb:
         fd:e4:b2:6a:a2:b6:f0:18:58:bc:ac:39:7d:c9:3f:b4:97:f6:
         b4:04:e0:32:6b:7a:9e:31:c6:c2:02:74:ff:0d:89:b2:e8:55:
         4a:c8:5e:97:69:1e:9f:23:ec:b9:ae:c6:47:83:cd:cd:09:16:
         4e:49:f9:76:f0:90:c0:ae:e4:fd:49:2a:a0:c7:c7:7e:51:f2:
         1e:c9:54:c9:22:23:e2:1f:a8:44:37:91:3d:f2:01:58:f2:ba:
         44:d4:66:b3:1b:11:1c:4a:73:6c:95:06:93:db:4f:30:93:b3:
         f8:a9:83:00:e5:df:92:dd:54:c9:70:e5:2f:6e:cd:4f:d4:18:
         88:8a:51:9b:35:8a:53:45:90:08:82:5a:18:35:59:57:b6:4a:
         f4:ad:69:99:9b:ad:df:09:c5:65:24:ea:6c:51:c5:69:9e:52:
         7f:43:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:45 2026 by rpki-client