Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
File:                     309yD7vOaxVdc1fb5xJspWwevnU.mft (raw, json)
Hash identifier:          h8Ypq9AspF5W6XxwjlTkE/dQE8CtIfPwire8F/YJPLk=
Subject key identifier:   9A:D4:DC:53:75:5B:42:E7:5B:92:FD:57:69:F5:35:FD:1F:0B:59:AB
Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
Certificate issuer:       /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Certificate serial:       019E31F28A07339A77E6F8642ABBE3A515B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
Manifest number:          04B9
Signing time:             Sat 16 May 2026 18:00:39 +0000
Manifest this update:     Sat 16 May 2026 18:00:39 +0000
Manifest next update:     Sun 17 May 2026 18:00:39 +0000
Files and hashes:         1: 309yD7vOaxVdc1fb5xJspWwevnU.crl (hash: 79Mj9WC20w8256HNzdiS8PR6yvZLCpjMeHcllcxYNKo=)
                          2: ZiAi_TdUfMkb3j8gN1a3XiArDYg.roa (hash: p3ud5x+KgWlnChdbJ3zLdy64GsE5PLnEtLECSRQZh38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f2:8a:07:33:9a:77:e6:f8:64:2a:bb:e3:a5:15:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
        Validity
            Not Before: May 16 18:00:39 2026 GMT
            Not After : May 17 18:00:39 2026 GMT
        Subject: CN=9ad4dc53755b42e75b92fd5769f535fd1f0b59ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:14:82:52:ad:91:3c:72:c0:e8:d7:d6:14:
                    70:2e:ad:23:eb:44:7f:f4:fb:cb:ff:27:e4:d2:d7:
                    da:ff:26:c6:e6:77:64:19:d6:64:67:c6:b2:b4:89:
                    ab:46:14:da:93:25:70:47:a0:04:29:9b:f2:eb:9d:
                    42:60:4a:51:4d:58:1b:68:b8:5b:13:5f:b3:ec:ca:
                    ca:a8:4c:24:2d:3a:fd:74:a5:6c:0c:a1:78:92:d1:
                    f4:40:cd:dc:40:a1:30:28:81:f0:b2:73:8f:f3:a6:
                    b4:2e:0c:e0:88:ec:5f:36:c9:4a:11:1e:53:ff:39:
                    be:d5:8f:8c:5b:02:0b:49:25:c5:4b:21:47:a3:0a:
                    e7:70:44:e4:fb:e4:e5:a8:75:97:9f:0a:e4:13:9e:
                    b6:0c:e3:d7:64:80:95:f5:26:92:ef:6b:60:4e:1e:
                    41:51:f0:75:e5:54:b0:6d:e9:75:c7:fc:1c:b4:e1:
                    9d:49:1a:0e:df:72:df:51:83:61:d9:fe:14:ad:db:
                    88:fa:00:fc:1c:2b:86:e5:71:fa:83:81:f1:bd:fa:
                    5f:00:80:2f:0f:d5:8c:27:41:34:e6:4e:be:ab:23:
                    8f:f0:ed:1a:4c:0e:dd:49:c1:65:31:56:69:45:eb:
                    ba:f9:a5:bd:d6:6b:45:5f:4f:b0:32:ce:63:90:7e:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D4:DC:53:75:5B:42:E7:5B:92:FD:57:69:F5:35:FD:1F:0B:59:AB
            X509v3 Authority Key Identifier:
                keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:0a:3e:cc:b6:d6:5b:0e:47:9a:c2:12:ef:14:95:0c:2a:
         b4:c9:1e:0d:d9:e4:d3:dd:e7:1a:d7:41:cf:00:63:a0:25:ce:
         8a:26:70:c9:dd:8f:36:27:1a:35:ad:ff:b2:57:9c:10:18:58:
         69:65:16:15:0f:85:a2:59:39:f5:22:bd:21:58:99:ed:51:9f:
         85:0d:e5:43:dd:62:b4:9c:44:c5:b2:22:f1:81:3d:ee:b0:72:
         34:b9:dd:69:96:a7:bb:6c:e4:a2:39:ad:be:9a:c1:16:ca:56:
         40:43:6d:64:af:65:7d:16:61:bb:b8:8f:60:0f:8d:e9:04:91:
         fb:c1:e1:86:56:44:38:77:55:01:04:ea:9f:06:b9:4b:97:b6:
         39:68:84:a0:eb:b8:a6:95:b3:31:08:fb:fb:8a:68:e6:81:46:
         7c:f8:31:45:75:b1:da:0d:89:50:f1:d1:7d:79:56:6c:39:25:
         18:06:90:dc:1e:f2:8e:bd:99:ff:a1:2e:d4:47:d1:d3:76:84:
         4f:ad:b8:a2:19:7a:84:a3:74:0a:0d:c6:4a:a2:7f:ba:32:76:
         42:96:bf:c9:7f:ea:b3:6f:73:40:8a:ab:89:d8:0c:2d:7d:90:
         45:58:cf:67:46:5f:8d:4f:c4:ae:2a:0c:66:ea:ba:0a:fd:7b:
         43:66:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:07:24 2026 by rpki-client