Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
File:                     B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft (raw, json)
Hash identifier:          V357pskAOE7cY2lG3UacJo4X5GonfcOvxHNVOCQA+8s=
Subject key identifier:   C9:D4:1E:0F:8B:4D:1B:7A:23:8C:8F:B7:D4:D4:0A:E4:FD:96:E4:82
Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Certificate issuer:       /CN=07730862dfb740166df453fb6e9c8508af5d9c56
Certificate serial:       019E300584AB1B8479E4441B6BF9D11CCC26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
Manifest number:          16C2
Signing time:             Sat 16 May 2026 09:02:08 +0000
Manifest this update:     Sat 16 May 2026 09:02:08 +0000
Manifest next update:     Sun 17 May 2026 09:02:08 +0000
Files and hashes:         1: B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl (hash: EDV+wr/cIthKaXn7w6dBNFo/Sd7hUnsunER9Pzz+ceM=)
                          2: ZiWqWZABnq_eiO62wMwzhJ88P8o.roa (hash: QMjkQdLnnhm5XVKipPX5kzLqwqqwc6MMLi86/hK/bzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:84:ab:1b:84:79:e4:44:1b:6b:f9:d1:1c:cc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56
        Validity
            Not Before: May 16 09:02:08 2026 GMT
            Not After : May 17 09:02:08 2026 GMT
        Subject: CN=c9d41e0f8b4d1b7a238c8fb7d4d40ae4fd96e482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:d5:e3:24:a7:f9:b9:a4:0f:5d:ec:e0:4e:
                    8b:cc:60:e5:b0:0f:f3:a7:49:5b:0c:15:01:4e:3d:
                    69:b7:f0:33:f5:18:8c:e2:cc:ab:e9:b9:a3:ee:fc:
                    66:33:9e:98:75:72:4a:80:21:53:e3:46:48:93:94:
                    7f:46:f1:5a:fe:11:78:be:42:4d:cb:08:67:c6:9d:
                    88:24:96:67:e4:f2:07:6e:9c:87:6d:42:cd:47:d9:
                    22:82:8f:a0:ff:12:44:d9:81:5f:25:d4:f7:8f:88:
                    c8:bc:92:68:89:8c:01:48:64:97:1e:bc:58:dd:68:
                    a1:dc:d1:99:d3:e4:c4:71:50:e8:ad:09:c6:43:db:
                    4a:96:91:39:e9:40:8d:27:85:6b:d6:6a:22:12:38:
                    59:70:0b:fb:e6:fd:ba:fb:ac:ff:f6:c2:95:a9:c1:
                    79:7a:e8:7a:06:a6:27:90:64:a0:4e:6a:2b:f3:64:
                    c7:c9:f0:0b:15:04:21:52:cf:70:8e:c4:b7:32:85:
                    d3:41:d9:e2:69:9b:0b:3b:c1:6c:21:2b:29:f5:99:
                    69:e1:ec:f2:aa:ca:f6:79:64:9e:d4:93:60:30:25:
                    ce:dc:43:79:22:6d:e3:38:d2:5e:5f:2b:46:1b:a6:
                    b2:0d:b3:5b:e4:6c:5b:8e:fc:68:3f:c7:2f:af:83:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D4:1E:0F:8B:4D:1B:7A:23:8C:8F:B7:D4:D4:0A:E4:FD:96:E4:82
            X509v3 Authority Key Identifier:
                keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:2a:53:4d:8e:f6:76:2d:35:a9:f5:69:12:9e:ef:da:d8:
         29:64:7a:5a:4d:4e:b3:08:23:e3:50:bb:15:e5:34:5b:ca:bb:
         8f:51:d7:e8:1b:38:76:15:80:b1:25:96:41:b0:f6:85:ef:49:
         3f:f4:7b:3c:15:a0:da:3e:c2:13:4d:1d:3d:ae:de:33:33:45:
         58:0d:04:48:64:69:60:1b:37:70:9f:6d:93:5a:97:60:e4:43:
         e2:f9:47:da:d8:1b:7c:bc:bc:e7:1e:7a:40:de:af:00:03:41:
         9d:b6:d5:ab:b1:8a:86:1c:07:69:8c:a3:d7:12:f2:5c:2c:d5:
         b3:d9:ec:ac:f6:e3:48:1c:45:88:df:11:22:17:db:6d:08:b7:
         ce:3a:4f:83:f3:88:87:64:e2:d2:19:51:54:c1:d7:5c:db:f6:
         30:5a:73:58:c8:73:31:aa:e2:71:f1:7a:57:60:b5:55:11:9d:
         db:12:2b:b9:7c:dd:2f:9b:73:e0:31:91:ec:3c:e9:04:d6:d5:
         db:cb:c6:a1:98:75:75:19:23:e6:b8:17:c1:f7:69:1b:f0:bc:
         c0:c8:03:08:1d:40:25:d5:8d:9a:31:34:ff:7e:e9:1c:ee:9a:
         7a:ac:eb:bb:7f:12:a4:44:04:27:94:04:68:5d:3b:8b:f6:35:
         ac:2c:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:05 2026 by rpki-client