Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File:                     9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier:          vkjBaM0Ga0nNTNiwla7JWHhDE9g+Pl6SssaAtgU3AyU=
Subject key identifier:   58:9D:58:3D:6F:4F:12:E0:65:D6:36:3C:EB:39:07:B3:C4:57:39:0C
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer:       /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial:       019E30A97F2FADB84F9842AEC9ADB634549D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number:          0703
Signing time:             Sat 16 May 2026 12:01:14 +0000
Manifest this update:     Sat 16 May 2026 12:01:14 +0000
Manifest next update:     Sun 17 May 2026 12:01:14 +0000
Files and hashes:         1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: 2J46xMWPqTIrmoPljmDPwl5pUHZw2MgVkExUVNWJP7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:7f:2f:ad:b8:4f:98:42:ae:c9:ad:b6:34:54:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
        Validity
            Not Before: May 16 12:01:14 2026 GMT
            Not After : May 17 12:01:14 2026 GMT
        Subject: CN=589d583d6f4f12e065d6363ceb3907b3c457390c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:d6:4d:b0:c8:8b:b0:60:93:bb:a4:f1:83:
                    a7:74:15:42:08:02:d7:5e:90:3d:fc:e6:01:e0:99:
                    8c:30:26:d3:50:bb:f3:df:b7:eb:47:c5:87:69:ca:
                    3e:fc:03:7b:72:38:89:18:7a:c6:00:ed:80:7a:60:
                    be:ea:97:d0:fb:d3:85:40:5c:04:e4:cc:c2:3c:6b:
                    11:7b:c4:2a:c4:ce:e2:b7:64:84:53:8f:01:89:d6:
                    28:7d:ef:33:92:31:f3:2d:6c:b7:dc:34:ed:cd:35:
                    42:84:ab:86:59:c9:45:9f:ba:a7:0c:cb:8c:2a:61:
                    19:d6:01:68:6a:1f:fb:6f:70:31:9f:06:52:d6:ce:
                    00:13:4a:df:85:d8:4f:3c:b6:ca:e9:fd:9f:7b:00:
                    a2:80:e3:27:bf:9d:41:6d:28:eb:c5:e2:54:f5:07:
                    57:5c:cf:4a:f9:72:8b:84:54:a7:8f:2c:e9:65:72:
                    df:f5:10:58:63:8d:75:31:38:f6:5a:e3:0b:8c:a8:
                    9f:ac:99:09:b1:aa:93:14:71:4e:44:51:8e:47:6c:
                    5c:5d:61:8b:18:77:d6:6d:21:1c:5f:71:26:c8:d2:
                    ba:35:bb:47:0e:cb:97:34:82:bd:3a:3c:25:e5:a4:
                    f0:b3:33:72:0f:78:9a:c6:99:db:dc:46:90:56:bc:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9D:58:3D:6F:4F:12:E0:65:D6:36:3C:EB:39:07:B3:C4:57:39:0C
            X509v3 Authority Key Identifier:
                keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:7a:ba:24:e4:6c:e6:ab:bf:37:5e:ad:e7:1b:06:88:46:3a:
         bb:46:f5:2d:17:97:b2:a2:5a:38:65:0f:69:06:10:cf:5a:a0:
         40:d1:7f:6f:89:f8:ee:79:f4:f4:37:2a:3e:b2:3f:c9:03:57:
         77:47:e1:4f:39:ba:1d:c2:12:89:51:62:5a:7c:e8:a8:a9:8e:
         29:07:fb:ee:05:95:20:2a:1b:e6:6c:2f:91:38:d0:68:7f:81:
         f8:4e:02:50:b1:db:25:df:b9:17:3e:04:53:8a:07:56:a4:09:
         c7:10:fe:39:0b:ff:5e:db:16:be:05:59:c3:9b:76:41:3a:72:
         24:10:20:93:ee:12:95:3a:1f:50:fa:1c:44:21:90:7d:86:b8:
         96:3b:57:20:1c:6a:7b:39:a8:c4:66:e8:7b:93:b5:15:bd:b2:
         99:99:1b:0d:23:6f:ab:56:c1:97:01:cf:1f:a6:0d:0b:ac:6d:
         df:52:59:eb:a4:f8:a0:93:57:2b:da:30:88:00:b1:de:66:f8:
         be:37:07:15:b7:9e:77:1b:5f:52:7d:04:b8:0d:72:d5:09:5f:
         1c:5d:89:a4:13:09:2a:72:51:c6:6d:62:9b:f0:3e:21:45:6e:
         7d:98:9b:4b:52:ed:d6:0f:89:d2:86:88:b4:00:7e:83:4c:d3:
         df:a4:40:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:16 2026 by rpki-client