Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File:                     9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier:          dWqJ5hC47BMb6glMyBU/4R9idmZ4FXdGvMAHnkxRjc0=
Subject key identifier:   A4:A7:81:AE:2E:B2:22:80:08:A9:FD:2D:E4:A9:8A:A0:4B:FD:96:9F
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer:       /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial:       019E2F96E67361505CAC9BEC1E73B4F1FE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number:          0ED8
Signing time:             Sat 16 May 2026 07:01:18 +0000
Manifest this update:     Sat 16 May 2026 07:01:18 +0000
Manifest next update:     Sun 17 May 2026 07:01:18 +0000
Files and hashes:         1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: o8z0o/5farhWzi9zomWC8h8bKkHBWpfMln3MEa9ILvI=)
                          2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:e6:73:61:50:5c:ac:9b:ec:1e:73:b4:f1:fe:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
        Validity
            Not Before: May 16 07:01:18 2026 GMT
            Not After : May 17 07:01:18 2026 GMT
        Subject: CN=a4a781ae2eb2228008a9fd2de4a98aa04bfd969f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:02:c7:16:f2:90:c1:7f:9d:fd:46:37:30:
                    d7:bb:dc:2f:08:84:77:c2:5c:ac:24:e0:54:a8:67:
                    1d:99:28:29:48:91:ea:c4:da:ec:64:95:fc:9b:d6:
                    00:35:a7:79:f6:b9:5b:13:98:6c:ef:45:90:2d:76:
                    5c:86:4c:c3:f9:6e:3b:2b:40:1d:ef:dc:fa:c0:77:
                    91:87:ce:16:4d:43:55:b7:f9:fd:61:cc:39:37:04:
                    77:bb:87:df:56:b3:86:5e:ec:00:54:03:22:df:1b:
                    71:a9:8b:f3:cb:9a:14:cb:e9:96:66:dd:2d:83:b4:
                    cd:73:d3:1f:ff:1b:9d:fb:af:d5:58:85:26:b4:bb:
                    66:56:ea:63:b9:c3:36:df:d8:08:2e:9c:1d:80:1c:
                    d5:bb:7a:c7:07:e5:4e:0b:60:bf:86:62:d5:94:89:
                    f6:66:a0:60:3b:46:fe:10:a8:d2:82:81:d6:1c:39:
                    a9:b0:47:01:f6:6b:45:60:38:8c:8b:75:be:21:1f:
                    ef:36:bc:76:ba:a0:b7:db:e4:13:3a:46:ed:d1:e5:
                    2f:d6:48:61:65:4c:e2:2d:46:44:f6:25:45:c9:f2:
                    8d:fe:35:5b:6e:1e:e8:9e:54:37:8f:9b:96:2f:e5:
                    1e:8c:9e:c0:01:60:d1:9a:6b:26:4b:e0:76:46:f2:
                    5e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:81:AE:2E:B2:22:80:08:A9:FD:2D:E4:A9:8A:A0:4B:FD:96:9F
            X509v3 Authority Key Identifier:
                keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7b:42:cf:bb:e7:15:b3:e0:c5:0c:f4:1c:ec:8f:34:fb:2f:
         36:20:52:3e:31:8f:49:56:6c:b8:34:84:34:3c:06:c8:2d:14:
         0a:ee:31:6a:bc:85:e7:35:af:d8:90:a1:d9:d8:b1:f0:fc:29:
         46:68:98:77:db:fa:67:4e:18:a8:ea:b1:91:ac:63:ab:f2:8b:
         e3:8d:5e:7a:2a:51:a9:19:c4:35:8b:45:3b:98:47:94:96:fc:
         bd:6b:4d:ea:69:83:b8:51:7c:38:72:9c:b4:ae:d1:33:4b:73:
         cd:90:1b:ca:d1:16:d5:40:65:9e:d5:68:2c:60:f3:f9:3b:c7:
         29:eb:65:db:af:17:e6:8b:35:36:6f:7d:8d:88:2f:2a:de:58:
         e6:33:eb:a3:2a:b8:4e:a0:51:43:1c:61:23:bd:9c:98:a4:79:
         3c:b2:f5:bf:d1:4e:71:ce:d3:65:72:5b:a7:d5:13:44:9d:7f:
         a1:70:5c:6d:b4:9c:a5:b5:a0:cc:c3:fc:a3:08:a6:c2:58:93:
         8e:43:f7:7b:34:e8:c9:2f:8d:3c:ab:3d:ac:fd:47:d2:51:89:
         b6:5c:15:ac:b9:6b:18:b5:43:3a:a6:cf:e3:5a:c4:20:c6:e6:
         05:ff:ec:12:9e:6d:27:45:05:99:1d:8e:2e:1c:5d:e3:bc:2a:
         ee:eb:5e:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vluZzYVBcrJvsHnO08f47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTUyN2EwNmEwMzVjYmNhZWNmMDBkYWNhMmZkODgzOTlj
ZjlkMTIwHhcNMjYwNTE2MDcwMTE4WhcNMjYwNTE3MDcwMTE4WjAzMTEwLwYDVQQD
EyhhNGE3ODFhZTJlYjIyMjgwMDhhOWZkMmRlNGE5OGFhMDRiZmQ5NjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVoCxxbykMF/nf1GNzDXu9wvCIR3
wlysJOBUqGcdmSgpSJHqxNrsZJX8m9YANad59rlbE5hs70WQLXZchkzD+W47K0Ad
79z6wHeRh84WTUNVt/n9Ycw5NwR3u4ffVrOGXuwAVAMi3xtxqYvzy5oUy+mWZt0t
g7TNc9Mf/xud+6/VWIUmtLtmVupjucM239gILpwdgBzVu3rHB+VOC2C/hmLVlIn2
ZqBgO0b+EKjSgoHWHDmpsEcB9mtFYDiMi3W+IR/vNrx2uqC32+QTOkbt0eUv1khh
ZUziLUZE9iVFyfKN/jVbbh7onlQ3j5uWL+UejJ7AAWDRmmsmS+B2RvJeUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSnga4usiKACKn9LeSpiqBL/ZafMB8GA1UdIwQY
MBaAFPaVJ6BqA1y8rs8A2sov2IOZz50SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYt
ODVjODU1MjI3YjIzLzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYtODVjODU1MjI3YjIz
LzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3tCz7vn
FbPgxQz0HOyPNPsvNiBSPjGPSVZsuDSENDwGyC0UCu4xaryF5zWv2JCh2dix8Pwp
RmiYd9v6Z04YqOqxkaxjq/KL441eeipRqRnENYtFO5hHlJb8vWtN6mmDuFF8OHKc
tK7RM0tzzZAbytEW1UBlntVoLGDz+TvHKetl268X5os1Nm99jYgvKt5Y5jProyq4
TqBRQxxhI72cmKR5PLL1v9FOcc7TZXJbp9UTRJ1/oXBcbbScpbWgzMP8owimwliT
jkP3ezToyS+NPKs9rP1H0lGJtlwVrLlrGLVDOqbP41rEIMbmBf/sEp5tJ0UFmR2O
Lhxd47wq7uteJg==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:22 2026 by rpki-client