Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File:                     E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier:          7fJxp8OLu/I33CgIFfaq7i6lEmxhnd4w6FdQjN50hxk=
Subject key identifier:   52:58:08:A9:55:39:0D:58:EF:68:9C:8E:36:7B:E1:E4:07:B2:31:2E
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer:       /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial:       019E2F28FDE786CAA847A413041E1D76F30C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number:          0FF7
Signing time:             Sat 16 May 2026 05:01:16 +0000
Manifest this update:     Sat 16 May 2026 05:01:16 +0000
Manifest next update:     Sun 17 May 2026 05:01:16 +0000
Files and hashes:         1: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: gxlbrzlsDodgcDkilZ7UYL6kDH8GjfCzj+8rDYOcDJU=)
                          2: m_4G_0Oxit4jN9Mi8en63Te59ko.roa (hash: NR2mOcFmt971BLwl94JPSXCXHeE7+txzuM2W8JbnNaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:28:fd:e7:86:ca:a8:47:a4:13:04:1e:1d:76:f3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
        Validity
            Not Before: May 16 05:01:16 2026 GMT
            Not After : May 17 05:01:16 2026 GMT
        Subject: CN=525808a955390d58ef689c8e367be1e407b2312e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:b0:f9:08:79:4c:55:0c:04:17:27:d3:ec:
                    ea:5d:1d:60:9d:c0:b3:7b:be:e2:fe:a4:72:b8:e9:
                    10:dc:16:7d:ec:1a:96:c1:bf:7b:8f:09:f0:fe:f5:
                    df:d9:39:9b:14:6a:f4:de:5f:30:5c:7a:f0:f3:82:
                    8c:66:24:a9:89:5d:fb:0e:bc:5a:66:7c:9c:3b:3d:
                    c8:73:55:32:22:85:42:5f:d5:55:b2:81:f2:2f:ba:
                    65:57:1b:af:ef:80:19:10:1d:8b:97:c4:3e:7c:98:
                    64:bd:a7:e9:fc:ec:ba:ce:99:38:34:6f:88:02:19:
                    0b:6f:17:21:a7:8f:63:55:6e:9c:a6:b9:c0:43:34:
                    52:2d:16:27:ce:46:55:14:8b:df:55:b5:93:69:3d:
                    a1:ec:03:ad:cf:bb:11:39:f1:fe:5b:10:ad:d4:13:
                    5b:66:ba:2a:02:56:89:40:4d:db:cb:1a:1b:f8:0d:
                    fd:7f:4d:4a:d0:93:7c:5c:2c:fc:47:31:85:a3:10:
                    46:24:50:c7:35:6e:b3:08:06:6e:0b:30:a5:92:ad:
                    0e:cd:f8:0b:4e:5c:5d:cf:dc:ef:20:a4:e6:6f:30:
                    cf:ca:f9:e2:5b:e2:97:11:fd:44:c5:c0:f5:e3:3d:
                    cc:e0:75:37:71:cd:56:ac:43:0b:4e:fb:2d:48:cf:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:58:08:A9:55:39:0D:58:EF:68:9C:8E:36:7B:E1:E4:07:B2:31:2E
            X509v3 Authority Key Identifier:
                keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:fd:00:6e:62:b0:eb:46:48:5d:24:07:21:f7:36:9e:bd:
         a7:ee:a1:49:2d:aa:c9:ae:c1:86:26:03:36:5f:29:19:9b:4b:
         1d:20:7e:8f:de:ef:6f:a5:a3:57:60:5f:a0:e6:0d:e3:dc:4a:
         dd:1e:96:7c:47:a4:4d:ce:92:dd:5b:07:c7:30:75:8b:9c:4d:
         f7:d9:8f:e6:b4:08:0f:72:ce:87:79:3c:21:b0:21:bf:88:05:
         70:29:4c:35:e3:35:7f:be:c2:4d:ec:99:09:c0:75:04:72:87:
         85:b4:27:08:18:77:a7:9b:41:c7:cb:33:a9:27:ca:87:b0:90:
         63:99:bd:a9:e0:68:b8:a3:32:a3:0d:7b:b6:2d:b7:0f:93:c8:
         1e:86:b2:4f:fb:c2:e0:02:5d:81:08:09:e9:f8:ca:80:65:fe:
         a1:bf:c0:47:a7:01:3a:8f:ed:bf:62:bd:dd:64:0f:37:d8:09:
         c4:e5:bb:98:a1:9f:9b:a8:bb:f5:9d:58:7e:95:57:05:98:c7:
         97:a9:ac:17:d7:24:de:5a:47:84:48:a4:63:81:2f:39:1f:79:
         1f:ea:70:db:da:fc:97:a2:ed:4b:29:14:7a:a0:a9:69:98:fb:
         fa:a7:f5:ac:f5:a5:ce:2a:62:54:f6:ee:ad:25:46:01:4b:90:
         48:22:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:55 2026 by rpki-client