Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File:                     9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier:          qGmQYP4K9DU1hXDr52Pmgf47c6TDvbzWStGuapEN6vU=
Subject key identifier:   9C:D0:75:DC:7F:F5:02:BB:27:55:25:9F:FC:45:69:FD:27:51:CD:F7
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer:       /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial:       019D382EAD5622322A69D3EE1315527EF726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number:          01E9
Signing time:             Sun 29 Mar 2026 06:01:16 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:16 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:16 +0000
Files and hashes:         1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: vMsAlhnHW/TcvL2e+KZYDrZXArEeFGClj2KUiitDeYQ=)
                          2: hjHmhKUkMq2huO3HMGHtinUbmu0.roa (hash: qnr8V99TDGg77oRKiMRfR1bkws1Uoea8b25llDz2SOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:ad:56:22:32:2a:69:d3:ee:13:15:52:7e:f7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
        Validity
            Not Before: Mar 29 06:01:16 2026 GMT
            Not After : Mar 30 06:01:16 2026 GMT
        Subject: CN=9cd075dc7ff502bb2755259ffc4569fd2751cdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:cd:6e:b2:c2:c5:5d:13:66:51:6c:ed:41:
                    a2:2e:8e:d0:13:3e:cf:9f:13:88:64:97:56:cd:61:
                    1d:5d:6e:be:67:4e:45:78:a3:52:9f:91:89:80:ad:
                    db:2a:49:1d:78:17:45:3f:32:d5:7e:ff:7e:bf:5d:
                    a9:31:f6:ad:56:74:b2:a0:6f:4d:06:31:67:f4:83:
                    86:cd:a6:a8:fb:e3:1e:9c:b5:b3:dc:3a:2c:87:84:
                    5e:b6:85:55:0a:34:10:bb:00:12:45:a0:12:67:f2:
                    db:3f:0b:95:b6:bc:1d:db:7c:01:b6:b8:80:f3:b3:
                    8f:d3:30:bd:10:49:b7:3f:13:e0:11:28:0c:78:2f:
                    66:9f:26:94:8e:57:c9:1b:0d:a9:b1:50:52:64:51:
                    86:77:04:b3:42:29:68:06:3f:23:5c:25:f6:28:99:
                    47:da:1b:1b:31:89:e7:e0:f8:67:2d:20:fc:6d:85:
                    72:7c:3b:a9:0e:19:12:07:2e:29:b2:d4:66:10:7b:
                    29:29:09:45:67:b0:00:df:b8:ca:21:63:74:99:63:
                    82:5f:22:b3:cb:30:28:b6:66:60:64:97:d9:04:7c:
                    36:92:4a:43:44:f1:ba:89:53:96:23:89:8e:7f:66:
                    52:f3:c5:20:f7:13:79:48:20:f7:33:26:04:4b:bf:
                    5b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:75:DC:7F:F5:02:BB:27:55:25:9F:FC:45:69:FD:27:51:CD:F7
            X509v3 Authority Key Identifier:
                keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:75:65:09:6a:12:15:4e:34:90:62:32:28:2f:4c:c9:6b:ac:
         a4:cc:4c:b1:11:a8:67:4b:f6:33:44:66:34:07:04:d9:e6:a7:
         ae:e4:b2:6e:f8:22:40:4e:9f:47:b4:15:d7:93:77:8b:aa:63:
         9c:54:18:09:70:59:26:ba:7e:0c:36:f2:b9:ce:4b:46:8b:2b:
         15:a5:ba:c5:50:13:7c:39:f7:f8:4c:66:43:28:23:09:aa:a0:
         68:54:cc:9e:9e:1d:40:d8:65:85:da:23:e7:d9:43:94:75:86:
         0c:d1:76:f2:dc:23:dc:88:5d:03:43:db:8b:77:9d:a9:01:a1:
         80:0c:2d:ce:c0:5b:e6:24:a2:81:79:85:59:ee:a9:fc:f7:16:
         86:fd:c0:8d:00:c5:db:0b:84:77:24:6c:6b:07:ca:ef:87:7c:
         67:fc:2f:61:31:2c:9f:22:a2:ad:1d:0d:97:7f:e8:77:cb:f5:
         82:5e:12:9c:a8:e9:4e:ae:5a:20:f3:1b:b5:c5:59:20:1b:bb:
         6a:83:dc:a5:f6:80:a1:8d:ad:a5:23:20:0a:83:d3:cb:58:1c:
         a0:2b:34:e7:6c:a4:47:ed:0f:c3:32:54:bb:b6:b6:2a:19:8c:
         3f:4d:4a:7a:0e:32:53:85:39:40:7b:25:04:58:9b:61:0e:d7:
         a2:ae:d7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lq1WIjIqadPuExVSfvcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx
ZmIzODAwHhcNMjYwMzI5MDYwMTE2WhcNMjYwMzMwMDYwMTE2WjAzMTEwLwYDVQQD
Eyg5Y2QwNzVkYzdmZjUwMmJiMjc1NTI1OWZmYzQ1NjlmZDI3NTFjZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13TNbrLCxV0TZlFs7UGiLo7QEz7P
nxOIZJdWzWEdXW6+Z05FeKNSn5GJgK3bKkkdeBdFPzLVfv9+v12pMfatVnSyoG9N
BjFn9IOGzaao++MenLWz3Dosh4RetoVVCjQQuwASRaASZ/LbPwuVtrwd23wBtriA
87OP0zC9EEm3PxPgESgMeC9mnyaUjlfJGw2psVBSZFGGdwSzQiloBj8jXCX2KJlH
2hsbMYnn4PhnLSD8bYVyfDupDhkSBy4pstRmEHspKQlFZ7AA37jKIWN0mWOCXyKz
yzAotmZgZJfZBHw2kkpDRPG6iVOWI4mOf2ZS88Ug9xN5SCD3MyYES79baQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzQddx/9QK7J1Uln/xFaf0nUc33MB8GA1UdIwQY
MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt
MTNiNzQ2YmJhMjYyLzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy
LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHVlCWoS
FU40kGIyKC9MyWuspMxMsRGoZ0v2M0RmNAcE2eanruSybvgiQE6fR7QV15N3i6pj
nFQYCXBZJrp+DDbyuc5LRosrFaW6xVATfDn3+ExmQygjCaqgaFTMnp4dQNhlhdoj
59lDlHWGDNF28twj3IhdA0Pbi3edqQGhgAwtzsBb5iSigXmFWe6p/PcWhv3AjQDF
2wuEdyRsawfK74d8Z/wvYTEsnyKirR0Nl3/od8v1gl4SnKjpTq5aIPMbtcVZIBu7
aoPcpfaAoY2tpSMgCoPTy1gcoCs052ykR+0PwzJUu7a2KhmMP01Keg4yU4U5QHsl
BFibYQ7Xoq7XfA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:32 2026 by rpki-client