Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File:                     9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier:          RjlD4gd5EyFl6o/L2DX6jyiEBNdoGdu7Q2bt729mKzE=
Subject key identifier:   09:22:A5:B7:87:BB:82:45:EF:78:92:37:9F:AD:F8:A3:00:32:EC:45
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer:       /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial:       019E30731957B95A084DC1E2E609DEA77283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 11:01:49 +0000
Manifest this update:     Sat 16 May 2026 11:01:49 +0000
Manifest next update:     Sun 17 May 2026 11:01:49 +0000
Files and hashes:         1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: /rmkQBnpl7IegV1iKWvod3QnXjfw0Fy/MHV1xqRmkm8=)
                          2: pY5anUcF6nGQjRStvwUsfXfpPT4.roa (hash: ikRAmfOVAxrB8DLsnpaLa+mv7owmfzH47WnehifEhhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:19:57:b9:5a:08:4d:c1:e2:e6:09:de:a7:72:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
        Validity
            Not Before: May 16 11:01:49 2026 GMT
            Not After : May 17 11:01:49 2026 GMT
        Subject: CN=0922a5b787bb8245ef7892379fadf8a30032ec45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:76:f3:54:80:8b:17:16:2e:95:32:b3:80:
                    4c:34:3e:39:c0:f0:d6:10:ef:79:09:1c:e2:1d:86:
                    59:4b:98:8e:f5:3a:ac:32:fd:37:2b:d2:97:e1:55:
                    bc:d4:7a:e1:3d:4b:80:6f:73:05:54:ed:12:61:01:
                    f4:2f:ce:22:1b:e3:fc:d7:e0:79:c5:a2:c0:02:e0:
                    f2:27:80:81:25:1e:e1:96:9a:9f:a7:e4:8a:d4:93:
                    0b:38:a7:b9:ad:dd:36:0e:27:f1:2d:a9:ce:d1:f1:
                    ca:0b:8e:2f:50:48:25:18:e8:e7:12:50:33:bf:21:
                    bb:3c:2a:72:63:6a:a9:45:1d:c5:6b:e3:d1:f4:06:
                    82:24:53:3f:31:e5:de:de:7d:42:4f:ff:28:42:68:
                    0d:a5:d6:d8:96:ce:bc:51:16:ed:46:9c:0d:f3:e6:
                    56:20:62:48:10:c9:c5:91:9a:7d:06:af:c1:d6:b7:
                    2e:71:c1:06:1e:98:ec:f5:da:06:94:4b:af:0a:10:
                    1a:c3:3b:f5:6b:14:7f:e4:75:c4:82:50:87:5c:4b:
                    52:fe:fa:1a:da:e4:ba:06:01:3a:ef:64:69:f6:20:
                    c5:db:59:14:33:41:f1:cb:ec:42:ea:da:82:f8:ec:
                    d8:10:c9:da:04:6a:61:9e:ab:d5:c6:c6:0f:dd:eb:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:22:A5:B7:87:BB:82:45:EF:78:92:37:9F:AD:F8:A3:00:32:EC:45
            X509v3 Authority Key Identifier:
                keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:86:96:72:7b:88:bc:6b:e3:be:a5:1d:e1:b4:45:1c:dc:7e:
         11:f3:18:ea:2b:a6:44:c6:9d:5d:f5:89:a6:cc:41:3d:49:15:
         0d:aa:83:b0:ba:c5:2d:c8:11:3b:5b:3e:11:86:10:32:3d:1e:
         ef:b3:75:ce:10:9f:1b:14:10:b9:74:17:e3:80:9b:bf:76:ce:
         bf:98:99:53:18:24:b8:7a:35:23:6f:e7:51:6f:c7:aa:f0:21:
         98:a7:3a:13:91:b9:62:b6:fd:57:f1:4d:c1:32:f9:55:5d:f7:
         24:94:42:74:0e:c4:bc:d1:71:93:bc:c1:c7:5f:88:1b:30:e6:
         2a:37:c3:2e:16:7e:cd:06:b8:51:4a:2a:aa:75:08:5b:7a:c5:
         63:c8:8a:52:42:33:a9:a1:cf:2a:25:b0:2c:2c:48:7f:8c:ba:
         55:df:e1:43:12:05:7d:5d:65:22:b1:a9:ae:4a:90:1e:14:71:
         43:ba:8f:5b:7a:11:ea:9a:45:e9:97:49:88:ad:11:36:9e:5a:
         48:e8:da:70:4c:a2:4c:f0:33:60:87:3e:98:b3:a8:d8:9c:7e:
         e4:79:97:fa:44:1f:59:4d:da:a8:26:8f:68:cb:58:96:b3:b4:
         29:77:6f:5c:4d:45:47:e2:84:9b:17:c5:07:f3:5d:26:16:1f:
         49:c8:1a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:17 2026 by rpki-client