Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File:                     9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier:          xQt3ERa87/etO3Ah8huok7v2lK1eGMNDEzPxWyuBf2A=
Subject key identifier:   9A:34:55:AE:CE:D1:16:F7:EE:83:9D:0A:63:83:FC:CC:F3:80:00:63
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer:       /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial:       019E30047A08615B9AD3F34C5C0E2FD380AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number:          189D
Signing time:             Sat 16 May 2026 09:01:00 +0000
Manifest this update:     Sat 16 May 2026 09:01:00 +0000
Manifest next update:     Sun 17 May 2026 09:01:00 +0000
Files and hashes:         1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: LvAvqIue2UX7OZmF46d4+0HVusGZhHfS+TIlVDTk4Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:7a:08:61:5b:9a:d3:f3:4c:5c:0e:2f:d3:80:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
        Validity
            Not Before: May 16 09:01:00 2026 GMT
            Not After : May 17 09:01:00 2026 GMT
        Subject: CN=9a3455aeced116f7ee839d0a6383fcccf3800063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:c1:42:e0:85:c2:d0:59:da:49:c6:e1:27:
                    a0:04:ee:18:96:d6:8f:17:e3:39:a8:a5:14:ed:ca:
                    fa:c0:e1:31:bd:8d:4a:fb:f5:68:0c:7f:01:c0:f2:
                    99:6b:6d:8b:a9:b3:54:f1:50:a2:c4:35:ae:6b:86:
                    55:f6:14:f3:ec:97:f3:a4:ad:c7:e1:53:05:2b:77:
                    a1:51:5c:58:f2:b1:76:9b:b8:b2:e1:d6:7d:74:4b:
                    60:64:7e:11:14:7e:46:bc:a4:96:e3:be:2c:60:ce:
                    ad:34:56:e2:b6:ee:33:68:6a:cd:d0:3d:6a:83:1f:
                    da:99:4b:fe:df:fa:cd:ce:84:c7:e0:e9:1f:2e:7c:
                    7e:be:87:63:15:fd:0a:8a:46:10:df:3e:9e:13:35:
                    c7:af:07:56:a1:2f:9b:d3:ff:b4:ce:27:6b:9a:bf:
                    a8:7c:83:33:b9:86:ad:92:a1:5d:a0:9b:0b:4c:b6:
                    ad:cd:c6:07:64:2d:39:ab:24:04:d3:63:0c:82:30:
                    b2:56:e1:bc:8d:bc:d5:da:6a:6f:de:4e:23:06:8c:
                    45:df:b9:22:ac:be:9e:2c:99:de:a1:7b:aa:54:c9:
                    4e:26:16:33:68:89:3f:5a:b8:e4:f5:34:79:69:7a:
                    2c:84:19:45:b7:b7:af:27:51:67:56:0d:d0:6d:c8:
                    9e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:55:AE:CE:D1:16:F7:EE:83:9D:0A:63:83:FC:CC:F3:80:00:63
            X509v3 Authority Key Identifier:
                keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0e:be:a9:54:55:54:87:48:c2:92:d5:98:b0:50:b7:9d:57:
         32:2d:09:3c:33:47:db:8a:67:c7:e2:ab:2a:ef:aa:d5:41:be:
         41:61:f1:06:14:e2:25:71:d5:85:b0:d6:b3:02:d9:2b:eb:17:
         69:5b:5e:de:15:3d:2e:c2:98:cf:a7:b9:84:db:c0:33:33:45:
         ee:08:75:94:21:fa:b5:92:84:42:c9:b7:2a:e7:c3:51:2a:a0:
         6c:bd:d8:99:69:c1:ac:3d:fc:79:bd:34:f4:77:a5:82:5f:de:
         5e:85:6e:10:da:f7:b7:c8:fb:9f:f4:89:e8:86:1e:e4:34:63:
         b1:f3:67:5e:2c:ae:56:bd:8d:2d:73:57:f6:ae:55:c2:20:6d:
         f5:c7:c9:e2:16:2c:e2:c8:df:cf:e3:08:80:c5:d9:40:0a:c8:
         09:7a:92:5e:56:0d:e0:bb:99:6d:16:7a:bc:54:90:85:50:63:
         3e:7f:b5:44:26:cb:ed:d5:76:7b:a2:78:6d:e8:3d:56:40:fd:
         bd:6a:21:eb:67:46:10:3c:5f:dc:7c:54:e9:44:51:8b:e3:a1:
         f5:87:0f:41:53:77:27:c6:c2:5d:76:d7:8b:48:0b:6a:eb:a2:
         b2:75:90:68:83:9c:2a:de:d5:9b:9c:bb:2b:f6:69:3a:c4:b5:
         d6:46:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:35 2026 by rpki-client