Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
File:                     9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft (raw, json)
Hash identifier:          T0BT5p9M0xAGortF3Ax2H8d/J9RLs9PiAnq+/4/8x0M=
Subject key identifier:   EC:F8:30:31:53:13:B4:A5:73:ED:CD:C5:29:19:C0:29:24:81:C5:27
Authority key identifier: F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37
Certificate issuer:       /CN=f4b2511fb074f5e1658535ba461e4580dbd84137
Certificate serial:       019DD766320DCB054DFDB9C1E550ED060592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
Manifest number:          011E
Signing time:             Wed 29 Apr 2026 04:01:32 +0000
Manifest this update:     Wed 29 Apr 2026 04:01:32 +0000
Manifest next update:     Thu 30 Apr 2026 04:01:32 +0000
Files and hashes:         1: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl (hash: dPfc3XM0VLMO6H6iP8L2ZfyZppMvY4UESiCZxQtL6RE=)
                          2: w4OPW1w1cwaWMj4uXqpkKkiEaKk.roa (hash: jUe+lcC4F+1K+YbOo4TiwqXw96cjr2eJwGRjPOVvNjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 04:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d7:66:32:0d:cb:05:4d:fd:b9:c1:e5:50:ed:06:05:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b2511fb074f5e1658535ba461e4580dbd84137
        Validity
            Not Before: Apr 29 04:01:32 2026 GMT
            Not After : Apr 30 04:01:32 2026 GMT
        Subject: CN=ecf830315313b4a573edcdc52919c0292481c527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:21:2c:ae:68:f2:ba:9b:bf:3b:00:4b:2a:
                    80:c0:60:63:24:d5:b9:da:ee:3e:5a:bb:3f:6f:8c:
                    eb:cd:98:99:fa:e0:91:90:29:f3:3f:f4:a1:31:24:
                    48:e9:34:fa:fb:d7:79:e1:85:82:49:92:cb:ab:e9:
                    01:e4:73:1d:b7:96:4a:25:7f:33:5f:af:a4:d5:ee:
                    38:26:87:41:f0:93:3a:38:c9:c2:1b:6f:70:6b:bc:
                    d6:86:84:c4:20:50:1e:30:75:e6:fe:10:04:1b:8e:
                    f7:6a:0a:5d:c6:90:77:ff:0f:1f:1d:14:5b:23:cd:
                    3c:09:9c:82:00:d7:a9:ce:08:25:19:0e:0d:29:f3:
                    db:85:3d:69:fe:8d:41:08:b9:a8:bd:47:ba:9f:7a:
                    18:e4:bf:30:9f:55:ef:61:56:9d:84:c7:94:75:a7:
                    a1:8a:8c:3a:fe:dc:7b:fe:15:ab:a3:d4:41:f9:3e:
                    25:95:62:43:bd:73:70:c0:95:7b:2c:c2:90:50:27:
                    90:b9:a5:81:d9:9d:78:67:ad:74:a1:aa:5f:6b:bf:
                    d4:10:a2:8d:8c:3b:4a:8f:08:6f:09:25:9d:e8:0f:
                    52:8b:17:81:40:f0:da:b0:19:04:db:ff:d0:4c:79:
                    d7:44:89:07:37:c3:d3:d9:7f:07:00:7a:7b:14:e9:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F8:30:31:53:13:B4:A5:73:ED:CD:C5:29:19:C0:29:24:81:C5:27
            X509v3 Authority Key Identifier:
                keyid:F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:04:84:17:94:0b:71:cd:6b:a5:a8:d8:b0:e7:41:fe:73:3b:
         66:c6:71:09:90:26:b5:4d:f6:62:a5:2e:bb:05:ab:7d:9f:ee:
         5a:fe:9b:ca:d3:2a:6d:b9:1c:4a:2d:a7:ad:e2:87:8b:79:ee:
         f7:32:33:9f:e8:3e:5f:c2:98:9b:8a:14:5b:ed:af:52:89:15:
         ef:b9:c3:6b:b0:89:ec:41:bd:a5:22:39:33:cf:0c:1f:c4:2c:
         ac:51:83:42:a1:ca:2d:ed:6a:50:24:31:22:d3:93:65:9b:88:
         ab:a1:1f:b0:1b:4a:ef:35:d1:12:ae:2d:45:98:7e:b6:8f:f2:
         0b:62:7e:ca:64:96:c4:ed:1f:14:cc:00:17:e2:d5:00:e7:03:
         70:97:03:82:e0:fa:4b:5c:49:ae:1c:39:c6:e2:5d:dd:f3:96:
         7e:a4:2a:2a:88:50:8a:0d:d2:45:06:78:05:07:e1:f9:29:d2:
         64:0b:52:93:05:39:8c:ad:12:34:06:53:b2:14:60:ad:a5:b7:
         2b:8c:f6:bc:db:ff:d3:27:9b:93:b8:b4:ee:d5:dc:69:e6:ee:
         db:7d:9e:a6:f7:76:6c:55:f5:d1:22:40:c0:7e:d1:3f:58:7e:
         af:86:9e:49:4f:c2:10:44:ce:39:20:7c:1b:8c:10:ed:d9:c6:
         e6:3e:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 08:21:06 2026 by rpki-client