Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File:                     9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier:          oVhTTTbX4HDATDl1csHSHgkyA9cEeGs74mltEf57WH0=
Subject key identifier:   43:15:C8:E4:89:71:0F:83:03:7C:0B:49:E7:7C:E7:5A:CD:17:70:62
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer:       /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial:       019E30722062F96617C33A954549BD734F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number:          18A0
Signing time:             Sat 16 May 2026 11:00:46 +0000
Manifest this update:     Sat 16 May 2026 11:00:46 +0000
Manifest next update:     Sun 17 May 2026 11:00:46 +0000
Files and hashes:         1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
                          2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: JcpWwx91kIlJZah65Nd6BOHPne/8kr4a/7GtyFqGQ6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:20:62:f9:66:17:c3:3a:95:45:49:bd:73:4f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
        Validity
            Not Before: May 16 11:00:46 2026 GMT
            Not After : May 17 11:00:46 2026 GMT
        Subject: CN=4315c8e489710f83037c0b49e77ce75acd177062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:ed:42:17:51:ca:67:b4:1a:2e:fc:6c:60:
                    3a:1b:13:d8:4a:28:19:30:a9:d7:56:bf:18:ce:7d:
                    bb:07:94:2c:7c:0d:6d:db:0e:2c:f8:8a:8c:40:bc:
                    46:f6:99:1d:9d:47:35:24:14:78:28:61:a5:c8:f6:
                    66:01:e7:3a:98:9f:7a:05:4c:bc:12:a2:9e:a7:08:
                    d7:0f:9b:b3:c1:0a:e7:17:8a:91:d8:a1:0f:f1:3f:
                    38:89:0f:40:fc:8d:1a:9e:16:da:65:95:52:3e:02:
                    60:0f:f3:79:5d:d9:f8:2a:1c:7f:fa:62:77:18:2f:
                    5e:bd:23:7c:84:93:7b:60:44:b7:47:24:f7:0f:b7:
                    fe:28:c2:6f:a5:9e:7e:46:e6:c6:b4:f0:4a:40:39:
                    7a:18:f5:10:88:e8:44:05:4c:fc:a3:d8:58:5f:8b:
                    35:26:75:5d:0a:ad:97:b7:38:2f:07:58:60:6a:04:
                    6a:25:46:45:05:ac:5c:15:1e:cb:34:34:40:ec:54:
                    dd:73:de:29:22:6b:75:37:c7:77:c4:68:35:90:ad:
                    67:10:3a:8a:58:61:d5:be:2a:7e:ee:70:97:65:9d:
                    2e:89:1d:a1:df:ff:5e:86:c7:39:f4:96:af:d4:18:
                    b9:57:98:c2:ad:4c:b2:bf:5a:ee:0b:76:08:b5:2b:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:15:C8:E4:89:71:0F:83:03:7C:0B:49:E7:7C:E7:5A:CD:17:70:62
            X509v3 Authority Key Identifier:
                keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:18:67:f0:98:3c:01:55:25:86:40:1d:25:ed:7d:46:75:
         76:81:08:e7:03:08:12:10:5a:96:02:88:d5:91:06:5c:47:90:
         87:37:dd:2f:89:d0:dc:15:99:05:91:79:50:9c:37:ff:b9:92:
         e2:e9:00:9c:17:66:24:33:e5:61:76:1d:a0:ba:2d:52:7a:85:
         81:42:e1:de:ee:5f:8e:1f:40:cf:e1:ad:cd:d5:2b:9f:5d:ab:
         87:e5:8c:44:6c:3d:f7:62:ef:4f:9e:6c:28:be:5d:70:13:84:
         9c:57:dd:51:6c:74:b5:5f:0b:65:b9:04:0a:bb:2c:08:67:b5:
         ba:9f:f3:00:d3:b3:ad:e1:19:fd:02:3b:d8:94:d7:d6:ea:19:
         f9:f7:29:40:2b:47:51:6d:42:0c:1a:bc:3c:5b:e5:b6:cf:29:
         dd:6a:56:f6:66:58:1d:1d:e3:cd:a8:75:17:29:2f:5b:06:ab:
         98:83:40:ac:2c:07:46:7c:73:7a:dd:6a:07:9c:f3:e8:47:17:
         1e:18:f9:05:f5:a7:83:a0:a1:8a:b8:08:25:e6:5a:6e:7b:f9:
         c7:0d:17:fd:23:e3:e1:e3:c6:89:ba:71:8b:16:f8:23:f0:3d:
         7e:fc:37:4a:62:19:fe:9f:80:dc:42:70:3d:94:e0:f9:97:83:
         d2:5c:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:05 2026 by rpki-client