Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File:                     9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier:          n8tjza3kksss8CYEarPTMyOp6zIqLA3odchxtW9b5OQ=
Subject key identifier:   ED:6A:67:74:7A:CE:AF:1F:C1:53:9E:9E:82:39:23:43:F7:2A:A1:BD
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer:       /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial:       019E30051E214F119F31D75E83EE6352D8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 09:01:42 +0000
Manifest this update:     Sat 16 May 2026 09:01:42 +0000
Manifest next update:     Sun 17 May 2026 09:01:42 +0000
Files and hashes:         1: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: yfQ3NHhk42xAfOrJY75zyP4+gz9/eGnLa2XQHlsp4qY=)
                          2: JuwdF3pXKULgX8rdBkYwVawnKUg.roa (hash: J6niK53xMmSAm4XjHsm9sqSbekhWgzfMokxnfXFEmFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:1e:21:4f:11:9f:31:d7:5e:83:ee:63:52:d8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Validity
            Not Before: May 16 09:01:42 2026 GMT
            Not After : May 17 09:01:42 2026 GMT
        Subject: CN=ed6a67747aceaf1fc1539e9e82392343f72aa1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:88:06:f5:f9:40:f9:62:ee:45:79:ce:ad:
                    9c:fc:1e:2f:21:4c:8d:16:b0:d0:78:89:48:50:78:
                    ab:d5:52:e2:37:d4:cf:fa:91:8e:84:b2:de:ba:2e:
                    82:04:25:8c:c8:47:9e:fc:37:1c:09:6b:01:89:3d:
                    9e:48:44:32:67:65:3a:4f:b8:73:2a:22:b8:b7:d5:
                    56:1a:fe:4e:45:38:ee:d2:63:d9:10:1f:3e:84:5b:
                    54:ee:cd:4c:51:d9:17:f2:e3:39:73:5d:78:cf:fc:
                    6b:e4:da:37:e7:d1:3b:fa:41:eb:59:42:f0:8b:b0:
                    6c:78:37:54:6f:36:e1:b1:19:f7:ae:19:77:1c:a8:
                    4a:ad:9a:34:1f:92:fe:04:f0:0b:ac:56:e9:1a:e0:
                    cc:93:84:e0:9a:0f:4a:ee:7b:1a:3b:93:96:e6:f2:
                    7c:01:54:ee:61:42:87:81:ca:f7:30:04:9a:91:b0:
                    ba:89:30:70:24:bc:a1:cd:1a:be:75:44:a8:b8:83:
                    29:1a:c0:76:a2:98:37:02:e9:ba:b4:0b:c9:48:41:
                    2d:bf:5d:d7:53:17:7d:36:12:21:c0:25:07:d0:ba:
                    7b:36:20:bf:05:88:03:57:13:7e:06:d1:9d:fa:c4:
                    48:b1:08:cf:3a:cb:29:89:9b:78:c4:d9:55:ae:3d:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6A:67:74:7A:CE:AF:1F:C1:53:9E:9E:82:39:23:43:F7:2A:A1:BD
            X509v3 Authority Key Identifier:
                keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:42:eb:b3:e4:d3:12:3e:fe:7e:43:32:7a:bd:b1:d1:e0:6c:
         b6:cd:3e:3f:ce:8f:61:c6:a8:39:0a:ea:44:98:11:c7:4c:2f:
         52:67:b4:1c:ed:7e:e8:28:c8:97:15:ab:46:27:e1:11:4d:7f:
         53:85:73:e9:ab:bf:4a:fd:19:c9:3d:e1:03:1c:4d:6d:f4:ec:
         81:a6:d4:cd:80:1b:86:15:b8:3f:f1:29:c8:be:12:b6:7e:db:
         e0:1c:a8:c5:a0:0a:06:86:62:57:de:00:4a:8c:ef:b4:76:5e:
         89:19:42:6c:72:2b:74:e1:51:cf:cd:12:d7:d6:c7:3e:f3:97:
         8e:03:54:67:f1:83:37:54:f6:9f:25:ad:36:56:38:12:dc:94:
         1b:20:51:5a:7f:32:b8:54:48:37:9d:18:6c:16:5f:e5:c0:8c:
         f9:9e:c2:64:70:43:78:c7:0b:03:d8:bd:dd:cc:19:ab:4c:90:
         09:da:11:81:fd:df:73:4a:b3:23:8a:01:ed:a4:f2:5d:70:69:
         38:42:07:89:02:01:bc:19:84:9e:c8:f5:e7:18:72:73:33:6b:
         22:f2:1c:83:57:66:58:15:8c:41:ab:6d:d5:81:dc:5c:1c:3e:
         d7:a4:cf:dc:30:9d:6a:2b:9f:af:f1:b2:73:73:5d:ea:8f:83:
         03:dc:52:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBR4hTxGfMddeg+5jUtjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2N2VkNGY3ZDM1NTc1MjgxYzE3NmNhZTNkZGNiZDQwY2M1
YzFkZDYwHhcNMjYwNTE2MDkwMTQyWhcNMjYwNTE3MDkwMTQyWjAzMTEwLwYDVQQD
EyhlZDZhNjc3NDdhY2VhZjFmYzE1MzllOWU4MjM5MjM0M2Y3MmFhMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TuIBvX5QPli7kV5zq2c/B4vIUyN
FrDQeIlIUHir1VLiN9TP+pGOhLLeui6CBCWMyEee/DccCWsBiT2eSEQyZ2U6T7hz
KiK4t9VWGv5ORTju0mPZEB8+hFtU7s1MUdkX8uM5c114z/xr5No359E7+kHrWULw
i7BseDdUbzbhsRn3rhl3HKhKrZo0H5L+BPALrFbpGuDMk4Tgmg9K7nsaO5OW5vJ8
AVTuYUKHgcr3MASakbC6iTBwJLyhzRq+dUSouIMpGsB2opg3Aum6tAvJSEEtv13X
Uxd9NhIhwCUH0Lp7NiC/BYgDVxN+BtGd+sRIsQjPOsspiZt4xNlVrj3g2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1qZ3R6zq8fwVOenoI5I0P3KqG9MB8GA1UdIwQY
MBaAFPZ+1PfTVXUoHBdsrj3cvUDMXB3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjct
ZjQ0ODVhZWQ3NDI5LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjctZjQ0ODVhZWQ3NDI5
LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuELrs+TT
Ej7+fkMyer2x0eBsts0+P86PYcaoOQrqRJgRx0wvUme0HO1+6CjIlxWrRifhEU1/
U4Vz6au/Sv0ZyT3hAxxNbfTsgabUzYAbhhW4P/EpyL4Stn7b4ByoxaAKBoZiV94A
SozvtHZeiRlCbHIrdOFRz80S19bHPvOXjgNUZ/GDN1T2nyWtNlY4EtyUGyBRWn8y
uFRIN50YbBZf5cCM+Z7CZHBDeMcLA9i93cwZq0yQCdoRgf3fc0qzI4oB7aTyXXBp
OEIHiQIBvBmEnsj15xhyczNrIvIcg1dmWBWMQatt1YHcXBw+16TP3DCdaiufr/Gy
c3Nd6o+DA9xSUg==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:29 2026 by rpki-client