Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File:                     9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier:          7rRQyDNlm+lYGh0WdW/66M+t/0gw7334CFIgzct/PfY=
Subject key identifier:   8A:18:F7:43:10:30:18:59:8E:1C:48:B3:FF:3E:03:D5:01:25:30:0F
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer:       /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial:       019E30A935B7EE1D92C1030E7F741C9A09FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 12:00:56 +0000
Manifest this update:     Sat 16 May 2026 12:00:56 +0000
Manifest next update:     Sun 17 May 2026 12:00:56 +0000
Files and hashes:         1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
                          2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: wa5x50Tz94XExdPkte6V5sB3TgvOAjv5KiFn7VmQ0T8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:35:b7:ee:1d:92:c1:03:0e:7f:74:1c:9a:09:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
        Validity
            Not Before: May 16 12:00:56 2026 GMT
            Not After : May 17 12:00:56 2026 GMT
        Subject: CN=8a18f743103018598e1c48b3ff3e03d50125300f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:3e:7c:ef:31:e3:bd:6b:95:70:b1:e8:2b:
                    25:1f:91:46:50:eb:98:9c:47:cc:0c:bc:07:c5:7c:
                    44:c4:1b:7f:5b:b6:31:e2:1a:a3:92:bb:1b:6d:72:
                    c7:94:9c:b7:8e:f8:b3:0f:e2:c1:22:4d:03:bb:28:
                    36:20:e2:17:f2:45:e0:41:1d:d0:43:30:61:42:5e:
                    7c:3c:de:ca:2e:f0:58:3e:7f:bc:47:96:48:61:b4:
                    2d:ac:2c:19:f4:fd:6b:89:87:49:8f:ba:eb:98:98:
                    27:9f:a1:c1:fb:f3:87:f3:24:e8:0a:58:8d:a1:b6:
                    b6:a2:65:53:1f:5b:da:1d:17:7b:26:ab:98:25:16:
                    3a:6b:17:48:92:e8:fb:17:3e:5a:b7:28:90:1b:42:
                    ff:e6:f2:69:93:a2:42:27:63:31:15:16:67:8a:ac:
                    07:3a:ac:62:5e:43:33:0a:bc:d8:90:5c:5f:b8:f8:
                    7c:c8:be:9a:cd:a2:38:3b:69:e9:c8:3b:f9:cc:75:
                    e3:d9:37:c7:77:d3:5c:10:12:a9:d6:c4:31:bc:41:
                    e5:bf:f3:79:df:93:53:57:15:32:c6:86:9d:34:b4:
                    9c:32:3c:66:46:69:51:b5:41:a0:34:0e:10:3e:69:
                    fc:dd:5c:99:45:fa:15:f6:b7:57:ae:d8:f2:81:c7:
                    e7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:18:F7:43:10:30:18:59:8E:1C:48:B3:FF:3E:03:D5:01:25:30:0F
            X509v3 Authority Key Identifier:
                keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7d:20:5f:71:c5:27:af:45:90:42:60:3f:84:84:23:51:08:
         54:27:56:52:8b:02:0f:08:6a:f6:ce:df:cf:c1:68:b1:8f:12:
         5b:71:48:2f:48:4d:63:4f:e2:8c:f2:2f:94:97:71:ee:c5:96:
         25:1e:75:98:68:f6:fb:ab:56:28:27:f2:92:1d:42:c8:48:98:
         86:4a:8a:06:05:10:76:a6:0b:58:15:f8:14:f8:a2:70:cd:b4:
         7a:5a:7a:72:59:76:6f:2f:65:6f:af:e5:18:67:65:6c:47:1b:
         39:b1:f4:d2:79:4d:0e:9a:21:5b:07:2e:d5:b6:6b:4b:e0:63:
         99:29:dd:9c:f5:2b:11:9a:4d:e1:e2:88:29:57:f7:bb:91:81:
         79:16:36:ed:20:bf:13:e7:8d:78:66:6d:2b:81:19:b1:18:01:
         06:35:d6:a8:5d:2d:71:7f:41:68:9c:6d:56:c7:0c:bb:0b:08:
         13:1c:fa:2d:77:fc:79:b0:0b:dd:ec:e0:98:a2:4e:7a:82:fa:
         92:f6:a7:46:3a:2e:eb:6b:75:80:c0:bf:d4:3c:3e:90:50:e7:
         29:d5:27:a0:13:c1:cf:b7:36:5a:22:27:d4:34:3c:c7:f7:b5:
         7b:5e:55:ac:04:59:76:1f:14:f2:bc:8d:96:69:a3:ae:85:5d:
         ab:44:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:36 2026 by rpki-client