Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File:                     9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier:          ItdSRHdyFgSXRLEif+8ZTb38pG+IWF2OAC9aZ8jCFd8=
Subject key identifier:   E3:48:DA:EB:D3:00:DC:FC:ED:D6:45:D8:69:D5:B3:70:03:4C:03:11
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer:       /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial:       019E314E2414269B37273290EC6295BEAB5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number:          0C42
Signing time:             Sat 16 May 2026 15:01:04 +0000
Manifest this update:     Sat 16 May 2026 15:01:04 +0000
Manifest next update:     Sun 17 May 2026 15:01:04 +0000
Files and hashes:         1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: 4Io8n1GIe4wzrbuvxbz7SvrEsYB+wS+0LHmCgFEaizQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:24:14:26:9b:37:27:32:90:ec:62:95:be:ab:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
        Validity
            Not Before: May 16 15:01:04 2026 GMT
            Not After : May 17 15:01:04 2026 GMT
        Subject: CN=e348daebd300dcfcedd645d869d5b370034c0311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:3b:db:76:ed:3b:1f:f9:32:94:5a:bb:ec:
                    4a:9f:31:8e:75:48:d3:9d:ae:d0:e2:5a:88:bc:4a:
                    c1:bb:e6:40:05:25:34:a3:19:fe:de:78:94:79:13:
                    b4:5e:e3:a5:fb:46:0b:4c:64:fe:8f:6f:d3:41:15:
                    16:e3:5a:dd:5b:dc:9a:ad:ed:30:54:de:11:6f:d5:
                    77:33:4d:ba:d4:6c:7e:45:11:bc:61:83:1f:6a:4a:
                    7e:18:39:16:ac:e3:da:3b:85:67:0e:0a:65:cc:e2:
                    97:d0:be:46:47:f5:4a:c5:9e:d1:11:7c:c7:3a:d2:
                    e0:19:9a:24:73:ec:7b:a4:75:5d:60:d5:82:86:71:
                    ee:4c:4d:77:c9:8d:f1:3d:9d:be:ea:c7:c8:ab:21:
                    37:42:f7:e6:87:14:ff:fe:cf:ce:cf:55:02:3a:8d:
                    06:17:d1:9a:68:7f:ed:90:59:1a:8b:ed:55:6c:5e:
                    97:a5:4a:90:d7:15:01:b4:18:e1:72:e8:b8:32:87:
                    48:54:6e:05:d6:d8:d4:0f:e3:05:29:45:cc:2f:d2:
                    e5:5b:d8:1b:5f:da:f9:c5:9f:1a:53:83:d3:e8:15:
                    52:1e:10:f7:0b:b6:33:a6:0c:05:48:bc:fc:ce:d0:
                    21:28:08:f8:c8:60:cf:1b:80:ce:bc:c2:1a:89:c1:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:48:DA:EB:D3:00:DC:FC:ED:D6:45:D8:69:D5:B3:70:03:4C:03:11
            X509v3 Authority Key Identifier:
                keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:1a:cb:95:9f:ce:5c:ac:a8:2c:c0:58:1a:63:ca:90:29:
         6f:9a:4f:25:df:7c:e5:46:09:b3:25:cf:1e:f1:a0:1c:c6:54:
         98:a6:f8:c9:6a:75:75:84:d0:91:34:10:45:26:a3:cd:07:df:
         be:86:b4:b3:08:cc:60:e1:3a:61:08:34:dc:a1:9f:d4:44:8e:
         57:3d:46:aa:11:d3:c7:f5:27:6b:9d:34:d9:e4:7a:ad:93:f8:
         37:09:7d:c0:ac:b5:b2:4d:48:dc:77:0d:a4:f6:47:00:95:b5:
         ea:6c:18:fd:e8:e4:7f:d6:2f:be:b1:c3:30:b6:d0:19:e3:44:
         39:65:d8:30:a9:1a:8c:43:da:28:4d:ff:fb:3c:f4:6f:52:2c:
         2d:dc:e6:e4:99:c8:1c:82:ed:b4:26:5a:fb:09:7e:d1:b8:88:
         c7:d3:4e:89:50:91:0b:01:2c:02:e2:4a:11:54:82:61:f7:7b:
         16:5c:61:11:81:ae:b6:34:81:03:ba:a2:82:23:a8:e9:a3:e0:
         c3:33:1b:d4:eb:5f:0c:9a:6b:cd:92:56:ee:64:85:55:ea:96:
         c5:75:03:18:ef:6c:0e:65:be:70:f4:de:69:1a:8b:40:5a:6c:
         90:b4:77:6d:b5:f5:30:ef:67:e4:53:e9:5b:0e:22:ff:24:e8:
         5e:5a:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:44 2026 by rpki-client