Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File:                     9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier:          ZV812zhmj3jcyM41ZA/RDah4okEtQY4S+qO9wKFHUVQ=
Subject key identifier:   1A:C4:AD:96:B2:DB:C3:60:84:7B:5F:EA:B1:C6:8F:7E:7D:34:89:1E
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer:       /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial:       019E2FCDC6F77BBBA38E200E3E0C460FC5E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number:          0628
Signing time:             Sat 16 May 2026 08:01:15 +0000
Manifest this update:     Sat 16 May 2026 08:01:15 +0000
Manifest next update:     Sun 17 May 2026 08:01:15 +0000
Files and hashes:         1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: JKwPw3VTDP3RdLhHy1NW/QlkNG+6B8ZT34C0jQwKMZU=)
                          2: ha9gNtI2Det0BHkc3WoBLr_4eN0.roa (hash: 3ZwCki1NyOWEqytxpVSycbqzMVm9+ptmvP6m+BbcDfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:c6:f7:7b:bb:a3:8e:20:0e:3e:0c:46:0f:c5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
        Validity
            Not Before: May 16 08:01:15 2026 GMT
            Not After : May 17 08:01:15 2026 GMT
        Subject: CN=1ac4ad96b2dbc360847b5feab1c68f7e7d34891e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:e5:dd:ce:8c:2e:f5:d3:f4:1d:24:7e:92:
                    cf:46:98:74:44:1b:4e:35:39:b8:28:0b:38:8e:38:
                    5d:4c:f5:41:47:e0:ef:31:1a:81:37:a8:9d:fc:33:
                    24:85:ca:ee:aa:db:59:a5:17:c9:3c:d6:be:48:f5:
                    e4:07:c1:99:a4:83:11:40:f2:39:5c:94:d0:85:c7:
                    64:9e:e5:5a:ca:07:22:e7:07:27:33:e3:be:44:db:
                    fd:a5:15:32:ec:1a:88:b9:9c:39:a2:1a:49:c2:28:
                    d8:e6:ef:54:bb:44:c0:ca:dd:97:66:11:12:42:9c:
                    49:ee:78:fe:aa:1a:c0:13:5e:d3:e3:e4:c0:74:a9:
                    0b:1e:8a:87:a6:29:69:99:fe:b2:d9:78:05:59:6b:
                    1b:6e:7e:54:32:cd:31:07:dd:a0:60:ed:09:6b:d3:
                    1d:26:16:89:fd:b4:5f:00:77:4b:a9:70:f5:bd:3f:
                    90:15:bf:59:0b:04:b4:ed:c7:e6:cb:8a:ff:68:16:
                    66:20:32:7e:73:03:e4:7c:22:ac:3b:b5:eb:47:90:
                    8e:df:56:ec:0a:6b:23:4c:5f:9e:9d:a6:94:1b:63:
                    d3:38:14:49:10:58:92:51:61:8f:68:85:7c:0b:43:
                    cc:2d:06:2e:11:30:e0:e1:7a:50:6c:7d:63:3b:1e:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C4:AD:96:B2:DB:C3:60:84:7B:5F:EA:B1:C6:8F:7E:7D:34:89:1E
            X509v3 Authority Key Identifier:
                keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:e3:8b:0a:9e:bc:b1:b3:d6:df:51:cc:31:f9:13:7e:c5:
         29:39:44:f8:d9:06:04:62:e9:82:2a:cb:b5:64:00:07:1f:8d:
         79:7a:7e:d0:a7:6f:f5:68:37:49:b0:bc:14:c2:a5:48:34:2e:
         a9:46:6e:e4:34:31:bb:e4:dc:96:e8:f8:51:3d:93:67:d4:3f:
         55:af:63:ff:1c:de:12:50:45:47:3d:1a:cd:8b:1f:52:18:9d:
         cb:86:a3:18:26:cd:ae:f2:ce:a7:af:c0:f7:22:83:8d:94:28:
         c5:36:dc:99:89:96:80:84:19:bf:11:8c:50:53:f7:01:49:cd:
         35:82:ad:9d:44:f0:9b:db:2a:0b:79:03:74:8c:a9:23:67:85:
         a4:04:65:33:c0:f1:e8:49:5c:ea:9c:6a:77:df:ef:8f:00:8a:
         cb:a3:9d:65:89:44:70:49:6a:f5:6a:70:e7:d1:84:2e:3a:88:
         c5:fa:f8:c5:1f:7c:ef:52:66:18:1f:f5:38:97:c4:8b:8b:ef:
         86:6a:d1:a5:8c:cb:17:fe:80:8a:a0:4c:85:ed:03:6f:96:b8:
         38:df:bb:93:61:0a:af:ed:3e:74:26:4a:b3:c1:a1:63:51:32:
         3e:6d:af:a3:0c:ca:69:09:f7:55:7a:22:cd:fe:ab:3f:a3:2b:
         e9:4c:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:35 2026 by rpki-client