Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File:                     9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier:          M2NlsJi+V4tmK1iLJA6YXcCyafjc3wHFA43kroWBjmE=
Subject key identifier:   92:0D:A3:84:CA:98:31:B7:8D:B2:46:0C:B1:A7:26:00:CE:7C:41:D5
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer:       /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial:       019E2F5F70DD19EC6312F8F6CF8287A033A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number:          17BF
Signing time:             Sat 16 May 2026 06:00:44 +0000
Manifest this update:     Sat 16 May 2026 06:00:44 +0000
Manifest next update:     Sun 17 May 2026 06:00:44 +0000
Files and hashes:         1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: m8dzT+CJjVyyDjARhX2hiGjCwy8sO32pLebU7HTBgNE=)
                          2: ZZanlFxScyN4CQoGhBTQl2sVxVg.roa (hash: A34wmEZaQFDCuGsNd+TzvMoOwERkMP/gXQVur9pCPCA=)
                          3: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (hash: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4=)
                          4: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (hash: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:70:dd:19:ec:63:12:f8:f6:cf:82:87:a0:33:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
        Validity
            Not Before: May 16 06:00:44 2026 GMT
            Not After : May 17 06:00:44 2026 GMT
        Subject: CN=920da384ca9831b78db2460cb1a72600ce7c41d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:fa:fc:66:7f:af:6d:74:17:9f:40:85:11:
                    e4:c8:a3:4b:22:7a:8b:11:d1:64:e2:15:b4:8a:58:
                    be:ec:79:59:61:c7:43:71:ac:4b:bd:c5:51:ad:12:
                    8f:62:92:23:20:0f:d2:2b:ff:83:c8:9e:de:e1:4d:
                    4a:7a:39:9f:f7:71:48:33:0c:37:73:4a:30:ae:de:
                    e5:00:27:85:31:ae:d3:7a:40:8c:d5:94:f9:17:e4:
                    98:1c:4b:d4:4a:7c:f7:bd:8d:7a:c3:2f:71:d3:89:
                    dd:41:05:77:ae:09:a4:2f:b7:f5:c6:2a:ce:f8:07:
                    4c:94:f4:68:b8:06:6f:84:99:b6:a5:eb:03:1d:99:
                    7d:bb:ed:e8:14:9b:d3:a9:29:27:2f:a8:51:a0:2d:
                    2c:8e:f1:45:29:dc:b6:c6:9e:a0:5d:8d:c2:da:f3:
                    9d:86:7a:8c:67:89:4a:80:f7:c4:6b:a6:07:99:33:
                    ec:27:b3:93:a8:ce:e8:12:98:fe:20:89:8f:5a:bb:
                    1e:65:63:67:81:1a:2f:5e:d1:aa:ed:f4:3a:bc:d3:
                    4a:73:c9:d1:a1:ef:06:ff:28:e7:aa:5d:26:1e:ca:
                    5b:5a:41:2d:eb:81:2b:4f:d1:d5:84:15:fe:0d:71:
                    fb:90:5b:17:a9:b2:02:99:04:82:52:69:80:59:9c:
                    32:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:A3:84:CA:98:31:B7:8D:B2:46:0C:B1:A7:26:00:CE:7C:41:D5
            X509v3 Authority Key Identifier:
                keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:05:06:a2:c1:3b:f7:bf:93:9f:a0:1c:57:e5:3e:a2:f1:fd:
         3d:e7:b6:57:10:2a:02:90:34:cd:94:c8:82:c5:02:d3:37:ef:
         64:aa:65:fd:08:aa:85:4b:c5:8d:af:1b:0b:e5:7d:67:50:e8:
         6e:b1:4e:ff:b6:82:83:91:63:f1:0c:56:4f:d9:34:c4:3d:04:
         83:2f:a3:90:2f:52:fc:fd:58:43:d3:7f:37:b3:99:fc:2a:54:
         36:97:17:ee:48:fc:c9:1f:9d:f0:70:fd:80:c1:86:a6:ca:bb:
         36:25:0e:21:2d:55:c5:89:5f:eb:67:a4:07:11:7a:be:2f:8a:
         f0:2a:c6:f7:f9:6a:d4:ee:61:e4:7a:fc:d5:57:4b:f3:18:fe:
         28:6f:18:df:d6:ec:09:bf:16:4e:10:9f:be:ae:7a:b4:b9:0c:
         4b:6b:51:c4:3d:19:66:b8:19:54:b4:4d:ff:d2:f5:c8:1d:27:
         a8:07:e7:25:bb:43:8b:49:e6:95:52:82:a1:2f:63:86:eb:ce:
         0c:56:c6:54:a3:2c:52:c2:11:ec:cc:e5:1a:fc:f7:17:7f:9f:
         fc:1d:57:9c:54:52:90:a1:1d:0c:67:4f:99:fc:2e:7b:92:06:
         76:2f:54:19:60:95:cb:53:8c:d4:5b:00:30:93:f5:dd:1a:9a:
         42:26:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:38 2026 by rpki-client