Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File:                     9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier:          P6D+x1hYUvhA3+sddmgKeEHmTF07rPykMcKTcH77Nn0=
Subject key identifier:   84:64:CE:DA:E1:35:F9:AF:B8:55:3C:B0:BB:20:52:7C:4E:E5:4F:4E
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer:       /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial:       019E30DFFED1CE76144FA94BD1093630FB67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number:          0CF1
Signing time:             Sat 16 May 2026 13:00:46 +0000
Manifest this update:     Sat 16 May 2026 13:00:46 +0000
Manifest next update:     Sun 17 May 2026 13:00:46 +0000
Files and hashes:         1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: JCpsSvrk2phaM/TYj1ZhJ24F3wihheldw6LsV0r5/xo=)
                          2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:fe:d1:ce:76:14:4f:a9:4b:d1:09:36:30:fb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
        Validity
            Not Before: May 16 13:00:46 2026 GMT
            Not After : May 17 13:00:46 2026 GMT
        Subject: CN=8464cedae135f9afb8553cb0bb20527c4ee54f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:50:7f:05:34:f8:01:3f:d7:44:b7:95:04:
                    4d:b5:61:39:93:6c:5a:2b:ee:df:9f:c9:21:87:71:
                    9d:dd:45:77:77:f9:01:f0:88:8f:2c:2a:38:f8:7a:
                    23:2d:3b:09:94:fb:ca:82:d0:f9:3f:f6:9d:02:de:
                    9c:60:84:02:da:75:38:b6:c2:f4:61:ef:5d:d6:f6:
                    c5:1e:00:4e:fe:7b:18:e0:34:88:d2:d1:34:4f:5f:
                    b3:67:42:b8:ed:7d:88:12:ea:ce:62:8a:45:a5:8f:
                    7c:aa:58:68:68:91:57:a9:8d:05:4f:02:67:47:62:
                    0a:dd:fc:92:a3:69:ea:22:24:48:50:b0:21:9e:3a:
                    dc:b3:70:3f:a2:04:d9:fa:0f:3d:73:38:ab:37:d6:
                    f4:ef:c3:5d:c6:cd:ae:02:af:b5:a8:b5:b4:05:86:
                    9d:bd:57:46:02:dc:fd:1f:03:f6:36:03:cb:11:85:
                    2c:c0:fe:e2:72:ae:a9:73:dd:a3:47:ce:31:de:2b:
                    62:23:06:f2:51:96:cd:c0:d4:2f:fd:50:f0:45:63:
                    c5:48:13:62:91:c5:97:58:0b:37:f6:0f:12:30:3c:
                    ca:3c:3e:62:b2:5a:bc:82:e8:93:05:3c:34:1a:c0:
                    d0:34:e1:4f:32:70:cc:6f:c7:0b:2f:4c:e7:47:7b:
                    dd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:64:CE:DA:E1:35:F9:AF:B8:55:3C:B0:BB:20:52:7C:4E:E5:4F:4E
            X509v3 Authority Key Identifier:
                keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:b2:a5:fe:3f:72:ce:89:c7:a2:34:78:de:ae:1a:6c:c1:
         d3:60:d3:c1:38:9a:38:a8:59:35:ee:66:35:6d:76:30:a5:98:
         69:19:b9:49:d7:71:59:fd:46:da:2d:54:89:de:96:da:0b:e4:
         64:37:d9:f7:d7:af:8b:79:25:d9:89:d1:52:f7:14:d9:86:21:
         cc:21:49:7f:5d:4c:1d:f4:f3:57:62:98:55:c9:97:c0:8d:4c:
         1d:ca:17:58:a4:d1:d6:66:6b:0f:d8:7a:fe:a3:ce:2a:e5:ce:
         86:cb:58:12:6c:2d:e7:fe:6d:02:b2:dc:43:b8:7b:ff:53:9e:
         41:bf:9d:2b:e2:88:e9:63:95:c1:1c:0f:ad:6f:47:a1:d9:a4:
         39:38:d8:eb:b3:4c:d8:35:0d:a5:08:c2:7d:57:37:43:1a:8d:
         c3:54:fb:e9:a4:84:50:df:f7:b0:ad:31:e9:25:63:75:ec:b0:
         78:b3:3d:b4:28:f0:86:62:6a:45:0f:a4:92:05:2a:94:3c:d4:
         45:22:af:af:e1:52:09:83:b5:18:fd:d8:13:df:72:9f:c3:da:
         40:e9:d3:b2:f2:f3:e1:2a:63:fa:b0:3c:7a:d9:b3:35:cc:98:
         a0:0c:4c:09:f1:a9:d2:5f:1b:d6:c2:3f:e3:b5:db:02:9c:7b:
         02:00:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:13 2026 by rpki-client