Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File:                     9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier:          +e8NSO7HijluzqVCDnKKD/tJdY54qbvkeZXcLnQ/hkQ=
Subject key identifier:   90:65:01:F5:7F:6E:B4:7E:AC:A8:54:25:EA:D2:FC:CF:50:62:5B:68
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer:       /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial:       019E1FECF67FE7E521768005FBBBD3838D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number:          040D
Signing time:             Wed 13 May 2026 06:01:23 +0000
Manifest this update:     Wed 13 May 2026 06:01:23 +0000
Manifest next update:     Thu 14 May 2026 06:01:23 +0000
Files and hashes:         1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: YW4Ulj4iPKYztrReWINm6UG7a1ovNsIhkEO6iBqGba0=)
                          2: wxYzOEFFE7ZvQ_jUpzfcf7qWdJY.roa (hash: zi/D1IuQaIKBqfBUtIU/P0ojOtlc8op63UfckXGc4cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:f6:7f:e7:e5:21:76:80:05:fb:bb:d3:83:8d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
        Validity
            Not Before: May 13 06:01:23 2026 GMT
            Not After : May 14 06:01:23 2026 GMT
        Subject: CN=906501f57f6eb47eaca85425ead2fccf50625b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:89:c8:2a:a7:2a:bb:9b:b9:fe:00:e1:80:
                    ac:80:1a:0e:72:33:b4:e6:33:29:55:d5:a9:00:27:
                    c3:7c:07:4d:94:13:16:3a:c2:cf:d4:a4:8e:72:81:
                    86:3c:0e:04:74:5c:7f:f9:96:54:9b:99:71:d9:9f:
                    b8:8a:93:13:05:b6:ff:c8:f6:44:a8:10:69:d9:4b:
                    ee:14:b3:c6:1e:00:9a:8b:42:50:27:e1:c6:65:35:
                    b6:6a:68:70:ca:11:ec:b6:81:f1:98:5a:af:59:a8:
                    ee:d6:42:5a:8b:e5:2f:4d:bc:3f:ad:e7:c2:ec:2d:
                    82:32:20:f3:be:3d:51:09:79:a9:02:fc:02:41:13:
                    85:eb:60:5e:cd:85:5d:f6:77:78:75:ce:49:37:58:
                    df:f9:19:b1:b1:98:81:83:a6:8c:7e:6c:8c:31:0c:
                    91:85:ee:3c:a8:e1:f9:bc:80:8a:5a:ba:72:b5:fb:
                    27:5d:d3:ca:43:90:ce:3f:ba:37:9f:79:9b:0e:94:
                    5f:0c:0e:95:10:d7:92:17:15:62:47:6f:18:25:10:
                    ea:00:a4:b1:39:f9:0a:69:55:97:99:1f:91:c1:99:
                    05:3b:94:10:23:66:31:c9:e6:1d:96:b8:2c:d5:e6:
                    a2:f2:f1:f4:9c:35:3d:5a:c1:b3:b6:73:05:dd:07:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:01:F5:7F:6E:B4:7E:AC:A8:54:25:EA:D2:FC:CF:50:62:5B:68
            X509v3 Authority Key Identifier:
                keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:11:9f:6e:72:5c:6e:d5:13:25:e1:0c:b8:a2:bb:59:ab:fe:
         82:c9:d7:d3:37:cf:9d:c6:f7:e8:0d:39:69:cb:d3:6e:0a:24:
         1c:7a:ef:40:01:71:52:7d:71:4e:10:9b:40:45:34:4e:57:c9:
         f7:68:d1:b7:93:60:40:62:50:b4:07:72:82:4d:c8:4c:b4:01:
         93:c0:45:79:b0:c3:c7:d8:4c:f0:6a:9a:a1:6a:b9:d3:9b:b4:
         3e:6b:00:a6:58:6d:f9:2d:3c:c7:cc:3f:d5:f1:6d:e8:13:55:
         05:10:f4:84:b8:90:62:cd:eb:55:6f:ec:c7:1c:5b:ef:fd:f0:
         ff:14:4b:6d:e6:c0:53:ef:c3:16:c2:85:9d:fc:22:d8:cf:1c:
         96:af:2a:ad:46:4f:55:ec:33:86:e5:4e:cc:02:49:46:ca:85:
         f9:ae:f2:8e:9f:65:b3:2f:ea:55:a7:2c:b4:d5:c0:79:73:47:
         85:9c:d2:f6:3d:0c:b2:9d:bf:9a:9a:6f:be:5c:26:51:ab:e7:
         05:ac:32:c8:a1:ae:6b:09:77:e8:f0:77:c1:92:3b:cf:af:95:
         70:79:1d:b7:bf:d8:27:12:db:74:52:2f:e7:e5:44:aa:32:8d:
         1e:af:03:db:12:97:a6:3d:de:d6:c1:bd:0f:b5:87:84:a4:e8:
         32:85:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:32:02 2026 by rpki-client