Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File:                     9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier:          bZLJoXqtli4gxvPyZ5kbZmGEfOBZZsIqWMcqVIQKf6M=
Subject key identifier:   A1:BE:05:BF:0E:6A:33:89:9C:31:53:0D:C4:05:5E:22:0F:90:CC:B2
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer:       /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial:       019E20920A4F8D573EFA3E860D55D6708046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number:          181D
Signing time:             Wed 13 May 2026 09:01:41 +0000
Manifest this update:     Wed 13 May 2026 09:01:41 +0000
Manifest next update:     Thu 14 May 2026 09:01:41 +0000
Files and hashes:         1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: sSpS0A1L+TeURymdK0WIxWo8AvIEAAnKftXb/m5wHw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:0a:4f:8d:57:3e:fa:3e:86:0d:55:d6:70:80:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
        Validity
            Not Before: May 13 09:01:41 2026 GMT
            Not After : May 14 09:01:41 2026 GMT
        Subject: CN=a1be05bf0e6a33899c31530dc4055e220f90ccb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:9d:8c:e5:a2:43:d1:42:c3:c4:a0:51:7d:
                    78:c1:ae:30:cd:6c:17:0a:d1:c4:19:43:20:38:b2:
                    c8:7a:f2:18:4d:18:ac:23:4b:1f:f1:0d:59:50:8d:
                    c7:cf:2e:c8:3c:96:90:7f:e1:bc:68:39:e0:4c:53:
                    db:59:69:a1:53:56:9e:96:5b:0d:b6:98:ce:b3:36:
                    b8:63:c9:7f:00:67:e6:af:6a:b4:b0:0d:5a:6f:7b:
                    ca:ba:75:c0:eb:17:d4:d2:d4:bb:2d:19:5b:47:96:
                    22:39:f7:94:86:74:6b:b4:03:97:06:15:12:a7:00:
                    d2:54:dc:51:f9:4d:b2:17:cb:99:59:f7:87:d5:95:
                    e5:f6:db:0f:1c:13:74:f9:f5:13:81:9a:06:07:94:
                    f8:95:65:70:2d:25:c9:4b:85:15:00:e3:fe:98:bb:
                    1b:fe:c4:a5:7c:d2:c8:2c:da:08:fc:52:f3:2a:64:
                    7e:c9:aa:6a:16:a6:da:99:8f:bf:f3:d4:8f:7c:8b:
                    bf:5b:74:6f:f2:20:f0:b2:1c:59:83:db:86:11:db:
                    1f:5b:1d:f0:16:f8:19:74:ee:62:c9:46:ac:c1:58:
                    f5:c6:d4:04:05:ee:f2:7b:c1:bf:75:92:10:2d:81:
                    40:61:6a:04:f2:d7:74:03:4d:21:d1:1c:6b:1c:2e:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BE:05:BF:0E:6A:33:89:9C:31:53:0D:C4:05:5E:22:0F:90:CC:B2
            X509v3 Authority Key Identifier:
                keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:e2:1d:42:78:04:1d:35:9b:fc:9b:0e:26:a2:d1:86:49:
         45:cf:70:27:7b:d4:8b:19:6d:04:e7:3a:e4:cd:3c:6d:57:f2:
         df:64:83:75:ff:3d:b0:3b:a0:a6:c3:db:9e:29:81:4c:6c:b0:
         53:d0:c7:ef:d9:24:b3:cd:43:99:b9:7e:3d:ff:bf:b0:54:18:
         7c:dc:52:52:b0:1e:76:22:98:63:d9:53:9c:6e:75:59:cf:cf:
         5c:a6:d8:d6:d0:a5:d2:e7:2e:c8:56:a0:a2:65:89:d1:0a:38:
         58:5f:a5:7b:42:e3:78:d9:0b:1a:04:84:c5:68:22:1b:53:4f:
         aa:25:13:4b:4a:17:a7:90:be:10:20:6b:32:9b:7d:7a:45:4b:
         2e:b7:b1:3f:dd:f8:f8:bd:e5:d8:54:f6:9a:0b:0c:01:84:fb:
         4d:80:61:1e:b4:c5:77:bd:29:ed:5f:25:6e:0a:09:92:d6:c1:
         46:97:70:7d:90:cb:82:8c:7a:87:a4:d9:42:9b:c5:62:1e:89:
         a0:a1:b4:d8:90:b5:20:56:6c:96:08:6a:af:01:27:35:fc:3a:
         ba:41:7b:61:91:d6:d6:1b:7b:05:8c:44:9e:9b:c6:92:0b:7a:
         9b:9f:84:32:e3:3f:ce:f5:a0:3f:ef:db:18:dd:ed:29:11:c7:
         2c:ab:3a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:23:30 2026 by rpki-client