Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          TB6QRBdH3d3DdeXDh5327RFYP8a7V0U78rNOUUbiqEc=
Subject key identifier:   8E:6C:2E:A8:BB:3C:3D:2A:EF:F5:BA:27:EE:98:29:46:9F:06:CD:AB
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       019E20922F405F58959B572DCDF57B2D3579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          1904
Signing time:             Wed 13 May 2026 09:01:51 +0000
Manifest this update:     Wed 13 May 2026 09:01:51 +0000
Manifest next update:     Thu 14 May 2026 09:01:51 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: oXzjPzgeG6IvSulauXI2/Avr2EOlL36uSbNx98aW8Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:2f:40:5f:58:95:9b:57:2d:cd:f5:7b:2d:35:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: May 13 09:01:51 2026 GMT
            Not After : May 14 09:01:51 2026 GMT
        Subject: CN=8e6c2ea8bb3c3d2aeff5ba27ee9829469f06cdab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:34:14:40:c3:59:a2:67:a5:fe:68:6f:38:
                    b7:20:b5:80:18:ea:09:2c:f6:cd:ab:f1:44:d3:df:
                    4c:5e:ab:21:7d:a6:fc:ad:97:f0:b8:9b:f6:d3:38:
                    86:c1:a5:89:66:f4:13:88:9e:47:f8:3a:35:9a:d1:
                    9e:8d:1f:aa:51:c9:a6:a8:bb:ce:8e:25:c8:6a:ba:
                    f2:51:91:70:bc:00:cb:ac:a5:2f:2c:ed:97:34:05:
                    a4:d7:e0:a1:d8:d0:af:25:37:f6:89:fb:1f:4b:60:
                    b6:ad:1c:69:bf:06:f8:d5:0d:ee:8f:06:23:55:1c:
                    33:1a:c5:c3:d0:1b:9a:3d:25:09:09:31:65:12:e9:
                    52:4d:db:26:00:1d:f6:54:81:11:b4:69:f2:31:6d:
                    98:d0:55:8f:91:a0:e1:e2:1b:fb:ce:9f:e3:79:05:
                    bb:a0:ed:fd:60:bc:c0:ad:38:a7:d3:ec:ad:5b:11:
                    48:dd:93:db:cd:9c:9d:29:1e:d8:ab:ca:1a:37:38:
                    29:c0:cc:27:11:47:eb:08:92:c2:b0:4f:8c:fc:c0:
                    67:62:23:e9:c0:a9:5d:25:56:3c:b2:0e:4d:1f:c3:
                    3e:4b:e1:56:48:f5:94:3c:91:52:ee:ee:41:00:36:
                    1f:65:9b:aa:a3:2d:30:67:a6:68:de:e7:08:c2:dc:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6C:2E:A8:BB:3C:3D:2A:EF:F5:BA:27:EE:98:29:46:9F:06:CD:AB
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:71:c0:14:a1:b8:73:18:74:9f:b0:2d:bd:55:80:f4:fa:ae:
         50:61:51:5b:50:78:02:80:ab:72:0e:7f:b4:2e:67:15:ce:d3:
         0d:35:ec:be:d4:c0:9c:0d:27:93:1b:9e:b0:0f:ef:35:1e:d6:
         13:fb:83:20:52:c0:5b:ce:8e:c6:45:df:e0:fe:3e:8d:df:2f:
         99:e6:db:00:bf:0c:29:28:5b:fa:dd:38:86:af:bb:19:9a:61:
         94:45:9d:18:97:92:b4:17:c7:fa:e7:ef:cc:00:28:39:9e:97:
         50:db:35:56:62:56:13:bb:6f:32:64:9c:f3:dd:fe:a7:8d:bd:
         67:65:3c:65:57:67:b2:d6:85:0f:a6:c0:b6:69:23:82:99:1c:
         d7:ae:a8:aa:de:8f:f7:09:6b:f3:9a:9f:16:3a:1d:73:80:32:
         c7:2c:37:d2:7c:99:28:36:60:ab:8d:c1:61:c3:c1:7f:2f:a6:
         e6:9a:e5:16:93:e1:85:d8:ba:95:01:99:f5:d3:43:09:c6:dc:
         c0:8d:e4:fb:13:07:7e:2c:fa:b1:7c:4b:9a:e9:39:85:8f:3c:
         c5:6a:24:bf:76:4e:66:e9:6d:43:07:a8:5b:4d:67:97:85:37:
         c7:b5:e9:e7:a3:cc:ad:09:0b:3c:9c:74:c5:f1:ae:fc:34:46:
         e0:e5:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:48 2026 by rpki-client