Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File:                     9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier:          DGIsI+158lCE7jgrPzPONktOa1Nd3vAZYCWMXl6oWnE=
Subject key identifier:   16:79:82:F0:B6:21:E2:25:07:D6:8F:FE:BD:2A:85:7E:9F:6B:5F:87
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer:       /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial:       019E1DC7195DE7D3CF31F663D292FC2DD557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number:          06DC
Signing time:             Tue 12 May 2026 20:00:47 +0000
Manifest this update:     Tue 12 May 2026 20:00:47 +0000
Manifest next update:     Wed 13 May 2026 20:00:47 +0000
Files and hashes:         1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: lpR97eDbXszkogAMv6twb42B7yPPvpNplCV5WusD2cY=)
                          2: e6cQAttr2HmbOlTBbjKV_2JWo0Y.roa (hash: m4yGQd55Wkn8/VNQHSMkT2U4sSayeuVDo4mzhAL262I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:19:5d:e7:d3:cf:31:f6:63:d2:92:fc:2d:d5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
        Validity
            Not Before: May 12 20:00:47 2026 GMT
            Not After : May 13 20:00:47 2026 GMT
        Subject: CN=167982f0b621e22507d68ffebd2a857e9f6b5f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:a7:5e:bc:0e:66:2f:94:84:bd:f7:8b:1a:
                    d8:79:f5:fb:fb:5e:bb:e7:02:71:08:fb:45:72:6f:
                    42:7e:68:97:96:53:12:93:a5:c8:29:82:dd:53:ea:
                    05:5f:ed:35:28:9c:2d:d1:dc:27:42:6e:91:8d:d4:
                    3b:9c:b9:a8:8e:9a:72:d8:2e:14:f6:ce:75:c9:8c:
                    d3:11:5f:0f:3b:b9:77:3c:21:15:a4:8c:10:da:96:
                    cb:06:dd:b0:f0:9d:ab:f9:ed:36:84:31:81:c7:96:
                    45:ee:94:0c:5d:38:68:6f:e6:09:5d:51:5e:7e:84:
                    c4:12:7a:a4:bb:ad:95:d5:11:ac:1e:52:75:7d:fa:
                    ef:dd:b8:97:ed:8e:12:f1:dc:fc:2a:fc:38:b3:2c:
                    20:d9:a4:96:aa:a6:1a:80:2d:57:bb:bb:04:0e:d7:
                    a2:63:72:c4:c3:da:57:ef:38:00:8b:2f:e2:a9:3d:
                    6c:2c:ab:c7:b8:6b:22:d1:e9:ce:13:0f:f3:e6:dd:
                    f9:f1:06:2c:3d:ee:ed:fb:39:98:ad:4b:76:f2:e4:
                    81:91:62:5f:c0:c2:8b:f2:65:38:93:bb:ec:72:c9:
                    d6:83:ed:af:38:17:d7:75:6f:2f:4e:e3:bf:1c:85:
                    5a:a2:dc:8b:a0:ea:7b:06:9c:60:82:0d:18:12:f1:
                    83:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:79:82:F0:B6:21:E2:25:07:D6:8F:FE:BD:2A:85:7E:9F:6B:5F:87
            X509v3 Authority Key Identifier:
                keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:20:82:da:3f:0b:7b:34:7a:e8:c8:e7:00:33:14:03:d4:67:
         0e:b4:15:6c:c5:d1:78:a8:6f:f7:08:74:a5:1d:13:10:d7:76:
         ec:d5:72:82:45:bf:c2:c2:6a:5f:5c:c3:ea:1e:e6:ee:6b:ec:
         08:c1:dd:27:79:72:88:62:8f:32:90:25:06:f6:5b:9d:d1:02:
         f5:a2:d1:22:69:cd:e0:be:74:dd:d0:37:cc:f3:7d:6a:54:0c:
         c3:0a:84:b7:df:1c:37:9e:22:3d:80:d8:f1:9d:81:0c:4b:f6:
         fb:70:06:ad:f7:bf:96:0c:bb:b9:66:80:31:0b:c9:51:e6:c3:
         7c:3f:30:9a:03:97:58:3d:b1:5b:91:01:59:d2:8a:7f:e2:ba:
         1c:77:1a:af:65:d9:f4:73:77:37:b5:a6:e1:76:5d:84:4d:f9:
         fd:4d:6b:38:87:3a:eb:72:ee:d2:9c:be:42:b9:a1:df:7f:b5:
         c1:34:2c:94:2d:c2:84:c5:83:f2:78:53:44:3b:39:54:52:a6:
         78:d3:ae:ff:66:8a:d3:f7:09:05:9b:b9:85:07:d4:27:b9:3a:
         32:10:4c:d7:45:e5:d6:d0:3e:c1:f8:04:01:7d:bf:e1:cf:59:
         e5:00:d7:e9:26:c7:33:c6:46:42:09:c4:7b:4d:39:4d:d9:49:
         ec:94:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:28:30 2026 by rpki-client