Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File:                     1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier:          tcIL7ncMeRK5CZGiaRDNHR1GQbRcb3EMOvCMMe2grZI=
Subject key identifier:   DA:E7:B7:0C:FD:00:07:5A:39:7D:AD:C8:AF:56:F7:37:55:60:ED:29
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer:       /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial:       019E1C10239AF9A1ABCF8893D4AF7BF5CB9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number:          119E
Signing time:             Tue 12 May 2026 12:01:20 +0000
Manifest this update:     Tue 12 May 2026 12:01:20 +0000
Manifest next update:     Wed 13 May 2026 12:01:20 +0000
Files and hashes:         1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: yfL2LkKFA8bBuNU6DB2nQ91yYEv9fVfGOiuEzoDeLI8=)
                          2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:23:9a:f9:a1:ab:cf:88:93:d4:af:7b:f5:cb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
        Validity
            Not Before: May 12 12:01:20 2026 GMT
            Not After : May 13 12:01:20 2026 GMT
        Subject: CN=dae7b70cfd00075a397dadc8af56f7375560ed29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:9c:32:77:50:4b:59:45:70:6f:f6:88:fa:
                    f5:d8:1c:0a:34:e9:53:0b:71:50:14:6c:7b:38:81:
                    61:85:7b:ac:9a:37:38:59:0c:6f:b3:f3:b2:94:bf:
                    86:7c:da:eb:1c:c5:85:30:b6:c2:8c:17:72:a4:cc:
                    93:d6:df:09:a4:fa:19:fa:0d:b2:e4:88:12:b9:2a:
                    c9:77:06:f4:cd:ae:4f:19:b6:be:65:45:de:c4:5d:
                    ef:1e:bc:45:45:e7:d9:34:5e:54:cf:a8:ae:2f:97:
                    cc:3b:31:88:cc:99:52:48:4b:6d:a7:50:00:20:00:
                    33:9f:f7:95:97:d6:ec:8f:91:7e:75:c2:da:6a:bb:
                    09:c3:08:a0:67:b1:83:13:12:3b:f6:66:f1:53:ba:
                    cf:57:4e:0b:70:4c:2c:7d:97:da:5e:3b:76:f5:70:
                    37:b1:19:1a:c1:48:97:3e:e7:26:6f:0a:6c:9f:50:
                    f8:3b:92:d8:45:94:92:68:72:01:b4:43:ee:c3:59:
                    93:10:f2:be:45:0a:3f:6c:2f:25:b9:2f:47:c3:c8:
                    1a:12:05:8b:ec:86:95:f1:29:13:10:a8:e8:39:6e:
                    43:27:47:ae:e3:98:bc:82:1f:03:3d:44:31:59:52:
                    27:ef:89:7d:a0:42:a2:07:ee:55:38:8a:4b:07:63:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:B7:0C:FD:00:07:5A:39:7D:AD:C8:AF:56:F7:37:55:60:ED:29
            X509v3 Authority Key Identifier:
                keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:3e:54:1c:ce:f4:00:3b:fa:a6:3e:e8:e7:9d:f5:f4:2e:
         95:74:7b:d7:f2:39:f2:7d:69:2b:89:16:d3:3b:c0:58:3e:af:
         96:bc:c6:b5:08:82:1c:28:da:a3:39:0d:77:db:fe:dd:77:4f:
         f0:c8:54:b6:6e:0e:6d:b4:3e:99:f5:1d:0b:6d:08:2a:45:0d:
         71:b7:59:14:46:c7:ea:b9:c5:75:fb:2b:d1:b4:c9:36:b8:25:
         0b:b0:f9:bc:89:14:bf:48:76:44:4b:8b:77:a0:26:fd:d7:19:
         fb:85:f9:50:8c:04:a0:b5:8f:e6:98:5f:6c:89:06:77:19:bd:
         13:02:0b:d3:f2:c2:15:5b:20:68:0d:c0:7a:76:40:c0:95:0f:
         4b:87:5a:13:52:91:77:c3:73:27:1b:bd:ca:ed:07:73:a4:c1:
         93:9c:6b:cd:a1:fe:0d:16:76:49:3f:ea:ff:aa:88:c4:d5:0e:
         60:0f:1a:05:21:70:30:11:43:39:2f:b6:50:78:e8:82:d3:5b:
         88:74:8f:33:4a:34:17:6d:b1:ed:ac:6a:c4:b0:fd:81:55:b6:
         fa:cc:66:e8:b4:34:38:60:46:56:25:64:d4:60:85:45:11:e9:
         85:ea:ce:d3:99:fb:f8:7b:6b:72:c0:71:0e:11:eb:dc:cf:3c:
         8f:f6:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:26 2026 by rpki-client