Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File:                     9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier:          yLlzuguUsTgWf9U3xzEMiQTKyms3mRFC6xrQF5/4Qrw=
Subject key identifier:   1E:84:9A:EA:FC:20:59:1F:95:C8:32:33:0E:09:50:F3:B5:65:A4:8F
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer:       /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial:       019E1F47972C1877F73AC3F4F7D5145D473B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number:          1911
Signing time:             Wed 13 May 2026 03:00:45 +0000
Manifest this update:     Wed 13 May 2026 03:00:45 +0000
Manifest next update:     Thu 14 May 2026 03:00:45 +0000
Files and hashes:         1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: FGltK/xTAHOlF0aLEcfmVcDLuUy0GS5xKD3kT5che6E=)
                          2: eSz723ezaxIYo-uzqA3kR-jVkvo.roa (hash: bDcJJgvstmEVW/P8EgI47LEodkbTX9A+80ZJtwW9/9U=)
                          3: q322xaSHMZx1k4xaVe30RdNBWuo.roa (hash: DQXWLyhzw4r+tbYvkotbpHRusQgaYcOI5F7MnlMraO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:97:2c:18:77:f7:3a:c3:f4:f7:d5:14:5d:47:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
        Validity
            Not Before: May 13 03:00:45 2026 GMT
            Not After : May 14 03:00:45 2026 GMT
        Subject: CN=1e849aeafc20591f95c832330e0950f3b565a48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:78:61:cd:4a:b0:35:d4:dc:96:22:17:c4:
                    e0:8f:35:98:b9:c4:5b:3b:aa:de:ca:91:3f:1a:ec:
                    18:93:7c:76:69:e1:c7:4e:48:0d:a0:30:d9:1a:fd:
                    8d:0f:c4:e4:1d:3c:35:c2:aa:e1:c9:89:56:f5:63:
                    e9:09:41:d9:41:d1:c9:eb:60:40:07:db:b9:96:4a:
                    19:17:f1:5d:b1:a8:f1:45:0d:96:be:1b:8e:7a:2e:
                    d2:91:b9:6a:2e:30:d3:e2:5f:1b:44:3f:a0:13:1b:
                    00:56:d3:46:2c:da:d5:35:06:0f:e0:51:c8:9c:8b:
                    45:f3:94:29:68:e7:c3:5c:df:11:a8:0b:6e:db:40:
                    af:3a:64:f5:7b:e9:0e:1d:27:4c:e2:2d:df:a9:f3:
                    c7:0a:36:9d:c1:4d:ad:55:6c:ab:67:5f:f6:ee:8a:
                    3f:1c:b3:25:d1:c2:0e:2f:51:1f:5c:d3:b9:bd:52:
                    97:2e:d7:c8:27:e4:6b:c1:3c:8d:f1:53:d6:71:c5:
                    5c:dd:be:97:06:46:b7:08:6e:70:4c:9a:c2:45:a8:
                    2b:9c:3b:1b:23:71:42:6d:ac:c1:23:ab:9b:45:02:
                    6c:09:f4:39:06:e9:8f:7d:20:c9:a2:84:fa:21:eb:
                    ae:c7:21:78:26:ff:30:e7:2d:18:f8:1e:27:c8:dc:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:9A:EA:FC:20:59:1F:95:C8:32:33:0E:09:50:F3:B5:65:A4:8F
            X509v3 Authority Key Identifier:
                keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:51:53:ad:57:5c:06:1b:7c:95:24:73:3c:05:8b:24:3a:
         ca:11:85:c6:47:c5:70:69:ce:0b:e0:2d:d6:86:d0:35:c8:1f:
         cf:07:71:2b:9e:c1:1e:2b:9c:02:e4:2a:74:ec:66:a4:0e:1b:
         13:32:93:92:65:4c:10:be:b8:78:0a:fb:cb:d4:b5:55:18:cf:
         34:3a:1f:96:e5:ab:5f:1f:5a:20:17:2c:2b:15:43:82:4f:01:
         7c:3a:ba:d4:ed:d1:54:e0:c7:a8:98:54:49:75:05:ef:29:e6:
         6f:c2:f7:4e:de:35:62:ee:94:89:04:71:05:70:b7:38:9f:39:
         8f:81:be:d7:92:21:76:23:f6:79:6d:5a:3f:99:35:93:d7:ab:
         50:78:40:3a:7f:c8:96:c0:25:11:5d:69:4b:79:f5:b7:9f:0c:
         8b:47:ac:1e:ff:5f:e8:fc:bb:ab:75:c9:3f:d2:59:f0:51:e1:
         a7:c6:5f:e8:1a:7c:75:25:69:f0:3f:e0:41:d5:3e:fa:31:50:
         d7:3e:d2:55:2f:f4:65:a3:5e:b7:9e:c1:ae:58:52:8a:00:e0:
         3b:51:35:02:e1:2f:6a:14:2f:5c:b8:bf:96:a2:9a:b5:b5:35:
         11:2e:9b:37:be:84:7b:a2:d8:ea:84:0a:39:60:d4:57:1c:c8:
         cd:11:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:56 2026 by rpki-client