Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File:                     n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier:          uzS2PSRPTsXYJHp0C10ocWYRq6mhRd7uyyBa/ZuT+NQ=
Subject key identifier:   B9:C1:67:51:74:E2:4D:76:BE:72:C8:DC:C1:2A:49:1D:F7:F6:5D:BD
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer:       /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial:       019E1E43716680F3F6DB434907B06FD3E8D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number:          1471
Signing time:             Tue 12 May 2026 22:16:36 +0000
Manifest this update:     Tue 12 May 2026 22:16:36 +0000
Manifest next update:     Wed 13 May 2026 22:16:36 +0000
Files and hashes:         1: _32PxZUATVVglUOkAuOeRhENkYA.roa (hash: Z/+QI+ZouM5sH6BOQC/hM4o0My4kuHmGD5J9BCVzOjQ=)
                          2: eHpJ8mnO4BKJKlv5QM5nDqJvPLc.roa (hash: 1K7qqzcGzf6muEP0mAN5I2OJBvXGVtPJum+BjQGXALM=)
                          3: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: LL/sC6/9IuPBiHS8+6vTRfboRjsD2dQ5MA/h6e4zUFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:43:71:66:80:f3:f6:db:43:49:07:b0:6f:d3:e8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
        Validity
            Not Before: May 12 22:16:36 2026 GMT
            Not After : May 13 22:16:36 2026 GMT
        Subject: CN=b9c1675174e24d76be72c8dcc12a491df7f65dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:05:3e:13:ec:9a:ca:58:5f:de:f7:d6:cd:
                    17:0d:4a:88:8e:ac:99:2c:40:de:3e:75:cf:1b:47:
                    37:c0:ab:f2:af:b7:55:fe:ba:87:d9:0d:53:a2:b7:
                    92:16:29:cd:09:8b:79:25:9c:bd:ff:18:2d:c5:db:
                    34:55:cf:17:aa:67:c5:16:56:10:02:38:99:29:f6:
                    7c:00:ea:a2:4e:db:9b:b9:7e:79:34:c7:1b:f8:fb:
                    5b:95:4b:95:f2:d6:07:40:75:04:b6:4e:dd:c7:28:
                    26:35:5d:1d:e9:e0:6f:da:fb:37:73:29:ba:8f:f3:
                    0f:86:70:82:bf:66:9a:84:98:68:dd:ee:35:90:12:
                    b1:1c:cf:3c:48:2d:0b:9f:db:3c:86:a2:71:41:f5:
                    6a:6b:21:cf:7e:52:f6:c0:83:e6:8b:45:a1:1d:a1:
                    c1:f9:9c:7d:bc:00:e8:f8:ae:53:2d:40:28:24:80:
                    15:3e:ba:ae:3b:13:08:19:2b:ce:d3:c6:09:1d:68:
                    10:a0:b6:a7:2a:09:78:74:ab:ce:84:a8:d9:aa:00:
                    36:64:b9:61:bc:b6:47:e3:2f:43:23:8b:01:6b:69:
                    6c:fe:6f:e0:71:96:59:f3:13:37:33:16:40:e3:79:
                    b4:54:1d:ec:a1:82:ea:f7:12:e1:af:49:50:2a:95:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C1:67:51:74:E2:4D:76:BE:72:C8:DC:C1:2A:49:1D:F7:F6:5D:BD
            X509v3 Authority Key Identifier:
                keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:6d:6e:e0:16:5a:3c:df:05:fa:1c:04:03:cf:92:87:4c:
         68:68:c9:3f:1a:9b:a5:92:2e:9f:1d:09:5c:c8:ef:a3:0f:b2:
         9d:2c:95:d3:09:7c:9c:be:1b:d3:cd:2a:a8:b3:3b:22:88:99:
         6f:a0:3b:48:e5:93:3f:f0:0c:ec:fe:f6:11:27:cf:8a:d8:a1:
         f2:3d:d0:3b:82:7e:c1:c6:60:9f:4e:a9:45:53:38:a7:87:41:
         aa:0d:4c:cd:ee:51:41:9d:8d:ba:7b:f7:45:76:f1:66:00:dc:
         58:b2:89:67:3f:e2:46:7d:c0:2a:f3:3c:05:72:b7:4f:22:c3:
         2b:28:9f:09:7c:70:dc:ec:8b:72:95:c6:0c:9f:26:05:d5:a3:
         43:b6:2e:bc:85:5f:81:8b:3e:2e:e2:34:13:c1:79:ff:f0:84:
         6b:67:1b:4e:08:30:ec:c9:bc:db:e8:3f:ab:aa:8c:92:cf:59:
         58:1d:d0:1c:0a:38:15:00:85:81:d8:49:70:59:5d:dd:a7:7f:
         b9:b3:59:68:da:e4:91:4f:b0:f3:55:38:5f:a1:82:d3:5c:04:
         c2:05:99:6e:d8:9b:cf:81:e8:a7:0e:12:df:50:4c:b1:61:0d:
         b1:9d:08:f8:bf:61:b4:af:3d:c8:e3:88:8f:a1:03:71:50:40:
         d2:c9:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:53 2026 by rpki-client