Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          K7wdSXYbiSkphLXhURv2E2t8YjQSZfIAOnYRo19laCs=
Subject key identifier:   C8:AB:C8:AC:77:83:FD:3D:EB:AA:94:4B:08:C5:68:A0:7F:77:BE:6E
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       019E1EA322D39535B3C8BDBB48934B8597E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          127B
Signing time:             Wed 13 May 2026 00:01:08 +0000
Manifest this update:     Wed 13 May 2026 00:01:08 +0000
Manifest next update:     Thu 14 May 2026 00:01:08 +0000
Files and hashes:         1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
                          2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: /hYEVGwgnCORik6tQiLgsawRkreRXUzJFxGNfDRqlw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:22:d3:95:35:b3:c8:bd:bb:48:93:4b:85:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: May 13 00:01:08 2026 GMT
            Not After : May 14 00:01:08 2026 GMT
        Subject: CN=c8abc8ac7783fd3debaa944b08c568a07f77be6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:03:f6:46:73:67:a0:f5:30:13:a3:7c:11:
                    a9:9f:0c:ea:0c:1b:57:68:1d:e4:a2:6a:bc:e2:b3:
                    b6:b6:08:85:1b:45:6e:af:2c:91:f0:55:3b:2e:65:
                    dc:7a:7f:7e:de:82:21:bc:f3:91:c8:fd:e9:d7:34:
                    46:03:c0:8a:56:ad:8e:80:3b:0d:43:cd:0a:bb:47:
                    a9:ff:ba:5a:39:80:69:4c:15:45:90:c4:bf:24:28:
                    23:4d:a5:4f:59:b5:ca:43:00:e9:59:d6:dc:65:3c:
                    06:3b:87:09:ed:87:11:9b:47:0f:8d:e1:17:79:dd:
                    f6:1f:0c:66:82:96:b1:2d:25:a1:4d:dc:d5:63:04:
                    39:d5:5b:07:8a:30:73:79:cd:a2:78:73:fa:7b:81:
                    d7:1a:97:1a:3d:73:78:d1:7e:bd:9b:bc:8c:69:2d:
                    ae:ef:2d:79:bc:41:81:0f:c6:1c:2a:ea:0a:73:13:
                    1e:9b:9d:b9:75:76:00:1c:b5:7d:22:bf:52:3f:9c:
                    e7:5a:71:67:7f:c3:e0:95:6a:c3:db:a5:1f:1f:36:
                    a9:6e:30:e7:0c:e5:70:69:29:61:a0:dc:60:08:af:
                    bb:69:36:42:94:4e:f2:20:ab:27:d5:03:2f:d3:14:
                    b8:c1:72:e5:88:84:19:af:e6:1b:fe:ce:b9:41:46:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AB:C8:AC:77:83:FD:3D:EB:AA:94:4B:08:C5:68:A0:7F:77:BE:6E
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f9:cd:e8:1e:08:29:16:75:7f:54:4d:4d:b9:40:06:c4:e3:
         dd:3f:22:4b:04:f7:ed:be:96:28:87:69:7f:50:1e:84:d7:b9:
         bd:27:42:01:03:07:d1:62:46:20:16:45:00:79:a9:3b:38:21:
         ad:67:e1:cf:5f:95:61:7c:ba:f2:37:bb:b9:81:66:76:c0:9c:
         c0:e5:f9:aa:3d:98:30:c2:a9:01:d3:45:d8:d9:84:5f:f5:0e:
         b6:5e:26:31:f8:5a:3e:83:fa:76:11:64:b1:08:0c:be:50:ee:
         0c:05:3e:f4:7c:8d:60:15:a1:53:dc:8f:08:b8:dd:4b:23:21:
         86:2e:86:ff:e4:10:77:46:cd:f5:4f:5d:7b:56:92:d6:77:d6:
         13:d7:3a:c6:76:a1:c4:c3:d6:b9:84:c1:3e:b1:6c:9f:23:30:
         08:40:25:dd:38:f0:72:9a:e3:02:2f:b3:1b:c1:ef:8b:66:1e:
         d2:b6:9b:b8:ae:de:62:ba:c4:5f:27:a8:28:19:b7:f0:26:28:
         f6:23:55:28:15:53:7e:b5:5c:a2:5f:40:e3:65:07:04:08:8a:
         35:ed:b0:03:40:e2:d9:ad:ba:85:20:af:da:2a:27:6a:13:d9:
         7f:b8:24:43:3b:21:21:32:99:08:56:3f:25:90:3e:b5:55:d7:
         dc:8e:a7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:18 2026 by rpki-client