Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File:                     9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier:          lOZKKGyMxH91e5BLtva4fAe5AfEsKTTEVed6+GAefI8=
Subject key identifier:   51:16:07:E7:94:83:C7:36:45:8D:DF:2D:F7:66:7F:6D:D1:CF:10:50
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer:       /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial:       019E1C467A125B99457FD1C7826A01B7428C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number:          0772
Signing time:             Tue 12 May 2026 13:00:41 +0000
Manifest this update:     Tue 12 May 2026 13:00:41 +0000
Manifest next update:     Wed 13 May 2026 13:00:41 +0000
Files and hashes:         1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: rfjt8w5eWtScz91h2AB2Hh0dFjzyNO1Exgw4RlTQDpo=)
                          2: b1tEVuM57ah52OvUq3Fvdd-4XkA.roa (hash: Odyf//1QBuLxW+qHnAmLWghjISD9y11hRldd+HjGtOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:7a:12:5b:99:45:7f:d1:c7:82:6a:01:b7:42:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
        Validity
            Not Before: May 12 13:00:41 2026 GMT
            Not After : May 13 13:00:41 2026 GMT
        Subject: CN=511607e79483c736458ddf2df7667f6dd1cf1050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:11:ed:cf:98:cc:2d:05:2e:62:a7:b8:2e:
                    ee:e5:7d:f1:88:ca:f1:fe:b3:50:18:be:08:ea:79:
                    1f:b5:45:24:ba:14:9d:11:10:56:e5:1a:96:ac:42:
                    b3:44:5d:8e:d1:09:46:f8:b5:94:69:25:b8:d1:51:
                    b5:8e:6a:a6:59:ac:b3:5a:4a:f1:42:fc:d1:63:93:
                    c1:b8:a9:fb:a5:fa:7e:bd:6f:c7:95:a8:dc:65:c6:
                    0e:41:d0:ae:86:dc:4f:3b:10:86:09:09:81:71:b7:
                    de:4b:ad:73:71:cf:ff:1e:25:99:f2:41:0d:76:ae:
                    f8:98:4a:49:0d:8b:f5:7f:84:1a:16:c2:2b:8f:ea:
                    e2:e4:5e:e0:78:af:cd:c9:02:83:8d:c2:ce:a8:ae:
                    78:da:cc:c7:c6:db:c3:a0:87:4f:b4:93:ba:a7:42:
                    57:87:13:87:f2:1e:0a:d1:d0:00:53:43:71:34:e6:
                    d7:a5:ba:3b:2a:51:ef:92:48:3d:41:9b:b0:8f:67:
                    ca:47:88:fa:5e:fe:d8:3f:76:dc:d7:29:f1:0e:8d:
                    3a:9f:f1:e6:2b:ea:ee:40:2d:f6:7f:5a:c5:c0:57:
                    41:68:36:70:40:fd:b9:10:7e:f7:16:38:28:4b:1e:
                    ba:86:7f:19:a8:cd:cc:6f:d8:2c:78:d3:e1:f6:14:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:16:07:E7:94:83:C7:36:45:8D:DF:2D:F7:66:7F:6D:D1:CF:10:50
            X509v3 Authority Key Identifier:
                keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:78:ef:bd:be:15:24:f9:03:b8:81:ac:4e:1d:07:c0:b8:4c:
         24:69:e8:58:43:15:a9:10:79:ea:b4:b1:f3:77:80:25:ea:cd:
         d5:11:7f:58:f3:13:38:1a:04:f4:e5:ea:0a:b4:93:61:9c:7f:
         5d:4a:60:50:ad:0c:0d:88:e8:91:7d:50:10:26:dd:83:e2:18:
         f2:0f:f4:de:57:d2:ef:ca:6e:85:b4:8a:7e:e2:5d:29:31:e8:
         79:a1:83:22:ba:f0:4e:ff:23:4c:24:a5:f7:d3:0c:a1:05:e1:
         27:e8:a0:63:73:1d:86:00:ea:f0:d6:c5:51:43:2d:75:33:f8:
         de:6b:b3:f6:8a:27:cb:c2:42:e5:dc:64:f9:40:18:ae:aa:86:
         5e:ad:58:26:d9:59:cf:b1:b1:fb:b1:d0:8a:e2:71:99:88:95:
         46:eb:01:a5:01:46:44:e3:ec:e0:29:db:5f:1d:eb:b7:d2:a0:
         28:c8:1f:b7:24:e2:61:0b:f7:5a:6b:44:1b:87:4f:ed:11:ae:
         d2:fb:cc:3a:9c:c7:c0:6f:b8:bc:05:7f:59:41:d4:db:64:92:
         27:65:58:cd:1c:a9:6d:05:09:32:d8:9f:ef:5e:61:ea:05:76:
         14:fb:a7:41:68:4c:25:ce:42:01:9a:6b:9c:bf:11:fb:b5:26:
         6d:0e:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:19 2026 by rpki-client