Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File:                     9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier:          0BAVvn6EFaKjQ9werrZM/WQ4pkQv497s8c3FxnMcKhA=
Subject key identifier:   8B:1A:46:1E:2E:80:B7:E4:F9:BE:24:83:C7:BF:18:AA:B5:6A:F4:45
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer:       /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial:       019E1CB4F0F44F76528ACD508682F76D4460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number:          0F27
Signing time:             Tue 12 May 2026 15:01:20 +0000
Manifest this update:     Tue 12 May 2026 15:01:20 +0000
Manifest next update:     Wed 13 May 2026 15:01:20 +0000
Files and hashes:         1: 1-TEmL5jbsK3PrKD8j52WhCZ0qeI.roa (hash: VGXlZbSa6lTTDzWoioV4bwS7txIXqiiihar6C8uT+sc=)
                          2: 7C0V1hBB2j4Z0mWBIUgnztA_FKo.roa (hash: NHdUGwrw8MVcwcj4xNyKJAEIGlAjm+SSRTtlFS7q5aU=)
                          3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: 2yKPHaccXJkhqFc4FUVuHjAHeQc7WkwCFzZsNAKl3+Q=)
                          4: DcE-uEXszb5ayDTueYLPblzewrc.roa (hash: WBQTxgPKlUiSMhQCjL0lfoGz2y68CFK39DGZphxj/FM=)
                          5: DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa (hash: HGxEJ7LQfFiHhcT+DYcnCzFrTwYKp05D1m1E5DMnD6I=)
                          6: RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa (hash: rZ5431yDGBLhE9MGa187xIN7yECgb8/EV3ZIyUsR8Xg=)
                          7: WSPBUC21vET1uaZZlnbFvCFRchE.roa (hash: 3N3I5TdJSWNVy1VYKwR1h9RK2xmp3aVZDnmQUt1fbBg=)
                          8: WzC3ng1LgvNoGeAWK-E4mAth79c.roa (hash: in7OVP806sec7BG3P2bRg0+XxW/GuztBYg8LKPCWtFc=)
                          9: b-KOOCgewsVhwidcvQfpRRWqU7I.roa (hash: X+AfcL5bK9mDooKI7JczwqJxSPkb+6057fPwNRB9rIo=)
                          10: sp7cckHOAVZ1urLLSuO5BmgV-dQ.roa (hash: YprGBhX6AZyr1/u6kF21WaMH+OCGQvlx5wwg1Z8Rfhk=)
                          11: ychIJ2QPcZlZoWi9AtRiqbIeEes.roa (hash: Hs1swYEG/DTaRK/PwknMDVO6VvDFcV2evpuVVIze/ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:f0:f4:4f:76:52:8a:cd:50:86:82:f7:6d:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
        Validity
            Not Before: May 12 15:01:20 2026 GMT
            Not After : May 13 15:01:20 2026 GMT
        Subject: CN=8b1a461e2e80b7e4f9be2483c7bf18aab56af445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:ad:3e:9f:7a:44:0d:05:50:5f:b3:33:aa:
                    ea:88:cb:61:ce:de:46:74:39:8a:0d:67:55:47:76:
                    43:1f:f3:05:fa:70:6b:71:a0:ad:eb:3d:ea:2d:80:
                    4c:aa:b6:78:ab:12:61:e9:31:e4:93:14:22:31:c9:
                    64:08:da:4f:c4:6b:b3:5e:07:cb:7b:ef:a5:3e:cb:
                    d5:e6:fd:a6:65:dd:7c:4f:c7:d6:72:47:4a:8c:56:
                    3b:41:b6:01:68:98:62:5a:2d:a6:0e:67:7a:af:4d:
                    b5:4c:5d:a8:f2:12:a6:a5:89:23:f7:02:8f:89:74:
                    ad:ed:7c:81:95:f7:e1:40:89:64:1f:eb:0b:9a:b9:
                    48:2b:00:1e:fc:8c:46:da:3c:5b:81:c9:2d:df:af:
                    85:85:0c:5b:41:ae:96:04:cb:9f:8b:3c:f4:0f:94:
                    db:15:b0:07:23:83:f9:37:58:a7:c3:da:7c:0d:73:
                    1f:61:8c:35:52:ac:11:98:b0:47:53:6a:07:ef:31:
                    f5:04:98:45:27:d3:db:fa:b5:e3:81:42:f7:1b:4d:
                    bb:21:40:57:ea:81:4e:bb:8f:ea:df:8a:38:dc:9f:
                    52:3a:c6:de:c2:02:f3:26:17:41:1a:7d:65:bf:a4:
                    ee:79:f9:bc:a2:a7:3b:e2:79:04:7c:c1:f6:df:21:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1A:46:1E:2E:80:B7:E4:F9:BE:24:83:C7:BF:18:AA:B5:6A:F4:45
            X509v3 Authority Key Identifier:
                keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:72:59:a6:9d:03:d8:96:e8:32:5d:17:a6:2b:3b:48:80:17:
         c4:a3:1c:a1:23:13:d6:d6:b7:c5:9d:86:c2:7a:ea:4f:e1:03:
         79:b7:d3:68:ec:21:70:3c:5d:e5:79:1d:96:1d:9c:94:64:69:
         87:39:bb:7a:b0:ff:cd:ed:77:30:8f:cf:23:f9:d1:e8:bd:56:
         1f:80:30:ea:31:97:20:73:c6:60:06:a0:8a:cb:0a:f9:4f:7f:
         b7:e5:08:12:09:00:a2:fc:34:4d:60:df:13:7c:0f:dd:25:35:
         7b:d5:7f:6d:e0:bd:9c:32:8f:f2:73:f5:91:ac:e6:2e:a9:e1:
         34:05:0f:7f:6a:cc:23:9c:dc:98:3d:13:59:99:61:0f:e3:0e:
         ee:74:d7:c2:53:31:df:0a:20:cb:a1:55:ef:b7:75:e7:ac:44:
         a1:9c:48:51:89:37:3b:2c:67:b3:46:17:df:47:ea:81:88:3b:
         2a:cf:e8:30:5b:18:e3:ca:97:41:93:60:3d:b2:35:83:79:d1:
         3c:f5:93:d3:0a:fd:11:a8:29:23:b0:43:d6:a4:f2:4e:5d:8e:
         69:ca:62:c5:d0:17:b3:6e:ed:53:53:57:ca:e3:aa:92:92:73:
         bc:5c:38:f1:f1:40:45:9f:1b:fb:53:5a:be:16:21:f1:83:ce:
         30:5f:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:11 2026 by rpki-client