Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File:                     9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier:          DAkyCD5hh5/Y8WWQF4NNYRr/boe3nQc9qyfMl+66k2I=
Subject key identifier:   0D:F2:73:D2:1B:B8:9C:42:13:97:B6:A9:6F:1E:7C:44:3C:13:B2:F5
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer:       /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial:       019E1CB4EE95F89B1377E91A2E383F0698BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number:          0B72
Signing time:             Tue 12 May 2026 15:01:19 +0000
Manifest this update:     Tue 12 May 2026 15:01:19 +0000
Manifest next update:     Wed 13 May 2026 15:01:19 +0000
Files and hashes:         1: 3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa (hash: qThiWbhOm4MVwzcc4QS1C0KW/Cr2nD4QzMpn3VG/nII=)
                          2: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: k7uWgbLnMPWHBzsgFl+makFnlRxJH6FSqShjl/8qjCI=)
                          3: GvMwO11Qb_MZ3FmpbZFa_YHcQEw.roa (hash: HHH3HBau0CenEM488oLj5N8VnZu9hoi/hHRUfx5gvaA=)
                          4: vAGwaiC2Bp1wYYYgaEDGo4Uiqpc.roa (hash: kDL6yMpm7SXuYLlIMpKeyi5R+9DyzeTyoxzQraFeyqU=)
                          5: yXsRkQTNVDsj9z8xG-aM4CEyin8.roa (hash: ts64cc9kwijL/HlxdE2LWSMe9OcM5b1Rlyuz3fR2RTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:ee:95:f8:9b:13:77:e9:1a:2e:38:3f:06:98:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
        Validity
            Not Before: May 12 15:01:19 2026 GMT
            Not After : May 13 15:01:19 2026 GMT
        Subject: CN=0df273d21bb89c421397b6a96f1e7c443c13b2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:35:ae:f2:0f:8a:24:a9:3c:3f:3f:ea:c1:
                    a8:d1:6a:1a:8b:bf:05:4e:32:6a:c3:05:58:6c:a2:
                    12:98:1e:8a:43:e7:20:5a:28:22:6a:c6:9d:7e:0e:
                    40:57:ce:8d:7d:f3:e3:f7:df:19:0e:e8:8d:44:d9:
                    80:3d:06:b4:14:71:39:ea:ee:8e:a9:1a:63:b5:4d:
                    99:bf:70:6b:31:6f:02:54:bd:ea:19:a0:c2:08:50:
                    52:1c:27:c7:4c:ae:53:85:db:94:7e:81:5a:35:6a:
                    2d:30:96:b1:e0:ae:6e:9f:19:d7:61:a4:30:c4:07:
                    07:6f:a9:58:cd:d9:78:2c:51:63:69:7d:65:49:eb:
                    0f:76:64:22:27:b1:fe:b8:1e:64:c1:4b:ca:2d:fb:
                    06:ae:78:2e:c1:57:5d:9d:6f:d0:8d:5e:70:41:7a:
                    14:97:21:cd:58:f2:a4:c4:38:03:4d:6c:4f:58:96:
                    7f:df:ae:8c:c7:50:b5:d2:d4:a0:bf:0a:34:a0:64:
                    c8:9c:95:a0:bc:9f:e3:df:fb:53:c7:b6:e0:85:72:
                    6d:fb:db:77:66:fd:ef:70:8d:50:b8:de:98:48:d6:
                    68:40:39:61:ae:fe:4a:0f:42:6e:69:3d:3d:89:8d:
                    50:cc:6a:16:e1:28:82:4b:40:f6:b3:18:b6:ee:da:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F2:73:D2:1B:B8:9C:42:13:97:B6:A9:6F:1E:7C:44:3C:13:B2:F5
            X509v3 Authority Key Identifier:
                keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:62:8c:6c:b5:92:03:e5:ad:db:a1:e5:d9:3b:b3:a2:c0:
         6a:07:56:3d:36:fe:41:45:3f:01:60:b6:9d:c0:50:9c:6b:0e:
         d8:39:29:28:1e:be:65:92:e1:b1:cd:19:10:03:bd:0c:78:55:
         d0:0d:85:37:04:59:b4:24:c1:ca:55:71:18:8f:6a:a1:0d:bc:
         f4:83:72:e1:87:03:05:a4:3a:d6:67:42:a6:e7:0e:a1:c1:7e:
         37:53:9b:45:84:d4:ce:d1:9c:3f:ae:73:22:b8:81:3b:6d:87:
         b5:79:03:58:97:63:e3:46:aa:04:33:04:cb:ef:34:dc:19:80:
         d0:c1:4f:5a:2a:e3:94:59:71:37:cf:7f:2a:92:69:c9:51:77:
         6e:f9:c3:dd:61:e9:f9:f0:94:1f:3f:7b:bb:15:37:31:59:15:
         ba:c6:98:85:92:cd:bc:5e:fd:97:3c:94:95:ad:bc:c6:d4:5c:
         10:c5:17:cc:d5:a8:fa:03:32:8d:1e:fd:85:7f:19:0d:fc:ca:
         6f:1b:bc:0d:ef:fc:04:a5:d1:53:9b:42:f9:97:2c:ab:34:ec:
         a6:a5:a1:21:45:ec:f2:70:dc:f7:47:88:5d:35:50:5a:04:a8:
         7a:88:9e:23:10:4b:27:3c:c7:8f:39:f8:dc:8d:b5:81:ea:73:
         8b:10:07:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:40 2026 by rpki-client