Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
File:                     m9LNu_XMLYOp2PExgRJx8DLSFFA.mft (raw, json)
Hash identifier:          pIgRmRVNGs8gSe3FIwFjyJOjvDB6e9NVaukWIy2Wf3o=
Subject key identifier:   C3:26:61:B9:06:0C:DB:9C:19:C1:2C:D8:EE:FA:7B:FA:54:13:23:E0
Authority key identifier: 9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50
Certificate issuer:       /CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
Certificate serial:       019E1F119B6DD4C99158A6EFDC7415E01606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
Manifest number:          9C
Signing time:             Wed 13 May 2026 02:01:48 +0000
Manifest this update:     Wed 13 May 2026 02:01:48 +0000
Manifest next update:     Thu 14 May 2026 02:01:48 +0000
Files and hashes:         1: m9LNu_XMLYOp2PExgRJx8DLSFFA.crl (hash: 6j1ikgkPIFYsrM0Jl30ETAOtVJ7M18jA+5gKvsMl+i8=)
                          2: sRIRtm1WlkJMryRVLofyBLDhtX0.roa (hash: Ho8VKDeLdI3OgV2j2givaKlNGpZaNoqeOK7mD/4wmSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:9b:6d:d4:c9:91:58:a6:ef:dc:74:15:e0:16:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd2cdbbf5cc2d83a9d8f131811271f032d21450
        Validity
            Not Before: May 13 02:01:48 2026 GMT
            Not After : May 14 02:01:48 2026 GMT
        Subject: CN=c32661b9060cdb9c19c12cd8eefa7bfa541323e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:f6:03:7d:cc:0f:c8:ea:d7:74:35:5e:70:
                    a7:0a:b2:a6:09:d7:d9:ad:1c:e4:a5:85:b2:14:a3:
                    f2:c5:24:46:04:5f:2f:e5:11:11:95:be:67:41:41:
                    e6:6a:38:10:0a:d2:a7:5b:3f:e5:fa:08:e5:a0:26:
                    11:2f:c3:51:10:c2:38:3e:8a:47:dc:cd:6e:d0:5d:
                    9b:c7:20:4e:f0:64:73:56:1b:53:29:8a:7a:3c:4a:
                    8f:d4:24:d1:d0:26:9d:1e:36:da:db:09:a6:34:a7:
                    df:ed:b5:c7:91:ec:0c:0b:01:2d:e6:42:8d:5f:30:
                    50:4f:9e:6e:9d:f6:16:ae:a5:3e:f8:94:29:cd:2a:
                    db:ad:b5:a6:12:e3:9b:cb:77:bc:54:ae:ea:89:5a:
                    00:1e:72:02:f9:ea:2f:1c:b8:cd:c2:2c:73:e2:df:
                    c5:34:af:96:91:56:e6:3a:87:db:b7:ac:43:d8:5b:
                    8c:b2:f9:df:fe:6a:6b:25:31:bb:c8:37:67:a1:85:
                    22:a5:2f:8c:99:44:2c:72:3b:61:a8:24:8c:b4:5e:
                    af:c1:7f:04:92:1e:ce:e3:1d:f1:53:cd:6e:1b:6a:
                    c7:97:e2:15:a9:75:41:71:bb:b1:4b:2c:97:07:84:
                    8f:7f:b0:40:21:ca:64:84:02:d3:4f:ed:83:ff:07:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:26:61:B9:06:0C:DB:9C:19:C1:2C:D8:EE:FA:7B:FA:54:13:23:E0
            X509v3 Authority Key Identifier:
                keyid:9B:D2:CD:BB:F5:CC:2D:83:A9:D8:F1:31:81:12:71:F0:32:D2:14:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9LNu_XMLYOp2PExgRJx8DLSFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bccf17-72ad-4336-b55d-b7547ab8732e/1/m9LNu_XMLYOp2PExgRJx8DLSFFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:16:f7:39:67:1a:41:52:86:29:0a:50:4c:01:b1:2c:0d:91:
         c6:bc:ef:de:ce:4d:9a:67:25:5c:39:35:b2:43:02:f7:59:ef:
         82:b4:54:59:c9:ae:ba:90:e8:99:4d:50:79:98:0f:8b:78:3c:
         5e:81:b9:d8:0a:57:63:14:f4:7e:f9:14:73:bb:fc:32:be:6a:
         8e:06:ea:5d:04:74:75:e1:8e:b6:78:ac:39:81:54:56:33:36:
         87:2f:83:2f:4e:dd:78:ee:27:8c:cf:ac:e9:01:0c:00:69:20:
         4e:08:61:6f:ac:0f:6d:7d:89:c2:50:00:df:d6:dd:cb:a8:bc:
         21:3d:87:34:99:0a:ad:8c:d0:86:f6:99:d9:fc:20:43:6f:a1:
         b7:e1:16:1b:68:78:96:18:7a:61:38:ac:b8:d0:99:d6:23:a9:
         2e:9c:ef:76:e0:aa:51:2a:14:23:28:bb:c3:bf:2e:9c:18:73:
         01:f6:5c:df:65:f0:5d:c5:d4:27:ec:9d:99:4c:a7:23:04:9a:
         19:2f:79:2b:7a:d0:41:93:69:17:6b:c0:c4:2d:3f:7e:42:93:
         f5:9f:dd:bb:ab:30:f8:6c:10:1f:0d:7e:4c:ec:92:da:d6:ec:
         ad:85:0a:b2:2a:e3:48:d9:a5:13:cd:9a:41:30:dc:d4:d2:74:
         71:94:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:06 2026 by rpki-client