Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
File:                     9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json)
Hash identifier:          7q8IVXn2dpPbgaYISEUNny1/c0/6PCtTfgXqTMvCRn4=
Subject key identifier:   72:64:76:94:CD:47:B7:61:55:83:A3:8B:8D:95:EE:03:80:24:93:EC
Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
Certificate issuer:       /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Certificate serial:       019E1EA32B2AF361991C2CEE52CF5962FAE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
Manifest number:          1673
Signing time:             Wed 13 May 2026 00:01:10 +0000
Manifest this update:     Wed 13 May 2026 00:01:10 +0000
Manifest next update:     Thu 14 May 2026 00:01:10 +0000
Files and hashes:         1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: ed5t7eoEz0r69g8b8RdE/JXZPJOEAqAaYm2a7is1ft8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:2b:2a:f3:61:99:1c:2c:ee:52:cf:59:62:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
        Validity
            Not Before: May 13 00:01:10 2026 GMT
            Not After : May 14 00:01:10 2026 GMT
        Subject: CN=72647694cd47b7615583a38b8d95ee03802493ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:03:cf:38:8a:b8:a5:72:62:3b:d6:33:fc:
                    3d:ad:c8:4f:7f:9e:ef:98:61:49:5d:da:57:60:0c:
                    d7:da:d8:64:c4:05:74:a5:7f:9a:20:df:f1:51:fd:
                    6e:f8:2f:f8:1a:56:34:df:95:c1:d7:38:fa:7b:ce:
                    d6:e9:f7:ab:91:b0:91:4c:b2:8a:29:7a:31:e9:81:
                    f6:55:dd:20:a7:d1:e1:f6:e9:97:5d:53:78:df:5c:
                    1c:8c:1b:1d:b8:ef:93:0d:66:14:ba:da:6a:20:85:
                    de:89:9e:c5:a6:ab:bd:c2:27:7b:e4:7b:47:eb:fb:
                    1c:5e:b9:94:fc:3f:17:53:c3:5f:5b:6e:cd:f2:c3:
                    1d:54:ef:61:ef:60:68:88:6e:b5:9a:ff:7b:53:dc:
                    2d:e4:c9:d3:6c:a8:8e:67:db:c2:c1:38:08:e5:02:
                    75:76:e1:9f:76:51:bc:3a:15:9c:2d:0b:74:cf:70:
                    fb:e0:11:74:32:20:2b:be:b1:e7:7c:c8:8a:74:db:
                    55:e8:a1:8d:11:c4:03:15:b2:9e:06:e6:1f:9c:62:
                    ca:6a:4e:fb:9c:0f:76:23:23:bc:16:10:11:84:07:
                    e7:e2:37:3b:3f:5b:ed:a2:67:bd:63:0e:90:94:c0:
                    d3:15:02:a8:90:08:8c:ed:ae:bb:27:a7:45:cc:71:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:64:76:94:CD:47:B7:61:55:83:A3:8B:8D:95:EE:03:80:24:93:EC
            X509v3 Authority Key Identifier:
                keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:e3:55:ae:b2:3c:29:95:2b:d7:26:8c:26:cc:d9:64:25:
         1d:fb:ee:45:a5:0c:69:50:bc:84:f8:aa:ac:0e:ac:29:6d:38:
         41:51:de:29:5d:8f:67:48:96:a8:41:53:64:d8:2e:88:3d:aa:
         8e:5e:0e:f1:78:09:82:75:88:ea:36:92:f5:62:41:3d:67:2c:
         0c:7e:9d:ff:4e:b2:ee:92:0a:98:9e:78:3e:e5:45:67:2f:82:
         78:a5:13:4f:23:4d:c8:70:8b:f4:92:e6:48:c2:80:5d:fa:fb:
         b0:f1:ae:77:48:96:c9:c3:ab:af:ca:d3:be:58:dc:55:49:ec:
         5d:87:d4:e2:58:17:41:27:0b:30:9e:81:03:91:c6:f0:88:c7:
         7c:02:b2:ed:a7:2f:1e:eb:7f:bc:19:80:27:2e:e7:b2:f0:6a:
         60:1e:3a:8f:ca:dd:af:8d:3a:ab:4a:f8:9f:08:77:76:33:6b:
         ff:4b:de:4a:9d:96:7f:27:d1:b4:e6:69:2c:43:76:f7:39:4c:
         14:96:41:ae:d6:9c:e1:25:03:6b:05:33:7e:24:05:be:07:8c:
         17:96:e4:76:4b:b2:2a:67:28:79:5a:99:4e:54:0e:b7:c0:b3:
         6b:41:11:a8:d9:66:fc:65:df:04:12:df:7a:6d:98:84:29:4b:
         a4:32:2d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoysq82GZHCzuUs9ZYvrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YmU3NTA0YWY4OGFlN2MxZTM2ZTk2NmQ1OWI2NWRjNDA1
NzI1ZjEwHhcNMjYwNTEzMDAwMTEwWhcNMjYwNTE0MDAwMTEwWjAzMTEwLwYDVQQD
Eyg3MjY0NzY5NGNkNDdiNzYxNTU4M2EzOGI4ZDk1ZWUwMzgwMjQ5M2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zoDzziKuKVyYjvWM/w9rchPf57v
mGFJXdpXYAzX2thkxAV0pX+aIN/xUf1u+C/4GlY035XB1zj6e87W6ferkbCRTLKK
KXox6YH2Vd0gp9Hh9umXXVN431wcjBsduO+TDWYUutpqIIXeiZ7Fpqu9wid75HtH
6/scXrmU/D8XU8NfW27N8sMdVO9h72BoiG61mv97U9wt5MnTbKiOZ9vCwTgI5QJ1
duGfdlG8OhWcLQt0z3D74BF0MiArvrHnfMiKdNtV6KGNEcQDFbKeBuYfnGLKak77
nA92IyO8FhARhAfn4jc7P1vtome9Yw6QlMDTFQKokAiM7a67J6dFzHEOVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJkdpTNR7dhVYOji42V7gOAJJPsMB8GA1UdIwQY
MBaAFPS+dQSviK58HjbpZtWbZdxAVyXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUw1MUJLLUlybndlTnVsbTFadGwzRUJYSmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iZDcxODUtYjRhMi00Y2Q0LTliNTYt
ZjEyMDE3YTIzYjAwLzEvOUw1MUJLLUlybndlTnVsbTFadGwzRUJYSmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iZDcxODUtYjRhMi00Y2Q0LTliNTYtZjEyMDE3YTIzYjAw
LzEvOUw1MUJLLUlybndlTnVsbTFadGwzRUJYSmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsbjVa6y
PCmVK9cmjCbM2WQlHfvuRaUMaVC8hPiqrA6sKW04QVHeKV2PZ0iWqEFTZNguiD2q
jl4O8XgJgnWI6jaS9WJBPWcsDH6d/06y7pIKmJ54PuVFZy+CeKUTTyNNyHCL9JLm
SMKAXfr7sPGud0iWycOrr8rTvljcVUnsXYfU4lgXQScLMJ6BA5HG8IjHfAKy7acv
Hut/vBmAJy7nsvBqYB46j8rdr406q0r4nwh3djNr/0veSp2WfyfRtOZpLEN29zlM
FJZBrtac4SUDawUzfiQFvgeMF5bkdkuyKmcoeVqZTlQOt8Cza0ERqNlm/GXfBBLf
em2YhClLpDIt9A==
-----END CERTIFICATE-----
Generated at Wed May 13 07:58:28 2026 by rpki-client