Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
File:                     9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json)
Hash identifier:          wsEszJS+sJRMT6KnrstzemLFPkpcOgEIPz3g9KkCeyk=
Subject key identifier:   EA:18:DD:49:0A:63:6A:22:11:14:15:19:75:D5:E0:08:B0:1C:8D:AC
Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
Certificate issuer:       /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Certificate serial:       019D25BA37CE5608D2253B9BEE726818A865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
Manifest number:          094A
Signing time:             Wed 25 Mar 2026 16:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:54 +0000
Files and hashes:         1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: ToKaV4Ue4hM/nqJd+SeWttS7dUVWHItbhlj9xUmkE+s=)
                          2: RXJtHW17ga48zDFcubRcsM8yvss.asa (hash: WyEDuaDUlsx2HrDyBKB8PUVqNo4aRQ6m9UiOaGV4R+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:37:ce:56:08:d2:25:3b:9b:ee:72:68:18:a8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
        Validity
            Not Before: Mar 25 16:00:54 2026 GMT
            Not After : Mar 26 16:00:54 2026 GMT
        Subject: CN=ea18dd490a636a221114151975d5e008b01c8dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:65:7d:50:3f:71:8d:f6:39:83:2a:af:23:
                    3f:ca:0b:21:00:64:91:7f:35:d3:8d:46:04:aa:38:
                    52:fd:af:5c:8f:5b:10:a5:06:b8:8d:fb:50:b2:f3:
                    22:ae:68:d6:df:6c:4c:a0:19:a6:ce:4e:f8:3d:71:
                    35:67:4f:b0:75:4b:30:17:d5:c9:7d:f5:5b:70:22:
                    93:cc:94:d4:68:cc:18:b6:c3:bd:59:e3:da:3e:20:
                    28:bd:5a:a4:45:b5:4e:a2:c1:19:e8:e9:45:a5:fd:
                    00:eb:94:ef:21:b5:7a:cf:87:85:94:eb:b5:6f:22:
                    c1:01:85:86:e8:db:83:80:7c:f4:42:84:57:50:2e:
                    81:52:65:4c:43:a9:e9:83:53:1a:13:ab:e5:a6:32:
                    34:8b:66:ae:72:07:81:c2:ca:4f:dc:a2:a0:d5:a2:
                    2d:2a:e6:be:be:22:e8:5f:c8:53:b5:68:21:fb:99:
                    c5:2a:51:6c:1d:f0:15:37:2e:a2:4d:c0:70:3a:87:
                    e9:f9:30:34:ed:eb:a5:8a:ea:8f:cd:4c:a1:dc:b5:
                    82:36:c7:a7:6c:a4:32:92:0e:bc:df:31:71:dc:18:
                    44:2e:53:3a:63:ca:5f:6d:5a:eb:23:95:93:69:79:
                    50:00:f1:50:69:b6:c5:2c:e7:03:8a:01:91:0c:7e:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:DD:49:0A:63:6A:22:11:14:15:19:75:D5:E0:08:B0:1C:8D:AC
            X509v3 Authority Key Identifier:
                keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:53:25:3a:d7:ad:0a:cd:0e:a0:73:6c:04:c7:db:e6:7e:83:
         77:51:d0:22:3d:8f:c4:1c:3b:28:ba:30:bc:2e:56:72:83:b3:
         92:1a:04:77:82:25:44:fd:73:f3:29:61:81:6f:b4:d4:f4:a9:
         f6:83:46:3b:71:04:d6:33:74:88:82:73:e5:92:fd:ea:e4:20:
         82:1e:16:77:55:33:4d:47:fe:42:8f:83:40:2a:09:b5:06:5c:
         d2:d8:6e:89:50:fb:d8:12:8c:80:4e:2d:a0:5d:19:fb:e1:22:
         e5:6d:d3:e7:8d:1a:40:1d:30:de:c2:c2:ab:70:f1:d6:b0:f6:
         7c:91:b7:0e:14:ce:e3:59:9a:d7:d0:7c:2b:05:1a:59:b2:ca:
         5a:3a:69:da:fa:15:ca:91:b5:b4:15:40:23:c1:90:94:3b:b3:
         8a:ae:5f:58:3c:d5:33:29:bc:c0:0e:c0:62:1f:41:e9:36:a0:
         28:ab:c0:c1:d7:d5:d8:59:30:6f:ef:ac:99:95:9b:4a:1d:21:
         85:08:96:5f:1c:96:df:49:e4:06:c3:a2:b1:b6:10:8e:02:f7:
         da:12:fe:fd:b1:43:a0:56:07:8e:b8:d9:98:ed:16:68:15:b3:
         c4:43:fb:18:bf:ff:5f:a2:28:68:bd:c8:dd:23:64:97:cd:64:
         b6:ac:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:31 2026 by rpki-client