Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File:                     CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier:          iJVyp45si5bl35FOPkmuyXJOso3m/fdWNsSKEkp8k1s=
Subject key identifier:   B9:06:FE:7B:B4:8B:78:4E:2E:53:5F:AD:F7:B7:AA:9F:80:D2:35:CE
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer:       /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial:       019E1C10024EE221A798654165CE31E68343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number:          164D
Signing time:             Tue 12 May 2026 12:01:11 +0000
Manifest this update:     Tue 12 May 2026 12:01:11 +0000
Manifest next update:     Wed 13 May 2026 12:01:11 +0000
Files and hashes:         1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: 7zFj1nwcs9z/QZUonXttfmZz0kAtVgcJp4lCfXyWQ6s=)
                          2: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (hash: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:02:4e:e2:21:a7:98:65:41:65:ce:31:e6:83:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
        Validity
            Not Before: May 12 12:01:11 2026 GMT
            Not After : May 13 12:01:11 2026 GMT
        Subject: CN=b906fe7bb48b784e2e535fadf7b7aa9f80d235ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:e3:ad:f3:e3:87:2e:d3:e0:93:21:27:42:
                    9b:d3:10:02:9b:f6:21:4f:01:30:c0:e2:58:26:ee:
                    ae:10:26:48:e6:ef:a6:ca:5b:c1:2a:64:9c:8c:70:
                    51:18:f6:5f:48:9a:86:1d:c1:29:62:84:aa:b0:3f:
                    46:cd:0f:9f:b1:11:5d:4d:0d:3f:74:a7:e3:db:68:
                    d6:12:18:3d:f6:18:d7:e2:df:ca:19:f9:08:12:39:
                    df:0b:07:b5:cb:b3:6b:c2:e0:49:48:d8:38:58:a2:
                    52:df:80:a1:08:56:b8:b8:f8:b3:32:7c:41:0e:fb:
                    ab:84:14:75:30:bb:27:92:a7:e1:d7:5e:d6:2e:d9:
                    76:9e:3c:0c:06:52:03:3d:42:1d:d3:ab:90:fe:f4:
                    10:00:4e:81:f8:93:89:87:a0:f4:c7:57:d0:5d:59:
                    bb:8b:24:09:a6:20:d0:02:6f:e5:f1:1c:23:25:1d:
                    0d:ab:9f:e4:f1:c4:0b:55:5b:22:8e:f2:bf:55:2a:
                    fd:e8:1a:69:ce:ad:df:14:5f:2c:53:d1:f6:7a:b8:
                    d1:02:c8:c4:f2:3c:7b:10:ce:a3:22:8b:95:c4:29:
                    0a:c3:0d:c8:a7:0c:a3:67:de:0b:f5:21:8b:ab:f1:
                    17:73:9b:64:bd:80:ff:64:07:46:bb:bc:31:08:7c:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:06:FE:7B:B4:8B:78:4E:2E:53:5F:AD:F7:B7:AA:9F:80:D2:35:CE
            X509v3 Authority Key Identifier:
                keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:b1:19:6f:9f:5e:13:3b:f7:28:fb:64:34:48:a3:42:e1:
         1c:71:38:0f:31:94:e8:e6:0c:74:ba:a8:11:1b:b2:12:c6:3c:
         67:e6:bc:cd:98:09:e3:45:bf:18:5a:be:6d:4a:9a:76:c9:83:
         35:58:52:e6:93:1c:32:09:79:5d:48:0e:a6:1a:e5:1b:80:58:
         52:8e:02:09:0a:db:41:73:72:3a:a6:b9:f5:46:8f:4a:cf:aa:
         88:84:5a:39:75:d0:f0:49:60:d4:3e:53:ea:24:d4:1d:e1:b4:
         e7:5a:f0:f5:28:e5:e6:ad:2a:c6:60:d1:ff:56:f6:24:e0:d2:
         cd:7c:00:e6:98:81:d2:6c:4d:8f:93:0b:f1:48:16:97:04:6c:
         6b:16:b2:06:b8:76:92:a1:bd:db:0e:74:7e:23:57:7b:40:3f:
         bc:21:7c:ac:22:9f:83:d7:cf:ff:77:1a:25:e1:c3:e1:0f:80:
         ae:f9:12:bf:25:17:a5:b4:56:4b:77:61:34:84:d1:9b:3d:f4:
         59:e8:12:f6:34:cb:40:1e:4c:fa:d7:b7:e5:29:09:be:68:68:
         64:99:24:e7:5c:6f:8f:4e:42:ec:db:eb:17:c7:e0:7f:cf:6e:
         f1:0b:99:40:c2:b6:d3:f8:04:39:6c:d4:78:ce:fc:65:1b:1c:
         84:d3:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:14 2026 by rpki-client