Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
File:                     9mKtW4G4BxPe0-__RCmfzXZfKrE.mft (raw, json)
Hash identifier:          7dUHMY4bzPh5n6DjpRrc6SRP/MsIkAbg5ARrOuyYxn0=
Subject key identifier:   65:9B:09:A9:F4:43:4F:59:09:2B:11:50:0A:38:6F:F0:E3:5F:A2:A4
Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
Certificate issuer:       /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Certificate serial:       019E1BD8D79FF4D44E2FEBD66F54ECDFB8B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
Manifest number:          0277
Signing time:             Tue 12 May 2026 11:00:56 +0000
Manifest this update:     Tue 12 May 2026 11:00:56 +0000
Manifest next update:     Wed 13 May 2026 11:00:56 +0000
Files and hashes:         1: 9mKtW4G4BxPe0-__RCmfzXZfKrE.crl (hash: DtZBTxp2hg2pChTUh8IKTj5vk7StdENNUrfy1Pt3Rb0=)
                          2: jO3T1-EOvm7phVXV6edT90rIeh0.asa (hash: 6/Ul++o9f4AGDv6T10uaHtnXB8UK/eOuxrUr++EWOSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:d7:9f:f4:d4:4e:2f:eb:d6:6f:54:ec:df:b8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
        Validity
            Not Before: May 12 11:00:56 2026 GMT
            Not After : May 13 11:00:56 2026 GMT
        Subject: CN=659b09a9f4434f59092b11500a386ff0e35fa2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:c7:c3:b0:3c:96:7b:cb:bc:35:ce:48:95:
                    4d:41:5e:33:c6:51:71:27:63:2d:57:87:06:d4:f1:
                    7a:5d:28:51:d1:eb:e9:3d:84:6b:0e:2b:10:a0:f2:
                    d7:b9:27:f7:5f:ee:6b:14:ef:ff:a9:ee:86:fc:4b:
                    8e:5d:ef:7b:0d:4c:83:de:39:70:0c:a8:55:43:4f:
                    7f:61:b5:a9:a8:4a:1c:3e:a9:8f:4e:90:45:c6:4d:
                    f9:81:15:3f:af:1d:a2:2f:2c:91:20:d2:64:9e:d2:
                    bb:96:19:65:fd:60:5e:9d:78:3f:78:7b:94:02:03:
                    05:8d:10:c6:4f:98:6a:37:52:35:81:55:a0:27:bc:
                    da:41:52:92:0b:93:67:b0:3f:d0:5f:ba:f9:c3:78:
                    a8:23:f3:ec:74:b3:fe:1d:3e:aa:71:77:83:a3:24:
                    5b:6d:04:0a:a2:91:a5:4f:cd:9b:5d:64:2a:6a:21:
                    18:ae:74:c2:07:cd:2a:ae:ed:33:38:ef:2e:aa:ef:
                    c0:63:ec:58:cd:d7:f2:09:a1:bc:c5:ee:81:b5:34:
                    07:f2:eb:22:00:e4:9a:9b:50:4e:b4:0c:03:23:4f:
                    af:ad:31:29:e1:b1:b3:41:aa:92:aa:d7:99:cf:27:
                    00:e5:36:01:12:48:82:0a:44:57:94:e2:94:48:33:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9B:09:A9:F4:43:4F:59:09:2B:11:50:0A:38:6F:F0:E3:5F:A2:A4
            X509v3 Authority Key Identifier:
                keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:a7:ad:ae:64:40:9b:49:81:d5:a7:c4:db:78:69:43:b9:
         b6:28:37:f7:23:3b:94:ef:27:e1:21:fa:dd:cd:e7:b5:48:04:
         59:bb:e9:4a:82:d0:5a:a3:2f:db:99:bc:52:aa:cb:cd:08:e5:
         a0:89:4c:e8:2a:4d:16:b5:67:2d:9f:6b:81:07:9d:8c:6b:46:
         cd:c1:57:af:b6:5e:c1:02:62:30:1a:77:00:86:3d:fd:db:82:
         18:b2:cd:90:85:6d:b6:8c:9a:88:e2:1d:c5:39:61:e7:68:6e:
         6e:c2:d8:3f:01:09:7d:00:2b:33:7e:81:ac:cb:4b:2b:cc:55:
         47:37:d0:5a:fa:7b:c3:20:3e:ee:d4:b7:dc:6c:5e:67:ff:f6:
         4c:db:2c:b9:c4:86:30:57:09:04:f3:4f:4a:32:cd:3a:5e:03:
         d9:84:80:83:0f:22:66:f9:48:41:df:f0:76:1e:41:94:97:85:
         df:10:75:a5:c2:9d:28:77:67:95:ca:2c:3c:f3:ec:84:0e:e6:
         22:55:05:98:18:36:14:a0:ac:2d:24:57:82:61:ee:c5:0a:71:
         8c:87:6d:cf:f0:d3:e1:b9:3c:d1:36:3d:bc:ce:09:08:f1:f0:
         8a:0f:34:e6:6d:a4:82:cb:2b:ac:be:04:6a:ba:05:c4:12:9c:
         57:2c:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:54 2026 by rpki-client