Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File:                     9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier:          GTstQFazoSxEXJFj5EqmKqfaEI60C6+iTMTpEiMjie4=
Subject key identifier:   8A:29:00:A9:DE:61:DF:39:F0:2C:76:E1:A7:0F:88:3A:33:35:01:16
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer:       /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial:       019E1C46B0A836AEA5CEF1C6DD976C689D26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 13:00:55 +0000
Manifest this update:     Tue 12 May 2026 13:00:55 +0000
Manifest next update:     Wed 13 May 2026 13:00:55 +0000
Files and hashes:         1: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: 50IfHSZ+bbBn3h8Gc1xTh5dUCw/iVPyXDZ1J1srQENI=)
                          2: DM0EXQBkZr0e7E2rftq5-TtNVUc.roa (hash: 4qPVGZtejJWXy8T9lJtHmIGF6CkNf88ym74PPqmxTh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:b0:a8:36:ae:a5:ce:f1:c6:dd:97:6c:68:9d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
        Validity
            Not Before: May 12 13:00:55 2026 GMT
            Not After : May 13 13:00:55 2026 GMT
        Subject: CN=8a2900a9de61df39f02c76e1a70f883a33350116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e4:12:f4:33:dd:f5:7d:2d:9e:20:2d:f6:28:
                    d7:63:70:cb:46:ab:2c:43:e9:e8:c7:0b:13:7b:4d:
                    77:09:13:d4:7a:d9:1e:96:bf:32:ef:1b:14:97:72:
                    f8:88:9d:48:1b:34:26:a2:b6:ea:54:a0:2b:44:35:
                    e9:bf:3f:41:d9:f7:27:05:34:31:f7:1f:c2:1d:c6:
                    59:c1:06:8a:98:83:81:11:3d:8b:f1:e9:8e:be:62:
                    6f:17:69:05:08:d6:e8:06:92:78:64:a7:f9:9d:66:
                    8b:30:a4:05:d0:fc:bc:db:a7:c4:d4:00:cf:6e:ac:
                    98:12:59:cd:ff:e3:9e:5d:32:2f:0a:d1:93:68:9f:
                    74:88:32:0c:52:78:ae:11:da:af:27:c1:cc:bf:ab:
                    a0:05:4e:3d:7f:47:0d:b2:1b:1e:d3:6e:4b:7c:db:
                    db:69:b2:a8:2e:a1:0d:e9:55:0a:4a:69:1a:c4:f1:
                    36:84:a2:20:1a:93:ae:1c:da:86:66:f4:24:9f:72:
                    1a:ff:39:17:53:83:71:2c:30:ac:2a:f8:c5:55:5d:
                    c5:8d:7a:7c:46:4d:7d:a4:40:c9:fa:c7:38:3d:b1:
                    f4:12:2d:da:5f:13:dc:be:1f:f6:64:5a:b4:cc:e6:
                    67:5c:ae:fb:c3:60:7c:fa:c5:18:3c:b0:88:36:c2:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:29:00:A9:DE:61:DF:39:F0:2C:76:E1:A7:0F:88:3A:33:35:01:16
            X509v3 Authority Key Identifier:
                keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:84:d2:8f:3b:45:67:21:75:9d:cf:7b:b4:7b:95:14:ab:b6:
         69:df:9d:ff:50:34:d2:2b:b7:50:1f:3d:33:e4:34:45:64:2a:
         7d:60:84:82:e7:94:0a:24:1c:78:83:7c:19:85:a1:07:2a:d0:
         10:52:f4:cc:5c:8d:57:34:03:5f:33:2c:2c:61:81:6e:bf:dc:
         ed:46:12:50:79:dc:c7:b2:83:5d:7e:7f:15:ab:b8:9c:3e:32:
         7b:2a:9a:95:1c:fd:4a:e8:2d:29:6f:ee:42:67:63:b2:09:a2:
         da:39:47:28:19:8c:6f:62:b1:a1:ad:81:82:9a:de:a5:d5:b3:
         1b:89:92:f4:13:19:a5:e3:b2:c1:4e:e1:78:e1:a7:45:a7:f6:
         31:65:3f:7b:54:06:19:db:54:24:da:28:12:b6:41:ee:a4:73:
         81:4a:13:c8:07:4e:10:b1:88:4c:37:68:6c:f2:92:14:f5:be:
         5f:3f:5d:a2:ca:a1:7f:48:fd:b3:c9:19:82:d5:25:8d:f5:3b:
         82:2c:18:24:4b:88:14:a5:3e:ff:a3:a8:6c:3c:57:99:d3:2c:
         12:a8:08:1f:40:a1:55:aa:ef:bf:c8:18:b9:ef:46:84:4f:0d:
         78:c6:0a:86:45:31:ef:df:7b:c9:fe:5b:a1:1e:e9:65:ee:60:
         7e:f4:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:01 2026 by rpki-client