Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File:                     t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier:          WZVcvs1HxxuRA+QeY8n6q3C71zAlYPAR1U54KKG6hNk=
Subject key identifier:   88:7E:05:26:25:6B:0A:CE:DF:C5:69:F6:0E:77:63:4F:BB:DA:14:CC
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer:       /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial:       019E20C8A4DDFB821E6CE8A0EBC91F985597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number:          16AB
Signing time:             Wed 13 May 2026 10:01:20 +0000
Manifest this update:     Wed 13 May 2026 10:01:20 +0000
Manifest next update:     Thu 14 May 2026 10:01:20 +0000
Files and hashes:         1: QkD6kvbjOFF159SqIoxtVy6uYtw.roa (hash: moRNSt3cT3MEpll0Dp7Um5vSYqeXw33T13RgwrHAltU=)
                          2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: a+B+2IB+vfvKP8vES4yruOJ7u/AYCM4M5q1VQqTSIZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:a4:dd:fb:82:1e:6c:e8:a0:eb:c9:1f:98:55:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
        Validity
            Not Before: May 13 10:01:20 2026 GMT
            Not After : May 14 10:01:20 2026 GMT
        Subject: CN=887e0526256b0acedfc569f60e77634fbbda14cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:02:55:0c:13:ba:a2:32:ee:1e:d0:48:cb:
                    11:e3:5a:88:6b:62:e1:f4:41:86:4c:4d:b8:49:b3:
                    a9:ac:eb:6e:4c:9b:6a:a4:61:3e:f2:d0:cf:ba:c0:
                    89:17:a4:fe:2a:14:f6:28:77:e8:6f:0b:27:dd:be:
                    12:40:51:ef:fa:30:2e:37:5f:09:d2:93:36:38:49:
                    44:2f:eb:ff:58:bd:a7:2b:40:45:a1:d7:b8:fb:19:
                    3f:66:4a:bc:04:f4:81:26:3b:84:29:0b:b6:3e:fc:
                    0a:42:29:bb:4d:f5:47:e5:e7:d2:ad:2d:e3:4d:a3:
                    01:ad:d2:f9:9e:7b:b4:8f:1a:e1:09:57:c3:03:d7:
                    0c:f1:a7:47:03:d4:cf:32:9e:97:34:bc:e1:b6:54:
                    20:77:0a:79:00:8b:ca:c7:0f:e0:5f:f0:b4:6d:f6:
                    eb:6e:63:45:22:dd:b0:11:70:40:12:3c:69:aa:0a:
                    a9:e4:9a:a8:b4:d1:54:1d:48:a9:ae:79:b5:be:0c:
                    94:ed:6a:10:54:9d:0c:c6:93:66:b4:c8:10:d9:b7:
                    6d:ed:6a:eb:e8:c9:cc:74:b1:bb:09:e4:36:cc:50:
                    46:dd:35:27:27:73:59:23:18:cc:3b:1a:81:04:cd:
                    85:80:66:1f:79:99:dd:4f:a0:35:57:f9:7c:42:1c:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7E:05:26:25:6B:0A:CE:DF:C5:69:F6:0E:77:63:4F:BB:DA:14:CC
            X509v3 Authority Key Identifier:
                keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0a:ad:25:92:1e:dd:12:f4:88:c2:e0:7f:8c:f5:5b:31:52:
         d9:bd:9e:78:39:e8:59:b0:a1:aa:1a:d4:63:e4:7a:cc:90:64:
         88:40:2c:77:ef:24:00:c9:73:c0:7e:43:58:ae:ac:77:0a:fe:
         99:28:77:b9:1b:58:c5:93:09:b4:e7:06:4a:94:f6:86:54:57:
         75:83:1a:73:30:5e:03:c6:39:e5:a5:aa:23:b6:f9:55:7b:b0:
         31:8d:62:36:ad:c4:db:cb:ad:df:c1:3e:38:f7:6e:ba:85:47:
         41:6f:f1:3c:74:74:97:99:59:38:51:22:8a:79:7e:88:e4:16:
         ca:b5:15:ff:83:db:d0:6e:2c:f2:b0:0f:2a:95:63:24:44:5f:
         31:b1:7a:72:c1:5f:5b:b1:88:52:f4:c2:3d:cf:b5:de:e1:24:
         7d:b0:e9:d8:02:97:b0:d2:e1:a9:de:2f:3a:10:b7:e4:a2:ce:
         fb:f4:a6:7f:07:34:c5:62:14:13:2b:69:a6:3e:4f:64:0b:0b:
         92:a0:cd:5e:94:91:54:0c:a4:fc:96:4c:7c:0d:c7:9e:2b:57:
         71:79:9c:2a:b2:eb:c5:d5:ae:21:68:50:23:da:dc:f6:0d:7c:
         42:8c:7e:6f:17:ee:3c:70:a1:62:3d:60:e4:fa:ca:c8:15:7b:
         6a:36:b3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:34:17 2026 by rpki-client