Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
File:                     Adm2sACkY7CVvgtY_HIaT6nApGY.mft (raw, json)
Hash identifier:          8tRzUAW9bvRU7q8Icq+RMkE8fzxwpyBhCMVH2jCkg2k=
Subject key identifier:   C5:BD:FD:2A:C0:9A:55:C3:83:65:00:C6:EC:F0:48:98:3E:A6:E5:C8
Authority key identifier: 01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66
Certificate issuer:       /CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
Certificate serial:       019E1CEB6391127E29024297568D875B891C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
Manifest number:          09B4
Signing time:             Tue 12 May 2026 16:00:48 +0000
Manifest this update:     Tue 12 May 2026 16:00:48 +0000
Manifest next update:     Wed 13 May 2026 16:00:48 +0000
Files and hashes:         1: Adm2sACkY7CVvgtY_HIaT6nApGY.crl (hash: NUx92SMqOrGS+gVUnFzJPdYnf12V6/+K8D54YKKorxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:63:91:12:7e:29:02:42:97:56:8d:87:5b:89:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
        Validity
            Not Before: May 12 16:00:48 2026 GMT
            Not After : May 13 16:00:48 2026 GMT
        Subject: CN=c5bdfd2ac09a55c3836500c6ecf048983ea6e5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:fe:2c:67:2f:c4:68:9b:f8:48:1b:78:96:
                    fc:e7:63:07:0a:46:33:ed:f7:6c:3f:99:60:e2:66:
                    48:41:02:8f:d5:1b:d1:16:c0:52:9b:e1:48:18:ea:
                    77:aa:54:55:d6:cc:72:18:80:57:f0:0f:64:3d:06:
                    75:19:db:19:bd:72:41:87:8a:02:52:8f:9e:0b:28:
                    57:70:58:9d:14:19:2b:59:43:e8:df:e0:1f:89:45:
                    e0:31:76:c8:56:5d:7e:ee:b5:3b:3f:df:9c:d7:a0:
                    6b:8c:be:5c:5f:ef:5e:e1:0e:a7:19:c0:15:d6:9f:
                    f3:24:1b:e7:c9:e3:b2:7e:fb:bf:90:19:cf:86:a5:
                    05:75:7d:c6:60:0b:60:b7:d8:ee:9d:9c:54:2b:00:
                    3a:0a:2f:2e:f6:a2:40:d9:71:74:78:4a:8a:2b:70:
                    51:b6:7a:13:cf:ef:08:f4:6b:ff:79:52:90:4a:ba:
                    5f:9f:85:84:16:c5:cf:8c:c9:32:cd:40:21:2d:17:
                    e8:c4:01:4e:bf:b3:f7:27:cd:e2:87:bb:2f:47:16:
                    16:5d:68:9d:b6:79:c6:56:51:b1:e4:1e:4a:87:4c:
                    ac:4d:03:35:53:d1:4a:08:1f:a4:62:bf:e7:77:d1:
                    e6:35:cf:e1:b9:56:8c:c5:8b:85:42:c7:92:46:94:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BD:FD:2A:C0:9A:55:C3:83:65:00:C6:EC:F0:48:98:3E:A6:E5:C8
            X509v3 Authority Key Identifier:
                keyid:01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:72:be:8f:e6:d4:7f:2f:84:1b:f7:73:4f:0d:26:49:82:ee:
         7a:3d:40:ce:1c:ed:7d:2a:16:db:20:e2:30:8c:fa:33:6a:5d:
         69:6a:3a:b0:30:8c:fa:75:ee:cd:43:cb:78:c6:52:ce:8d:ad:
         4a:8a:fa:3c:97:d6:76:ba:bf:6f:04:27:54:8d:c4:13:33:db:
         00:f5:e5:9c:09:22:98:e8:f5:e6:3b:96:e5:56:3c:81:48:84:
         ff:3d:db:b9:d6:52:2f:1d:a5:59:22:17:ab:be:1b:44:95:bc:
         83:64:2d:69:1d:f5:7d:93:cc:f3:69:ad:9c:a2:fe:c0:e3:bf:
         8f:e3:c0:95:89:53:bb:40:ef:c8:25:6f:f4:24:f1:43:02:94:
         4e:f9:21:8d:a9:4b:1b:8f:d4:ce:56:05:4b:34:84:27:0b:d0:
         73:c3:63:e6:66:dc:3c:95:9b:98:74:64:ec:86:1f:87:d9:0b:
         9d:3c:0d:72:ff:94:09:8a:3c:0c:e6:9b:22:c6:27:be:03:38:
         8d:85:00:b2:77:58:11:b9:3e:58:e5:0f:48:ab:b3:8f:c4:9a:
         3f:e5:b4:a0:aa:5f:67:d1:cc:26:20:da:9e:c8:51:90:98:f8:
         1a:e9:f6:30:7c:dc:83:cd:50:34:c4:49:0b:21:6d:8a:be:93:
         16:3c:fc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:06:05 2026 by rpki-client