Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File:                     k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier:          CLmM3SJUOZ95F9OvIq5eNoadhNTmz6l32q6Mt3RGhGY=
Subject key identifier:   58:70:BB:2C:70:18:AE:02:D0:2F:7B:3B:ED:A6:97:DE:FF:62:9F:D9
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer:       /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial:       019E1FECCB9897545E8B64A81B079613BA96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 06:01:12 +0000
Manifest this update:     Wed 13 May 2026 06:01:12 +0000
Manifest next update:     Thu 14 May 2026 06:01:12 +0000
Files and hashes:         1: e06_jEIDuFW1OUI1Yr38xB0lxx8.roa (hash: gSYcnsHJnz/xJ/EuZcj8lHoCpS2M+qgzC3QMJw+m3cU=)
                          2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: 8uzcuBoscWskpV8Oc+B51Uj8jtQuAvx8O2WrYowJG98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:cb:98:97:54:5e:8b:64:a8:1b:07:96:13:ba:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
        Validity
            Not Before: May 13 06:01:12 2026 GMT
            Not After : May 14 06:01:12 2026 GMT
        Subject: CN=5870bb2c7018ae02d02f7b3beda697deff629fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:38:dc:1c:f4:de:50:ff:51:9e:19:ca:75:
                    a1:05:18:82:a0:54:55:ea:7d:b4:19:34:51:62:6c:
                    92:ae:e1:bf:bd:82:74:6d:c7:37:08:ad:5d:34:ab:
                    c5:5d:08:d9:9c:0e:71:9d:2f:82:26:2a:f7:19:f9:
                    21:7f:a8:82:42:c7:63:1a:19:d5:8c:23:38:e5:bf:
                    bf:61:9a:bc:e3:49:e0:7f:82:df:aa:1b:82:3f:32:
                    6a:ab:1b:fe:d0:7a:fb:ff:06:5f:79:2d:1f:f1:82:
                    fd:78:3d:66:e0:2a:16:77:9e:33:58:de:5f:46:68:
                    dc:18:83:69:e0:f9:a4:ac:ad:2b:18:ea:9b:fa:68:
                    3e:bc:f8:e2:8f:09:d5:06:f0:82:70:36:f6:30:5a:
                    ef:53:1e:52:80:b7:a4:92:15:3e:58:a0:ad:a4:f3:
                    24:c7:6f:c3:62:77:c7:19:ee:ff:48:a0:50:59:3e:
                    32:0b:d1:58:22:d6:4f:1f:eb:88:d8:4a:f1:81:3f:
                    fb:77:c7:54:7e:84:d9:b6:16:74:4b:c5:12:d7:a5:
                    63:0d:71:ab:64:a7:05:3f:9a:cb:e4:17:09:25:1d:
                    45:fc:b6:ba:1d:78:55:06:5f:bf:b3:62:82:45:1c:
                    c4:28:d2:14:83:78:77:17:1e:d7:99:dd:56:4b:f8:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:70:BB:2C:70:18:AE:02:D0:2F:7B:3B:ED:A6:97:DE:FF:62:9F:D9
            X509v3 Authority Key Identifier:
                keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e0:3e:b8:49:1c:48:02:2d:fb:a6:51:07:dd:58:59:dd:d3:
         e4:a0:8f:cc:55:c5:ec:29:c9:84:1e:b3:a9:c3:91:38:b3:28:
         a6:b9:04:0e:50:00:8b:22:bd:77:a9:0b:f6:72:e8:d4:ef:7e:
         b1:0e:a1:c6:96:2f:90:75:bb:13:68:8f:b8:f1:fa:c8:39:7e:
         35:1f:9b:92:28:8a:25:67:1d:df:64:df:7c:c5:62:6b:35:35:
         02:e7:08:5f:dc:10:7e:24:39:49:15:e3:c7:89:65:45:4e:7b:
         24:6b:52:35:70:ae:a4:4a:3d:55:7e:e1:d2:55:93:77:8c:d1:
         82:64:74:87:21:d4:cc:d9:ce:6a:b5:e9:32:48:31:da:4c:47:
         9f:eb:3d:74:ba:35:82:b1:66:b2:3d:f7:6d:be:11:82:bd:3d:
         cd:a2:2a:f1:a2:46:57:47:4d:91:87:77:62:75:4b:3f:3b:07:
         8b:66:2e:d4:5a:cb:7b:73:50:3f:91:44:8f:c8:36:79:b7:1a:
         e5:b3:75:05:b8:5d:52:90:94:33:dd:93:46:7a:16:81:03:0a:
         09:4a:5b:aa:99:67:82:89:db:33:48:1e:4d:cc:02:41:cd:c0:
         5c:bf:77:89:ae:73:c9:8f:77:13:62:ed:b9:27:8f:2b:ec:0a:
         d5:f5:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:26 2026 by rpki-client