Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File:                     C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier:          Ju9MTU60Bly28AYToqPMZmDBFJfxIhcLpHM+RvpnU58=
Subject key identifier:   F6:B7:63:1E:06:55:73:DA:F6:80:C6:E6:0C:C2:29:98:71:26:87:17
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer:       /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial:       019E1D90D895FF6E52D731AD6DD0E33CFA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number:          0529
Signing time:             Tue 12 May 2026 19:01:32 +0000
Manifest this update:     Tue 12 May 2026 19:01:32 +0000
Manifest next update:     Wed 13 May 2026 19:01:32 +0000
Files and hashes:         1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: tr519HhyhS9S7ZgcXgxeU5Ky+KPRjNbptMioTyqzFgI=)
                          2: WJTr2Tk1_nZlSZj0AI0um0QiPjI.roa (hash: mYhezBwJPYjVc5I7W3f+glCZHfaPOouHpLS/423/Sw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:d8:95:ff:6e:52:d7:31:ad:6d:d0:e3:3c:fa:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
        Validity
            Not Before: May 12 19:01:32 2026 GMT
            Not After : May 13 19:01:32 2026 GMT
        Subject: CN=f6b7631e065573daf680c6e60cc2299871268717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:8e:13:59:6d:da:62:8c:f3:9e:6e:f4:6d:
                    44:1b:b3:51:ec:33:4f:e6:26:f7:59:a4:41:2b:4f:
                    1d:fd:ed:1f:b9:af:52:02:af:c0:3e:b1:e9:9a:91:
                    45:fd:00:1a:a4:a4:b3:05:09:d3:21:f7:73:76:2f:
                    c2:57:01:a9:e9:fb:40:a9:db:65:98:b3:25:15:c8:
                    74:ce:15:7e:48:65:e6:61:d6:93:ab:49:4c:ba:34:
                    78:d9:a6:d3:82:8e:a5:c2:db:48:50:10:ba:79:1d:
                    91:27:9c:aa:b4:17:72:81:35:1d:76:4b:17:ba:d4:
                    a4:2b:29:72:7d:ae:a4:bc:81:79:5a:c4:90:e5:69:
                    84:89:da:81:b1:e2:aa:b3:7f:7a:08:f7:de:ca:c7:
                    0d:28:ec:c9:75:4e:9e:78:94:87:eb:75:e8:e9:6c:
                    4a:61:d3:b6:c4:dd:e4:14:37:43:e8:ed:fd:d6:c9:
                    88:44:73:2b:c2:a7:6f:1c:26:16:45:40:7b:fe:3e:
                    6b:51:17:0f:1e:70:18:ad:50:58:6d:24:94:00:f1:
                    e7:e4:2a:cc:a6:a6:e2:39:c3:7d:a8:0a:88:42:ed:
                    ea:d0:75:03:2f:11:0c:bb:b8:a0:ee:bd:a5:20:c1:
                    8d:e6:b9:bf:d2:fe:80:94:d8:13:16:c7:66:f8:71:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B7:63:1E:06:55:73:DA:F6:80:C6:E6:0C:C2:29:98:71:26:87:17
            X509v3 Authority Key Identifier:
                keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:54:92:82:46:e0:42:61:09:62:5f:d3:6f:b0:6f:6c:83:33:
         bf:8f:0c:28:9c:40:a1:47:5d:9c:a8:94:ab:f0:68:f6:32:6e:
         bd:27:fe:71:3c:b4:9a:43:55:4f:0b:08:bb:4b:a7:64:30:4b:
         d1:cd:0f:f8:09:6a:57:b4:5f:6b:18:93:46:98:0d:94:da:84:
         ff:75:1b:14:b1:26:e2:0f:c2:1a:c0:c7:53:88:5f:a3:f8:95:
         1b:51:c0:7c:32:34:6f:ec:90:5e:1e:92:cd:30:58:ff:e8:32:
         11:96:8e:17:17:c0:0a:de:bf:cf:dd:f2:b7:e4:00:49:70:40:
         b8:79:dd:1d:af:fd:f9:25:79:55:20:f6:1a:67:c8:4f:cf:16:
         59:7c:26:55:02:72:7d:20:c0:86:fb:64:9a:4f:76:77:f6:26:
         dc:d4:ef:ea:41:5f:ac:02:fe:3c:62:56:46:01:1d:1e:ef:e8:
         4b:be:66:1a:93:25:ec:b7:c1:c5:27:a8:ca:7e:0d:b7:b2:4c:
         72:13:33:a1:e5:eb:f3:37:78:4d:a7:78:94:5d:aa:c4:e7:bf:
         9a:37:94:0e:ba:14:a9:5b:f2:83:e1:57:f7:89:12:9f:f2:f0:
         87:05:a1:cb:38:0f:81:da:1f:fa:18:b7:64:f3:07:37:73:d0:
         b5:4f:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:51 2026 by rpki-client