Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
File:                     9wC7WRwCd4gZrqH1uPZEFns9fC4.mft (raw, json)
Hash identifier:          VfpEKw0u1kJnvOwx/nx8mxH799zDdJElRoo6s7ibkC4=
Subject key identifier:   E4:41:A7:BE:DF:90:7A:03:F1:DC:2B:FB:E6:4A:8C:8D:EC:92:AC:14
Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Certificate issuer:       /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Certificate serial:       019E1EA361EB41E7AB9FCAEAD8AFDFCE4043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
Manifest number:          1206
Signing time:             Wed 13 May 2026 00:01:24 +0000
Manifest this update:     Wed 13 May 2026 00:01:24 +0000
Manifest next update:     Thu 14 May 2026 00:01:24 +0000
Files and hashes:         1: 9wC7WRwCd4gZrqH1uPZEFns9fC4.crl (hash: ZXnSYNJTl66A81FU4EdJK5g48/YOaOLmlyJSDyG0W9c=)
                          2: m9ax6fV80QEgisnL3rfCwvuiHic.roa (hash: vrUM/z04y/dRg7/NnKEWJQ8bNd/0nOnDv8dSvV5H95E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:61:eb:41:e7:ab:9f:ca:ea:d8:af:df:ce:40:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
        Validity
            Not Before: May 13 00:01:24 2026 GMT
            Not After : May 14 00:01:24 2026 GMT
        Subject: CN=e441a7bedf907a03f1dc2bfbe64a8c8dec92ac14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:13:20:31:5f:21:96:d0:d2:6f:2f:55:be:
                    ff:c2:bd:b5:91:02:04:58:1b:4c:97:e0:7f:bc:76:
                    aa:b0:7c:7a:86:5f:28:9f:c2:a3:50:99:a8:5b:25:
                    31:a6:e2:7c:ca:dd:96:ed:f3:fd:c4:d9:25:49:be:
                    f3:2b:df:0b:86:36:e9:0d:d7:13:b5:74:2c:22:fd:
                    d2:ad:18:b0:cc:0a:8f:d3:20:e1:77:e5:0f:1b:05:
                    f9:85:c1:dd:30:67:4a:29:c9:00:08:9e:6d:64:1c:
                    4f:b3:e5:01:e6:a5:de:6a:29:39:b8:29:17:9b:06:
                    1b:59:54:67:04:b5:f7:13:65:f8:37:53:2a:28:38:
                    53:39:d3:11:18:46:86:a1:f7:23:3e:37:fe:19:0e:
                    78:94:26:4d:23:ee:96:7d:7c:a1:20:e2:93:25:59:
                    62:d1:e4:62:47:cb:b5:fd:78:02:16:ec:fd:8f:d1:
                    8e:2a:b9:b6:66:96:f1:5b:09:f3:ae:0f:fd:9b:e6:
                    58:dc:45:1b:ce:0d:e7:d3:3a:22:52:a0:ac:c4:a4:
                    31:62:cf:83:03:6b:0c:f9:34:5b:35:43:b8:28:1a:
                    89:a7:14:3a:71:fb:b2:b1:f0:3d:0e:f0:ac:06:da:
                    a3:c6:5e:bb:e6:9d:ac:3d:0f:c8:ad:74:8b:a3:76:
                    24:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:41:A7:BE:DF:90:7A:03:F1:DC:2B:FB:E6:4A:8C:8D:EC:92:AC:14
            X509v3 Authority Key Identifier:
                keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2e:04:96:95:89:8c:f7:18:c7:23:cb:aa:46:2b:d3:c4:bb:
         61:84:57:71:32:b0:15:a4:7a:cd:58:47:58:25:fe:7b:8f:17:
         9b:69:45:d1:09:77:57:a8:8b:38:87:b4:40:e4:04:82:15:94:
         6a:91:17:16:6f:47:cb:a3:f0:1f:c2:9e:3a:03:5d:c5:d8:70:
         69:f9:3a:f0:0a:9f:0e:c0:5a:d5:b1:0d:03:24:8e:b4:47:b3:
         b0:f9:54:e1:71:ee:fa:93:6a:7a:cf:1a:9a:ed:74:f6:3e:73:
         5a:27:ab:92:30:b5:f1:8c:21:ae:cc:15:f4:57:bc:1d:bd:31:
         b4:5d:43:14:b1:cb:a6:53:7b:a3:40:58:8d:57:cb:ac:2b:28:
         e0:dc:3b:d8:b5:c7:d2:70:8f:e0:73:67:d5:b7:19:16:8d:c2:
         e6:0d:9a:39:38:37:a1:2a:0c:4d:24:db:a0:1d:ce:8f:bb:e4:
         09:44:c0:09:c1:bd:1b:97:ba:1a:2f:60:ad:91:68:35:ac:bf:
         bf:e2:13:67:99:63:6f:cf:f1:50:ee:0d:47:c3:86:25:37:b1:
         2b:fa:da:c6:7a:d0:35:46:d3:7a:70:8e:3d:0a:e4:8e:6f:7c:
         17:c2:70:07:3c:88:5c:63:17:de:8a:f3:31:40:98:21:25:1e:
         55:a9:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:39:11 2026 by rpki-client