Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File:                     m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier:          0EWv+0tf7FzruI6wSdUfLDiZ4ngqkR0mSMlWYjWOXUk=
Subject key identifier:   63:3D:AE:9E:3B:04:70:5E:3A:32:61:3F:F6:EC:FB:5B:48:B6:78:D9
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer:       /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial:       019E1DFE2EEA2E36E752FCF2A2766A89E62E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number:          10F1
Signing time:             Tue 12 May 2026 21:00:57 +0000
Manifest this update:     Tue 12 May 2026 21:00:57 +0000
Manifest next update:     Wed 13 May 2026 21:00:57 +0000
Files and hashes:         1: QP9Oe3_zJ6yuF3kAViKnMINjXbE.roa (hash: kIkr4A1mpUTupFUwElbDch1PJM/dciLvNLfYLTlKNU4=)
                          2: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: kWR0GNrO4tCAnQidHSSH0WdC3n4VnKvL6FppFFd/4nk=)
                          3: ymQkqx6vad1BOcZP1A2ksCcXq8M.roa (hash: Mkk7iKFq74kIN4TjOOrbxIdyK2vnb7PkhTT7pKGa0yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:2e:ea:2e:36:e7:52:fc:f2:a2:76:6a:89:e6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
        Validity
            Not Before: May 12 21:00:57 2026 GMT
            Not After : May 13 21:00:57 2026 GMT
        Subject: CN=633dae9e3b04705e3a32613ff6ecfb5b48b678d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:59:93:9d:b9:3a:e5:77:4f:70:7e:fa:94:de:
                    af:1d:ba:f1:27:9d:69:8f:96:cd:72:f8:f3:e7:79:
                    58:db:80:ec:0f:08:87:4a:96:45:b3:68:09:f4:5b:
                    b4:37:ed:6f:57:94:d8:58:df:cc:97:ec:69:5e:8f:
                    45:be:de:0c:32:c3:01:74:c8:15:4a:93:6f:ce:55:
                    9b:71:e8:31:59:0d:18:b9:f2:ff:e5:d2:19:b3:4f:
                    40:7b:93:58:fd:fb:3b:ec:b7:ae:89:92:0b:2d:26:
                    da:29:51:73:56:f0:28:31:cb:76:2f:26:2b:81:1c:
                    df:cc:f7:f9:c8:14:cb:65:6c:a2:4d:d8:b4:fd:ff:
                    a1:52:bc:16:04:09:b0:d6:fb:14:bf:59:fa:28:fc:
                    33:cd:5a:60:e4:4b:71:5a:78:d6:68:ff:2b:c4:88:
                    47:55:1f:42:1d:3f:11:05:ba:b6:f1:90:c0:67:23:
                    17:47:4a:f7:fd:df:fc:b5:96:d6:a7:66:f6:99:5f:
                    66:73:f3:fa:b7:8b:45:3d:d2:c0:28:77:ec:1e:84:
                    b6:58:d0:fb:d9:1a:ce:7d:c2:c1:19:f3:74:39:c9:
                    d0:58:3c:0d:0d:47:01:01:a9:8b:b6:8c:6b:4d:10:
                    ff:fd:58:3d:80:3e:87:91:05:60:25:1c:b1:bf:99:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3D:AE:9E:3B:04:70:5E:3A:32:61:3F:F6:EC:FB:5B:48:B6:78:D9
            X509v3 Authority Key Identifier:
                keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:90:a0:63:e1:54:9d:33:ea:cd:6a:a3:e7:c8:91:4d:85:97:
         16:16:50:87:73:78:fa:4b:83:d3:06:ab:8e:0c:32:5c:fa:b3:
         e9:05:50:80:c0:8d:3a:99:e8:b3:2c:fb:18:96:6b:92:1d:5e:
         59:3d:ea:c4:6e:1e:af:72:ac:ee:1f:02:f7:ad:d4:af:4f:46:
         9a:c6:33:4b:aa:05:bc:40:64:9f:63:7d:ba:ff:0d:bd:16:32:
         2f:54:ca:3c:c2:b3:44:a7:20:ce:b4:82:14:f5:d9:3e:21:bb:
         5a:3d:e6:fd:10:75:f9:06:d6:48:8c:64:ee:b1:16:ca:cf:99:
         c2:e1:e0:b9:78:3c:17:eb:b6:fb:d8:70:51:96:37:82:f3:6c:
         25:d1:45:43:45:3b:72:e9:f8:34:af:a7:e2:9c:69:66:11:4c:
         60:69:dc:f3:3d:10:ab:e6:f2:ff:d0:d7:79:94:0d:56:ac:46:
         c0:7a:f6:fb:a2:84:99:4b:5c:ee:85:3a:94:02:e2:0f:7f:39:
         30:b6:a9:0b:18:89:49:40:f4:9e:96:ef:0d:97:9b:85:c5:63:
         c0:58:f9:c4:72:5a:f3:48:c5:8e:fe:a8:af:ab:72:14:b1:e8:
         88:d0:17:ff:c0:0c:1b:a7:50:c1:1b:4a:3b:18:d7:e8:be:d1:
         a7:5a:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:46 2026 by rpki-client