Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File:                     9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier:          MJT346PhY9n29jqoiQM0G2cOB8HMd2HE7ldxGxiYYF4=
Subject key identifier:   78:15:68:7C:22:6E:19:22:B9:D0:E4:5E:FA:CE:C4:29:1A:A0:8D:75
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer:       /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial:       019E1F47F721B40A18057BC8937AFC5738B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number:          06FA
Signing time:             Wed 13 May 2026 03:01:10 +0000
Manifest this update:     Wed 13 May 2026 03:01:10 +0000
Manifest next update:     Thu 14 May 2026 03:01:10 +0000
Files and hashes:         1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: Ywz07urmt3H9m6NX316OxqhRcDc5g0I7btIS98U1/NQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:f7:21:b4:0a:18:05:7b:c8:93:7a:fc:57:38:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
        Validity
            Not Before: May 13 03:01:10 2026 GMT
            Not After : May 14 03:01:10 2026 GMT
        Subject: CN=7815687c226e1922b9d0e45efacec4291aa08d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:76:e5:6c:a8:e2:d8:e8:7c:35:52:2d:a3:
                    91:e2:58:ac:76:ab:27:8f:51:28:32:79:53:90:b1:
                    16:65:4b:b1:92:7d:ce:ac:11:cc:54:5c:bc:a4:67:
                    28:56:60:be:78:9e:77:49:d5:f3:d7:79:21:55:c1:
                    90:8a:67:17:ff:0f:94:6b:f0:fb:5c:fc:57:cb:6d:
                    cb:a7:50:b4:04:43:48:1d:90:dc:0e:a1:15:c7:99:
                    01:77:1f:14:74:12:a2:8f:5f:3e:03:68:e5:ab:ad:
                    12:71:fb:c9:36:28:33:18:c7:34:13:4f:da:27:5a:
                    8b:59:b3:f2:7e:bb:8d:9b:cc:8c:22:36:4d:cb:35:
                    7a:9f:55:39:f3:fd:7a:56:2e:4e:83:24:ba:f2:7a:
                    a3:09:8d:04:38:5e:da:02:4c:00:8a:49:2c:b0:8e:
                    31:e4:75:22:5d:af:61:db:7a:61:05:65:33:87:da:
                    5d:a4:9d:28:94:a2:da:c6:61:55:04:c7:1f:5c:3c:
                    38:10:38:80:d0:be:ad:68:5a:27:15:7b:d6:7a:47:
                    f1:c5:3c:83:a3:6e:b7:1e:d2:e2:69:f5:6f:bc:cd:
                    aa:7d:a9:a1:9e:a7:91:7b:11:da:1b:2b:8d:1a:52:
                    ed:77:21:71:07:48:4f:60:d3:17:88:6e:c3:1d:41:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:15:68:7C:22:6E:19:22:B9:D0:E4:5E:FA:CE:C4:29:1A:A0:8D:75
            X509v3 Authority Key Identifier:
                keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:70:e1:7f:21:cc:1d:ec:32:c8:32:59:81:0b:f3:c6:f8:bd:
         bb:9f:c6:61:03:9f:3c:94:d9:df:d3:23:2d:c3:90:ae:c3:89:
         15:f9:c0:9d:2d:79:bd:a3:16:7c:b5:05:c3:a9:78:9f:af:9f:
         4e:75:b3:4f:6b:7a:bc:e5:14:4b:47:41:30:4e:bf:0d:33:b1:
         6d:cc:d7:42:5c:38:10:b9:cf:b7:78:85:da:1f:99:27:1d:f3:
         4d:0d:8e:d8:55:d7:9a:0d:a3:fe:5b:6e:5f:95:ee:3d:ea:65:
         27:18:b6:d5:c6:ef:7f:ee:17:a2:7a:49:58:db:a1:95:c3:ba:
         3f:f5:a9:2a:38:f0:eb:84:19:ff:dd:26:2f:c8:8b:1e:9e:6e:
         d0:58:57:b9:c4:33:28:99:02:a2:53:31:2f:0c:9d:7b:4e:5d:
         70:b1:86:50:77:9a:89:df:54:8b:8b:7c:e3:ea:cc:16:0d:7f:
         8e:d7:5e:58:eb:d9:18:5c:80:0b:46:20:4f:24:ed:33:f5:54:
         13:77:4f:79:ac:73:7a:73:ee:ac:71:92:22:b9:d1:42:d9:c2:
         e6:da:ad:d3:4d:35:a3:42:95:0f:11:04:dd:df:00:5e:05:8b:
         23:7e:37:e5:09:6a:6f:22:0e:8c:ad:61:26:19:08:7d:5c:64:
         52:db:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:19 2026 by rpki-client