Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File:                     9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier:          NuJSg9LbzPVOM8S36X5hoCOpAOm7ntW8rRt8tmWMoQs=
Subject key identifier:   03:99:E7:3F:CF:63:9C:EC:69:5B:EC:ED:17:2E:38:B9:A5:1C:CB:61
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer:       /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial:       019E1D905822276B113F0824577F9C999271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number:          0FB3
Signing time:             Tue 12 May 2026 19:00:59 +0000
Manifest this update:     Tue 12 May 2026 19:00:59 +0000
Manifest next update:     Wed 13 May 2026 19:00:59 +0000
Files and hashes:         1: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: w6M3d4skVPfg/7qwgxK/V8ND+CSLvNvzYfBIsVz8E3I=)
                          2: o3IVsTtHp4LvNCkM3vhyjfWuFnU.roa (hash: lY2LMXKbJT6BlB/lSBYqcfLveqU3+U+eDmIrpngNEak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:58:22:27:6b:11:3f:08:24:57:7f:9c:99:92:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
        Validity
            Not Before: May 12 19:00:59 2026 GMT
            Not After : May 13 19:00:59 2026 GMT
        Subject: CN=0399e73fcf639cec695beced172e38b9a51ccb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:d4:53:7a:ac:20:fc:be:d2:25:2c:ea:83:
                    25:2b:75:ff:72:e4:fa:3d:86:52:25:8c:58:3c:4f:
                    6f:8d:ff:73:47:ed:df:8c:5a:89:49:e9:ed:81:ab:
                    59:86:9f:46:af:9c:27:00:8b:fd:f2:81:23:46:34:
                    ca:3f:f4:16:cd:e2:95:b9:bd:8a:1d:77:fa:82:7d:
                    ae:9f:8e:40:ff:da:7a:81:0c:d0:80:4d:07:71:ed:
                    9a:16:ab:e6:48:9a:e1:06:ac:5d:ff:8c:82:70:ca:
                    0c:1e:64:b0:76:c1:b5:de:e2:a9:b9:2c:66:41:ce:
                    81:53:38:75:70:15:a3:83:20:21:24:dc:f4:5f:6e:
                    55:7f:37:97:07:ab:f7:0a:f9:9d:4c:d9:7c:ed:1f:
                    cc:47:b9:d5:93:88:2c:7b:61:d2:3a:45:61:cd:89:
                    6f:ac:0c:7c:e2:83:9c:94:eb:34:d7:6e:5f:4f:63:
                    c2:8d:e9:96:40:9a:50:a8:aa:97:7a:24:42:ca:60:
                    31:48:c0:02:c0:b3:cc:a2:66:8d:ae:cf:8a:22:96:
                    ce:fb:5b:cb:87:37:96:ae:4e:a2:c9:10:c7:cc:c9:
                    0b:29:fb:d2:25:ed:54:6a:f4:b0:75:c4:82:c9:09:
                    8f:a7:e2:a1:70:ec:26:0a:09:1f:1f:96:c5:18:64:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:99:E7:3F:CF:63:9C:EC:69:5B:EC:ED:17:2E:38:B9:A5:1C:CB:61
            X509v3 Authority Key Identifier:
                keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4d:d7:ce:80:e0:17:f0:b5:6a:b7:7e:ba:2f:a3:a6:e8:9d:
         8f:d8:df:27:ca:1c:10:cd:3d:35:34:89:66:39:94:cb:3b:b2:
         60:41:f6:c3:0e:83:66:18:07:54:83:ce:25:3a:7d:a3:99:fa:
         28:60:df:2e:68:14:44:b1:fd:ef:15:7d:64:91:30:4a:7a:b8:
         79:b4:06:e0:fd:34:a3:8d:1b:ca:5b:ed:05:eb:16:4a:81:8f:
         b1:a4:55:1b:9a:3e:31:c7:7d:ac:e3:bd:b7:fe:ba:52:a1:56:
         80:3d:98:83:23:1c:d9:c8:d5:55:53:07:21:4e:6e:89:ef:94:
         a7:c0:c6:dc:5a:ee:bc:cb:7a:09:56:72:a4:1d:36:6f:d6:ce:
         c4:ab:b1:d1:9a:fc:e0:98:83:bc:c5:b7:25:06:50:f8:db:cd:
         46:8a:ee:f7:08:73:4d:23:19:50:ec:14:b7:06:51:98:69:cf:
         85:8d:47:d3:26:b6:6a:a9:65:65:0e:c7:1e:15:1e:26:b0:b6:
         2f:e3:3a:14:37:33:f3:2a:45:e0:ab:11:8a:08:94:99:4e:65:
         90:62:6e:84:66:98:40:81:1c:00:30:67:fa:46:72:c4:dc:26:
         3b:1c:46:df:d0:b2:c8:69:f5:aa:bb:9f:aa:33:88:88:d9:54:
         f7:8d:8d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:19 2026 by rpki-client