Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          z+0EDo2qq3sPp6mDDuAQ0gyHGKhrpRDsxO3mefi2IlY=
Subject key identifier:   34:F0:F4:C4:41:82:F2:19:E6:8E:BD:05:CA:6B:C9:CE:58:96:AA:46
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       019E1D228FA78BF571EACFD2CD3CF75BD129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          1928
Signing time:             Tue 12 May 2026 17:01:04 +0000
Manifest this update:     Tue 12 May 2026 17:01:04 +0000
Manifest next update:     Wed 13 May 2026 17:01:04 +0000
Files and hashes:         1: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (hash: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: jo8BoR4y8D5H8FHwXsiYiwUdQkQIu425pZC8mPDrIiw=)
                          3: JwMa_OKFEJkfBud_nRF4Yr1EBcI.roa (hash: /VsHsI3B3+4j22i8JBP8N6Qag2/UqB/6t7N5JIn6DXQ=)
                          4: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
                          5: bpOsvvhDvb2oNTbbIzf3ikgwPfg.roa (hash: 7AJcyPCgLE0neQA43CsfU92sauGHZs9aveSEomOpMW8=)
                          6: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
                          7: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:8f:a7:8b:f5:71:ea:cf:d2:cd:3c:f7:5b:d1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: May 12 17:01:04 2026 GMT
            Not After : May 13 17:01:04 2026 GMT
        Subject: CN=34f0f4c44182f219e68ebd05ca6bc9ce5896aa46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8d:97:2f:65:dd:eb:6c:99:b0:e4:e2:e5:2a:
                    be:2d:43:20:d0:f3:9d:df:da:ed:6f:a3:9e:8c:e2:
                    de:9f:c3:74:6b:3c:ff:2c:82:b9:ea:d2:5f:9c:09:
                    82:ed:86:0b:47:64:9b:0c:40:aa:98:05:ed:f5:1e:
                    59:8c:07:df:8b:4a:b0:1f:56:8f:33:34:76:06:75:
                    66:8b:49:28:e2:6d:5f:34:7d:d3:10:f3:d8:4d:ea:
                    c2:48:10:d6:09:e3:26:a6:ca:93:f0:90:09:f4:cb:
                    a8:8e:67:3b:47:f5:8d:9e:17:40:6d:25:05:71:be:
                    bc:82:7b:95:9e:6c:7f:5d:89:b4:a5:06:9a:ec:a5:
                    80:ac:43:b3:70:1c:80:ab:2e:1f:d1:80:2c:be:93:
                    7d:f9:61:aa:73:23:09:5e:69:5a:c4:cf:1f:fa:41:
                    75:e1:3f:88:fe:75:c9:ea:f2:6d:1a:a7:04:98:98:
                    72:75:e2:a7:79:48:87:8a:8a:14:93:1a:1b:b0:11:
                    7f:88:63:5e:0b:13:38:aa:bf:3f:36:a9:a2:e1:e2:
                    d6:26:c5:58:9b:f5:b6:e6:79:fc:64:ac:44:3b:e2:
                    7c:2e:b7:9b:f1:87:90:29:1d:dc:e3:92:bb:2d:2f:
                    b0:45:b2:39:21:fc:f0:e1:85:92:4c:67:a7:7c:aa:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F0:F4:C4:41:82:F2:19:E6:8E:BD:05:CA:6B:C9:CE:58:96:AA:46
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:39:54:dc:6a:81:25:b9:af:06:37:74:3e:ab:49:f4:0f:16:
         3c:2b:60:d0:43:c7:5f:ef:ac:23:de:64:20:75:5b:80:20:d3:
         a2:a2:1b:72:93:f4:42:71:d2:6f:db:f2:81:86:19:90:77:fc:
         c0:10:83:ac:e6:ab:57:d0:83:f9:f6:9e:e0:86:90:d3:10:37:
         a5:5d:c3:5e:84:36:af:1c:8d:ba:5a:07:1a:76:bd:05:dc:01:
         55:13:34:89:fe:c4:b5:3f:15:fb:0d:3b:35:38:69:a1:43:90:
         5a:9f:81:0c:33:4b:60:bf:0e:10:d0:d1:ff:50:5f:a4:b8:08:
         21:8e:fc:db:6b:fb:cc:6c:0d:ea:34:8a:25:58:31:48:a3:43:
         eb:0e:2a:6f:33:7a:4d:93:8a:45:c9:f1:b4:17:1e:5a:5d:86:
         bd:d0:b0:6b:e5:d0:d7:08:54:f9:5a:cf:94:41:c6:20:a1:92:
         70:be:a4:a4:81:d7:c3:3e:b4:8a:8d:ef:09:08:8e:74:14:7c:
         2d:96:3c:af:43:4d:21:3e:f4:fd:6d:e6:62:1e:8d:20:14:b6:
         da:4e:54:b8:e9:09:68:32:5b:96:c0:58:c2:52:b3:89:08:fa:
         0d:e8:2d:61:5c:9f:ee:c8:e8:6d:89:9b:fe:4e:23:3a:73:ac:
         73:ab:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:01 2026 by rpki-client