Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File:                     9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier:          yYmQ/qGuyp4VJWhDKhaCi/k+u87MxhCnzn0LnHj3YZw=
Subject key identifier:   3E:AD:50:2B:E0:41:42:39:2F:14:DF:3A:E3:A8:07:AE:3C:2E:C1:19
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer:       /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial:       019E1F10CD03FCEECB2F96509933EE5776BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 02:00:55 +0000
Manifest this update:     Wed 13 May 2026 02:00:55 +0000
Manifest next update:     Thu 14 May 2026 02:00:55 +0000
Files and hashes:         1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: o3DXRmYU8u3ef7z23EMpmL48JYXkWlWvB/mHAiwC8iM=)
                          2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:cd:03:fc:ee:cb:2f:96:50:99:33:ee:57:76:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
        Validity
            Not Before: May 13 02:00:55 2026 GMT
            Not After : May 14 02:00:55 2026 GMT
        Subject: CN=3ead502be04142392f14df3ae3a807ae3c2ec119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:97:04:2f:68:1c:31:00:33:71:1a:f8:8e:
                    2b:b2:c7:ca:fb:94:5e:c1:c0:79:5a:66:b7:a6:fa:
                    b3:04:68:c4:c5:50:dc:55:14:e8:f4:ef:35:3b:9a:
                    f2:b9:40:88:28:23:db:5a:d3:bc:bb:cf:1c:e7:c8:
                    b1:9b:66:00:a6:b7:62:26:a2:06:ec:fd:19:52:c9:
                    75:88:b3:f5:d1:e0:e5:ee:a2:68:ef:88:bb:8d:81:
                    4b:de:29:1e:85:4a:92:52:b7:35:1c:c9:18:e3:fd:
                    89:30:6f:52:8d:36:c8:5a:28:86:35:ae:7a:d5:00:
                    0f:41:16:32:1a:4f:2f:a2:ba:54:f2:7b:b3:83:9b:
                    95:7e:74:02:7b:d3:63:2b:e2:3a:e9:87:1e:de:dc:
                    df:64:42:72:8d:e3:05:0a:e3:de:51:18:b5:85:e5:
                    89:ff:09:f2:f7:a7:ef:31:3c:14:67:a2:f3:61:2c:
                    c8:fa:7f:ae:4d:1a:82:6e:b2:f5:5f:f0:52:46:f9:
                    47:f5:6d:bc:a0:9a:e2:a0:4c:28:4c:d0:52:04:4f:
                    5f:4c:d6:16:2e:09:d7:92:18:a9:04:f0:6d:87:02:
                    e0:c8:12:b5:b0:95:3a:b7:ff:bb:83:f4:29:ac:69:
                    b4:5c:65:8f:12:d0:3e:cf:64:63:cc:6b:6f:3a:7f:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AD:50:2B:E0:41:42:39:2F:14:DF:3A:E3:A8:07:AE:3C:2E:C1:19
            X509v3 Authority Key Identifier:
                keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:76:42:0d:8f:00:e4:3a:ba:fa:83:2f:11:1a:0c:da:fb:b3:
         c0:96:d2:b1:da:b2:5d:6d:07:95:62:62:c4:94:fa:d7:cc:14:
         c3:bb:27:9b:49:a1:e9:18:af:b8:75:a0:a2:6e:99:38:14:be:
         27:a8:3c:89:c1:64:73:72:31:3b:02:5a:ba:1d:ea:03:2c:e0:
         3d:76:a9:8d:73:f2:af:6d:61:fb:19:fa:9f:0d:ae:83:2a:75:
         96:3a:08:fb:b5:20:dc:49:73:2c:4b:ae:d8:97:42:c7:54:47:
         d2:ea:5e:da:24:bb:9b:46:03:18:67:b6:c9:21:53:b7:f3:50:
         e9:ba:03:79:00:9a:28:85:0b:66:14:44:f0:d5:70:c8:67:5d:
         12:14:d2:1e:37:d2:23:2a:1f:19:0f:26:8d:14:d4:c0:05:a3:
         84:8e:6a:92:f7:ea:95:a5:b9:49:55:b9:1b:2c:79:5b:90:9a:
         90:6c:d3:1e:0a:5e:53:7d:56:17:54:0c:1b:93:09:c8:28:b0:
         03:31:90:9d:c2:1c:d0:31:b6:95:5e:fa:65:7b:e9:bc:49:e1:
         73:87:82:43:db:33:15:e2:8a:4f:0f:f6:92:8f:0b:28:25:8b:
         1d:dc:fa:78:7e:c5:20:d1:01:1a:01:3b:42:5e:40:43:7e:ab:
         44:26:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:41:38 2026 by rpki-client