Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
File:                     9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json)
Hash identifier:          AulGKHqSPYJkpJI7k0c53JK9Xl52pBUbBM7UqAMFeZE=
Subject key identifier:   5B:73:C5:0B:31:EE:46:C8:93:BB:93:5F:D0:37:BB:47:C1:5F:6B:D4
Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
Certificate issuer:       /CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Certificate serial:       019E1C4753D20952A32C1E58C6DBFC76966D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
Manifest number:          08D3
Signing time:             Tue 12 May 2026 13:01:36 +0000
Manifest this update:     Tue 12 May 2026 13:01:36 +0000
Manifest next update:     Wed 13 May 2026 13:01:36 +0000
Files and hashes:         1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: BM6cgLeobCh7vz/+xFFwWJeM0tSjkW8FokT+o9A8OFY=)
                          2: FsiQXTQNPgnlk7n5k6ny75SvAeI.roa (hash: u0ugT8qOwrczaf2dJSuiLbaGjKBSdb+eJY/Q3htlxMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:53:d2:09:52:a3:2c:1e:58:c6:db:fc:76:96:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff
        Validity
            Not Before: May 12 13:01:36 2026 GMT
            Not After : May 13 13:01:36 2026 GMT
        Subject: CN=5b73c50b31ee46c893bb935fd037bb47c15f6bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:18:6c:e7:09:f4:60:3d:7c:2b:a1:87:71:
                    5d:47:31:ef:53:54:57:07:55:cd:20:8b:32:ff:1d:
                    31:4b:9f:68:0b:bf:c0:96:88:70:14:3b:62:e1:88:
                    ce:b7:a7:d0:b2:92:38:a6:41:4e:f1:a5:f0:ff:da:
                    e6:2f:00:3f:c9:29:00:a2:40:d0:c3:a8:62:6b:da:
                    1b:30:b4:34:d4:6c:a5:c7:6d:9b:14:d5:b8:ad:1a:
                    d3:55:0d:f8:36:05:08:33:e3:ec:a9:18:45:61:1c:
                    5d:8c:89:a5:ed:ff:ac:12:48:2f:1a:37:f5:5d:d3:
                    13:b8:c4:61:52:c7:8d:4b:5f:2f:93:30:09:08:c9:
                    20:bd:ab:9d:ad:25:d8:5f:87:5d:04:55:60:18:21:
                    0d:d6:da:69:f7:8a:3b:fa:66:12:49:44:c7:37:7e:
                    57:6c:ec:0a:79:cf:b6:f4:1d:1a:b8:34:2f:46:86:
                    f7:29:5a:3a:9f:67:fe:5b:ca:58:e9:2a:c8:05:22:
                    38:3b:0d:de:dc:75:2c:33:ca:c8:23:e0:5e:80:ba:
                    31:2f:2a:a0:08:2f:74:4b:2a:a7:ff:84:9d:8d:3b:
                    b2:60:8a:12:97:78:1d:c7:a0:fe:99:a9:3c:e5:e8:
                    39:5e:12:4e:65:2d:02:96:2b:d8:56:41:b9:b8:33:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:73:C5:0B:31:EE:46:C8:93:BB:93:5F:D0:37:BB:47:C1:5F:6B:D4
            X509v3 Authority Key Identifier:
                keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:8d:d5:1a:ba:c4:14:24:ca:6a:cd:fd:b3:da:ab:c1:c1:
         ea:23:f1:6b:87:2e:be:04:f3:24:e6:c4:69:c2:9a:48:22:9c:
         66:be:79:f1:07:cd:60:5d:0d:a3:cf:b4:c7:6b:19:f1:ab:6d:
         ba:e2:5e:d0:99:5c:8f:1d:73:30:06:1d:4c:18:f6:8c:c4:01:
         a5:0b:b1:8d:20:ba:d8:d5:29:39:5e:db:dd:2b:44:5d:31:be:
         3a:6f:5d:63:0f:12:8c:de:23:0f:a0:fb:a7:8a:96:ad:24:89:
         b6:e5:af:3b:d9:1b:74:91:fa:ad:a6:03:a5:5f:c1:33:f2:ab:
         ba:5b:8e:0c:80:34:5c:b2:8b:b7:53:20:a3:ad:be:81:ee:3f:
         8f:e1:76:ba:74:de:59:ac:ab:8f:15:6e:5b:2c:85:ff:e1:85:
         e4:69:74:28:fc:4c:32:06:7d:72:26:a1:7d:d4:e6:0f:18:f5:
         ed:34:b1:fa:18:10:2d:b4:d0:44:20:d6:fd:ca:b1:46:ff:d6:
         75:9c:5e:70:60:14:90:1f:16:eb:3f:9a:bd:35:c0:64:09:a6:
         40:38:be:cb:5e:47:f0:45:de:52:15:2d:60:8e:bc:40:07:f6:
         e0:8a:52:50:b6:e8:84:e3:59:d5:9c:b7:89:07:18:ec:04:30:
         74:fe:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:28 2026 by rpki-client