Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File:                     9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier:          /K0MuCRA/hHTUk7VRJuR0+SjQesiiY4tlWVsluJOwyQ=
Subject key identifier:   8F:46:DE:28:A4:57:55:EF:6E:2F:10:62:BC:6D:96:8B:D1:90:0D:01
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer:       /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial:       019E1CEB372E297510934AAF430422834488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number:          137B
Signing time:             Tue 12 May 2026 16:00:37 +0000
Manifest this update:     Tue 12 May 2026 16:00:37 +0000
Manifest next update:     Wed 13 May 2026 16:00:37 +0000
Files and hashes:         1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: QBgEIZAibrv/tHoX+mdWP8qx+0EEpfLysliGgO75LDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:37:2e:29:75:10:93:4a:af:43:04:22:83:44:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
        Validity
            Not Before: May 12 16:00:37 2026 GMT
            Not After : May 13 16:00:37 2026 GMT
        Subject: CN=8f46de28a45755ef6e2f1062bc6d968bd1900d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:fe:63:1f:15:4f:e9:2b:7b:61:0f:6f:07:
                    98:54:aa:5c:00:48:d3:f9:75:77:49:8c:6e:04:d0:
                    35:48:84:27:38:45:32:a8:45:d6:fc:86:80:5d:6a:
                    30:5c:2e:74:76:10:c5:56:01:bd:13:cf:7d:4e:d8:
                    0f:5e:19:f8:d9:b9:d2:2b:50:1d:b3:9b:4a:99:93:
                    b1:0d:64:1a:a1:88:7d:78:bd:ef:44:86:8d:3f:88:
                    bc:45:43:9c:36:94:f1:54:b1:13:09:20:3a:04:f7:
                    4b:22:65:41:12:75:b8:97:e4:c9:0a:33:a5:7c:2f:
                    48:8a:df:eb:8f:fc:96:da:0a:24:24:d4:a5:20:52:
                    ed:d3:a2:ab:7d:00:c2:bb:0a:4a:3f:15:41:4e:87:
                    be:68:de:af:1c:7c:c5:3b:dd:da:43:e6:03:57:ce:
                    78:df:0c:9a:cd:f5:10:d8:7e:b5:77:48:f2:5c:4c:
                    f2:d3:f2:26:ad:71:6e:1b:ee:c2:06:fc:fb:96:05:
                    e5:74:23:42:e3:50:16:67:ca:81:04:46:1c:ec:76:
                    ab:69:b8:36:6f:98:8b:0a:6a:d6:71:02:97:80:57:
                    4b:cd:cc:9e:d0:e2:60:fa:a8:6c:33:f7:a1:8b:b1:
                    7c:f7:86:8c:5e:7b:04:00:fa:b4:db:f7:45:20:3a:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:46:DE:28:A4:57:55:EF:6E:2F:10:62:BC:6D:96:8B:D1:90:0D:01
            X509v3 Authority Key Identifier:
                keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d0:9b:5d:5d:8d:14:02:41:8e:6d:75:49:da:1a:d6:89:56:
         06:ec:10:ad:9b:46:36:8a:6b:70:ba:b1:be:c1:0d:ca:be:99:
         72:30:52:ef:ba:c9:30:de:7f:98:13:4e:b6:a3:80:4d:d6:c9:
         9c:dd:f2:aa:e4:57:99:da:a6:f5:f4:5d:87:04:5e:da:fe:f9:
         ac:77:68:91:f3:89:89:c2:3b:65:cd:51:51:50:30:00:4f:ba:
         87:9b:8c:37:29:37:b8:f0:cb:86:a3:ae:26:2c:e1:f5:e0:b7:
         c0:5e:7e:06:8b:6d:3e:f1:f2:74:72:8b:9f:11:e3:bf:90:24:
         0d:6f:05:c6:ba:ac:c8:b1:f3:a3:d2:7a:05:0a:b9:70:dc:cc:
         50:e8:f7:60:73:04:57:49:c9:6e:6a:20:29:66:36:a4:29:4e:
         8f:07:8b:fc:f1:ee:ca:2e:40:a7:71:69:3c:e6:30:77:ac:40:
         1d:3e:2c:42:7d:05:f9:31:a7:03:f3:7f:2b:92:87:f2:9c:8e:
         46:66:9f:74:9e:67:80:5a:4e:3b:49:d5:30:dd:51:ad:cd:80:
         c8:47:13:5e:37:9f:f2:fe:bd:3f:f9:5f:f3:58:3a:f3:9b:0e:
         14:74:c8:71:74:1e:6f:84:37:00:5c:d9:08:7c:52:94:9b:d4:
         6f:d7:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:18 2026 by rpki-client