Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File:                     9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier:          9XaqPDhzBLP8Coie95+nKSeRpMsqtw5O8sxCLKsJunM=
Subject key identifier:   56:B8:5F:1F:25:EB:5F:59:73:D1:F8:8E:9B:62:8A:90:23:48:35:0A
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer:       /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial:       019E1C1043B89A68A305FC1F60C7F3FB179F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number:          16BE
Signing time:             Tue 12 May 2026 12:01:28 +0000
Manifest this update:     Tue 12 May 2026 12:01:28 +0000
Manifest next update:     Wed 13 May 2026 12:01:28 +0000
Files and hashes:         1: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: zB4+OWEcweGcv4O16//xZv7SwugWM0yX6kVHqVsOp+Q=)
                          2: BBH0-UEj_izZzjdumwxoDh9yCBo.roa (hash: 50KdJ5A5mJLrmaAuqmKloL7+FBLQEr6+0iywUZ44wnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:43:b8:9a:68:a3:05:fc:1f:60:c7:f3:fb:17:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
        Validity
            Not Before: May 12 12:01:28 2026 GMT
            Not After : May 13 12:01:28 2026 GMT
        Subject: CN=56b85f1f25eb5f5973d1f88e9b628a902348350a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:7f:19:c6:48:12:09:90:c0:41:d6:57:9b:
                    96:e8:ff:28:4c:06:65:8e:bf:cd:da:a1:2e:cc:e0:
                    e5:0e:51:cf:1d:64:28:f7:9a:31:55:d8:46:0e:dc:
                    38:45:56:e7:ba:8b:2e:dd:f0:6c:36:bc:7f:52:de:
                    99:fa:cc:02:ec:ed:de:f8:f2:6f:8e:e3:a1:ed:8b:
                    1d:28:fd:c4:76:bc:5a:7f:aa:5a:40:b1:92:b3:4b:
                    a5:2a:c9:28:c0:e9:42:6c:a7:61:5f:67:73:11:22:
                    9e:83:b1:58:12:bf:de:38:70:b5:28:e9:1b:ba:df:
                    1c:2a:1b:51:b9:28:b8:fb:4a:87:53:14:c3:b9:74:
                    4e:ca:6b:86:f6:ae:42:04:c7:a2:05:88:fc:56:c1:
                    4c:33:96:26:eb:c0:4b:ee:b1:3f:a9:63:18:fd:95:
                    c8:00:e3:b3:e2:4b:0b:f0:b6:57:19:78:49:50:0a:
                    6c:6d:b5:68:e8:73:5d:3f:d3:4f:87:55:45:6f:c9:
                    90:67:16:e8:91:4f:40:4d:66:26:0f:6b:f5:c4:6f:
                    62:ec:b6:12:b7:95:76:ab:b8:5f:5f:7e:a0:b9:a0:
                    51:3e:05:88:98:41:2f:a3:73:d5:5e:df:4d:1d:e0:
                    37:08:56:cc:af:5d:78:ca:70:8d:e2:09:11:e1:36:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B8:5F:1F:25:EB:5F:59:73:D1:F8:8E:9B:62:8A:90:23:48:35:0A
            X509v3 Authority Key Identifier:
                keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:8e:f5:fc:4a:1c:50:40:a2:a9:cb:b2:d9:f9:be:8f:77:
         69:b1:fc:58:b9:d6:c6:36:59:89:f3:c7:06:1b:8a:ce:f0:a5:
         43:70:5b:93:cf:11:d8:a5:76:05:15:5c:65:3c:29:dc:34:e5:
         7a:c6:ab:8d:0d:86:21:3e:2d:b7:ab:07:96:38:f6:d5:39:19:
         af:00:7f:62:c8:98:34:cd:98:c8:31:bb:a3:e2:53:11:bf:9d:
         69:dc:9d:a4:2a:2d:19:ce:5e:93:6a:9b:3f:9e:58:d6:7c:9f:
         3a:8b:06:4d:22:2a:f2:ef:27:4b:97:3f:33:cc:ad:f9:98:69:
         15:71:0a:db:95:d1:62:58:c6:de:ed:cb:ec:66:6b:8a:15:43:
         0b:24:2d:d2:51:7d:95:2b:94:64:49:c7:9d:21:f2:60:54:80:
         db:d6:be:c1:fe:71:9d:a9:11:a8:0d:7f:1a:24:e4:a8:2c:8b:
         ba:d0:88:75:b1:9a:c8:53:21:cc:c8:9c:98:7c:8e:f2:57:3e:
         46:82:b0:18:6c:75:a6:27:8a:29:aa:84:83:0f:ce:0c:3e:9b:
         22:77:3d:be:d4:03:e9:83:09:dd:dd:fd:c1:20:ee:37:88:f0:
         1b:cd:43:79:12:25:9d:0c:9f:56:a1:5f:82:5a:8d:c9:73:33:
         47:a8:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:19 2026 by rpki-client