Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File:                     9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier:          u8p7QQS7cgv4tr/D776b2/uzzZZd9hJ+X5P5tzYwWQk=
Subject key identifier:   02:F5:4B:C2:B8:70:30:8D:8E:87:19:1D:38:34:78:13:96:92:95:34
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer:       /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial:       019E1EA2E06033531BB1C066B7E51739FEFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number:          087E
Signing time:             Wed 13 May 2026 00:00:51 +0000
Manifest this update:     Wed 13 May 2026 00:00:51 +0000
Manifest next update:     Thu 14 May 2026 00:00:51 +0000
Files and hashes:         1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: HG97sKm2TQt/2LGSsiYq0/YPmrrK4sJX3iUQJBOzlzg=)
                          2: tKfj59q_uSVeOVXFF8rwGwcX1DE.roa (hash: M8dRarfAWOblSl0tPp78zm1/aNBzJLXYpivkbEtUqgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:e0:60:33:53:1b:b1:c0:66:b7:e5:17:39:fe:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
        Validity
            Not Before: May 13 00:00:51 2026 GMT
            Not After : May 14 00:00:51 2026 GMT
        Subject: CN=02f54bc2b870308d8e87191d3834781396929534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:7d:f2:bb:34:b3:3d:ee:c3:3d:a4:df:b8:
                    3d:c1:fc:98:14:3b:2d:b1:35:77:44:a1:c8:89:bd:
                    f4:91:ed:3d:d2:7d:88:db:5d:ca:a9:79:71:14:d6:
                    9e:f5:b7:de:eb:ad:07:ea:55:af:40:b1:2a:b9:3f:
                    4e:28:2b:1d:20:b3:40:0d:ff:74:ce:83:f6:21:d7:
                    87:d8:94:e4:73:7a:81:a8:06:e5:83:da:a6:19:31:
                    12:57:96:98:e0:10:82:d4:ad:12:61:91:86:3e:4d:
                    02:bf:55:78:b8:20:b2:05:75:10:d4:d8:d1:1d:f4:
                    64:cb:7d:5d:65:ca:b8:81:67:67:3c:50:6e:59:bf:
                    6b:b6:95:b5:42:30:e5:04:36:5a:e8:2f:19:95:20:
                    85:27:d0:06:c6:52:06:11:81:f8:5e:f0:6f:9f:da:
                    00:3e:66:c9:f0:02:78:4f:dd:42:ae:ef:62:74:49:
                    d8:5f:f5:4a:af:4c:0e:51:d1:28:ac:6b:d2:5c:2b:
                    60:b2:51:f1:05:3b:d1:cc:52:32:73:af:8f:53:15:
                    be:a4:d3:8a:5d:1a:93:91:67:ae:59:56:5d:82:61:
                    b1:b0:bf:9c:21:d0:da:ec:70:dc:26:b6:78:af:eb:
                    90:73:9c:33:2c:46:5a:6f:5f:51:77:9b:11:f6:12:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F5:4B:C2:B8:70:30:8D:8E:87:19:1D:38:34:78:13:96:92:95:34
            X509v3 Authority Key Identifier:
                keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fb:38:1e:36:32:48:f2:cc:63:a5:59:07:71:82:33:34:97:
         ae:b4:b9:fd:ea:11:62:1b:a9:56:80:db:03:2e:4d:fc:b4:a9:
         7c:a9:1f:40:31:0c:78:28:f8:04:25:52:64:30:49:ca:dd:ee:
         6e:61:39:8a:81:7b:ee:13:1c:b6:a9:c8:86:08:67:5a:de:9e:
         25:e2:5d:7c:4f:48:2c:df:a2:a2:c4:82:f6:85:29:33:df:7f:
         36:11:3c:0f:ff:43:92:9d:c8:91:dc:ed:6f:ec:1b:63:65:76:
         ea:5b:7d:e0:81:c6:e0:15:10:34:5c:fb:b8:ec:cd:eb:38:32:
         ec:f0:83:64:ae:cd:46:b9:ef:ef:70:a8:18:ab:75:94:69:aa:
         94:2a:39:bc:a6:1b:b0:6a:dd:b7:3f:02:ab:bf:bb:40:71:87:
         aa:b3:b8:c8:e5:fe:3f:14:de:3c:28:85:fe:8b:13:74:be:be:
         80:a6:ca:38:2c:44:05:67:07:89:d3:41:76:ae:29:8d:d2:5c:
         d1:0b:4b:d9:62:d0:64:c0:66:b2:4a:bf:5f:1b:06:90:db:f6:
         98:49:b5:9e:bc:9d:82:09:a9:b0:f3:e9:64:32:79:18:38:85:
         01:1a:63:9b:df:d2:57:01:9f:5a:f1:48:21:4d:ce:1a:6f:ed:
         ca:58:82:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:30:14 2026 by rpki-client