Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
File:                     c-9Luv3HPlPAmdTVLpye_6g3m08.mft (raw, json)
Hash identifier:          5uWXa9Y5GsKDzHGZFEOjdiwVPMeXnR8cKnOGH4sIXCE=
Subject key identifier:   3C:B3:74:BD:28:34:6B:94:0D:97:04:B8:D6:4F:B2:8F:8B:5C:C2:29
Authority key identifier: 73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F
Certificate issuer:       /CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
Certificate serial:       019E1ED9FBA64498DFAAF17C581F0680DF0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
Manifest number:          152B
Signing time:             Wed 13 May 2026 01:01:02 +0000
Manifest this update:     Wed 13 May 2026 01:01:02 +0000
Manifest next update:     Thu 14 May 2026 01:01:02 +0000
Files and hashes:         1: C4YLfveDNiaL-lcFUvdtQySLbH8.roa (hash: fAR/05xQFee/ID1Zs1RfCaALZWL5X+NyjX5h5YcPkkA=)
                          2: c-9Luv3HPlPAmdTVLpye_6g3m08.crl (hash: YVrXmHMj479qzd4q+8EUgEQi2lmhv4wrLImZOidwQuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:fb:a6:44:98:df:aa:f1:7c:58:1f:06:80:df:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
        Validity
            Not Before: May 13 01:01:02 2026 GMT
            Not After : May 14 01:01:02 2026 GMT
        Subject: CN=3cb374bd28346b940d9704b8d64fb28f8b5cc229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:ed:d9:c4:93:3d:dd:1f:75:2e:5e:ab:f1:
                    e7:53:aa:3b:c0:55:5c:d8:3e:a7:92:f2:98:0b:61:
                    f8:bb:82:8c:63:24:1b:5b:f3:cb:c5:4a:a6:9c:64:
                    22:2d:59:bd:7b:0e:89:44:58:b4:a7:c7:de:51:fc:
                    2b:a4:1f:16:62:7a:5c:13:90:50:38:e7:02:d6:31:
                    7c:16:00:0a:ab:21:0f:2b:28:38:66:18:b1:78:97:
                    7c:44:fe:68:a1:3d:40:f3:85:50:1a:d8:83:0d:79:
                    b5:37:93:81:29:fd:33:47:59:d1:76:53:d1:5a:88:
                    c3:18:5c:b6:26:c8:bc:37:7d:71:95:3e:01:73:42:
                    9b:83:3a:eb:f5:01:e0:5e:7a:5a:8b:77:b7:ae:06:
                    15:1d:a9:c9:8f:3e:d8:7d:fa:90:10:cd:43:b0:41:
                    c0:77:e6:bc:2e:5e:55:cd:49:5d:65:2c:01:66:42:
                    ff:f7:d2:a1:9e:e1:99:d2:da:6b:67:e6:b0:69:e5:
                    ca:44:b7:e4:85:12:c3:8e:37:3f:38:62:68:39:be:
                    27:86:5d:b8:ab:63:ed:b4:32:4e:13:f1:d9:8e:7b:
                    cd:a2:db:94:12:aa:7a:e6:a8:5c:ed:58:9c:4c:f1:
                    f6:ec:1d:ad:3b:44:50:4b:5e:fa:c2:08:3d:e3:fd:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B3:74:BD:28:34:6B:94:0D:97:04:B8:D6:4F:B2:8F:8B:5C:C2:29
            X509v3 Authority Key Identifier:
                keyid:73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:51:7c:0b:a0:68:e4:26:7c:6b:96:66:b6:66:2a:61:01:7e:
         5e:43:a6:c2:f2:f5:98:1e:2f:2d:05:c7:fc:03:12:44:44:75:
         ae:aa:ed:87:c3:60:2f:57:8a:23:02:f5:4f:61:f1:e4:46:2f:
         8d:a3:f4:45:5d:d8:4f:7e:e9:1e:6f:9e:9c:74:39:22:9f:a7:
         e0:fa:f6:9d:91:5c:23:71:c3:9d:e7:dc:63:9a:75:46:f7:72:
         fb:19:f1:e6:ff:99:4c:93:cf:e6:f7:ee:cb:76:6b:39:23:36:
         9c:b4:dc:a9:5c:3c:ee:1a:94:7b:d6:ff:e1:36:28:c5:27:6f:
         1a:44:02:eb:f2:fa:3d:86:d6:7f:a6:67:3b:f6:77:fc:58:96:
         06:d1:fd:23:66:44:61:b7:06:19:4e:c5:e3:38:71:23:2e:ad:
         5a:af:b8:d1:01:36:99:a5:bf:23:25:80:15:52:03:ed:2b:f9:
         2b:e9:bf:65:d1:41:f9:f7:73:5a:b0:8a:68:e5:f8:f2:80:8c:
         4c:44:5e:a1:4d:ce:04:a8:24:24:2a:3a:ab:7b:c6:1e:03:6e:
         94:ac:a3:0e:0e:a0:95:13:86:4f:2d:c7:fd:b8:81:ef:d4:94:
         82:99:0b:26:23:3c:ee:bd:90:b9:53:2f:25:73:9c:37:96:7d:
         7b:9c:25:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:43 2026 by rpki-client