Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File:                     9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier:          WY54Ad1x/znGNjb4rV8FreoimoZxdjH9MqJfMV3rywQ=
Subject key identifier:   CB:B1:9F:BD:62:F5:F8:82:C1:6A:08:64:F1:3D:9D:C3:03:4C:E2:D1
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer:       /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial:       019E1E6C25CC03B52D3EF4086706DF253A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number:          061F
Signing time:             Tue 12 May 2026 23:01:04 +0000
Manifest this update:     Tue 12 May 2026 23:01:04 +0000
Manifest next update:     Wed 13 May 2026 23:01:04 +0000
Files and hashes:         1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: PQTdFr8S74f+Ek4CGo2QYzcYd4nb5EWMXSTfE+CBljc=)
                          2: ha9gNtI2Det0BHkc3WoBLr_4eN0.roa (hash: 3ZwCki1NyOWEqytxpVSycbqzMVm9+ptmvP6m+BbcDfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:25:cc:03:b5:2d:3e:f4:08:67:06:df:25:3a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
        Validity
            Not Before: May 12 23:01:04 2026 GMT
            Not After : May 13 23:01:04 2026 GMT
        Subject: CN=cbb19fbd62f5f882c16a0864f13d9dc3034ce2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:76:e4:39:b8:87:f8:fd:77:32:f5:10:30:
                    17:a3:8f:ea:2b:dd:55:69:1e:b8:65:93:13:83:de:
                    a3:a2:01:98:16:8a:d0:3c:d3:ed:04:10:5d:78:11:
                    2c:fe:d9:90:f2:1b:59:c9:a2:e3:41:11:62:21:fa:
                    f7:57:8c:3b:e0:a1:a8:11:d1:0b:95:4a:19:14:58:
                    6b:56:d2:81:bf:c3:41:85:97:6a:58:0f:02:65:b2:
                    97:7b:a3:9f:ec:fc:fe:e1:86:75:38:80:7e:10:44:
                    71:ff:bb:88:c1:0a:8e:52:0f:e8:05:9b:6c:2d:fe:
                    aa:1d:26:0e:ae:e2:5d:ce:80:6f:b1:f0:72:55:f6:
                    a5:49:5e:2d:e3:fa:c2:d8:6e:f3:d5:64:a1:de:a4:
                    65:36:8e:dd:95:8f:25:aa:fe:b4:43:c3:81:73:f3:
                    a1:f3:87:79:91:8f:87:cf:c8:89:d6:e2:4b:51:c8:
                    17:3f:09:03:fb:82:39:09:6d:2a:20:a9:7f:9a:b2:
                    54:67:7d:16:92:0c:10:a5:0f:cd:6e:74:9a:b2:cb:
                    6c:8a:aa:58:5e:38:09:ce:0f:f8:29:e5:95:29:e2:
                    03:c2:d6:6e:f0:95:7d:f3:72:f3:c2:ec:25:64:2d:
                    85:78:3e:0e:ca:47:2b:0c:67:d7:50:d9:8b:47:b1:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B1:9F:BD:62:F5:F8:82:C1:6A:08:64:F1:3D:9D:C3:03:4C:E2:D1
            X509v3 Authority Key Identifier:
                keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:27:d4:50:80:25:d0:fd:7a:3f:73:bc:7b:ce:fe:f2:d7:3d:
         0b:2b:f8:ed:aa:bf:cf:9e:8f:bc:a3:57:dc:36:fa:1b:1d:74:
         8a:d7:7e:42:d3:64:d8:42:96:7a:90:03:51:24:69:2b:10:ef:
         34:28:52:cf:e6:a4:ef:59:ad:7b:b1:4f:40:11:84:0e:0d:61:
         d5:f0:14:da:e2:65:a0:75:0d:70:d5:91:bd:e8:6c:47:b0:4b:
         63:68:c2:c2:3e:7f:c5:94:e5:57:22:ff:83:9b:dd:69:ec:6e:
         6d:9e:21:e1:60:41:08:8b:f2:d2:20:6d:85:8b:56:77:1b:73:
         4b:b1:d2:56:6c:0a:36:c5:50:08:b2:4e:63:e7:3f:b9:e8:d6:
         e0:65:f9:9c:19:af:84:37:9f:16:fb:e6:b9:9c:b5:9b:b9:25:
         e7:40:8e:39:b5:37:d2:84:3c:b4:fb:79:ec:f4:c4:84:68:9d:
         71:90:3c:16:2a:a0:17:cc:93:94:da:fb:d1:f9:fd:d2:d1:09:
         ba:6f:db:f7:b1:36:ff:eb:48:a8:5b:f9:9e:f4:ef:c1:52:8f:
         c3:a1:69:15:0e:e9:a7:7b:d2:77:dd:ec:d8:4d:b8:e1:0f:4d:
         ea:00:02:8c:c8:69:68:30:6d:9b:b9:8b:f4:44:16:54:ae:68:
         84:43:ad:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:35 2026 by rpki-client