Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File:                     v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier:          kSBk0YCpzH8Ax9LRi7aO4CqRqNGzeTVqutQY1yEIL1s=
Subject key identifier:   C8:3A:52:74:CB:9F:AB:BA:8E:66:5A:19:B8:0B:B0:6D:B6:6E:E5:E4
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer:       /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial:       019E1CB54B9C73C315240ED3A6E8F90199DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 15:01:43 +0000
Manifest this update:     Tue 12 May 2026 15:01:43 +0000
Manifest next update:     Wed 13 May 2026 15:01:43 +0000
Files and hashes:         1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
                          2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
                          3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
                          4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
                          5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: 21hQ3j7w5TWpOpQE3GUUb3oD2cetVTaljLzjnmB/otU=)
                          6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:4b:9c:73:c3:15:24:0e:d3:a6:e8:f9:01:99:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
        Validity
            Not Before: May 12 15:01:43 2026 GMT
            Not After : May 13 15:01:43 2026 GMT
        Subject: CN=c83a5274cb9fabba8e665a19b80bb06db66ee5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:9a:dd:86:1c:b8:26:e9:df:53:af:53:3d:
                    b9:6d:d7:2e:f5:16:d2:ff:9d:c0:ad:40:09:21:f8:
                    23:0b:b0:17:52:b3:15:10:c1:14:4c:17:9a:c3:08:
                    67:2b:40:6f:a3:d1:8f:46:4a:45:c0:24:58:aa:ba:
                    25:2a:e0:b2:b8:77:ba:5c:6f:6f:7f:e1:5c:e3:9a:
                    8a:09:ea:41:ea:0c:86:eb:68:4e:5b:94:d9:5f:f4:
                    a1:31:0b:5f:91:91:84:0e:2e:44:53:74:15:61:6c:
                    eb:3a:eb:a2:24:85:54:a2:8e:c6:44:4e:6c:68:d4:
                    0c:7c:41:86:1e:be:89:d1:51:d9:d5:50:f1:24:4d:
                    fb:5f:2d:f1:51:a2:f4:fb:29:85:73:76:ef:55:95:
                    cd:16:a1:d9:4d:d2:79:f7:38:9d:66:21:0d:0e:e2:
                    48:3f:72:cf:e5:b6:9b:9e:a1:f5:8b:3a:fd:3a:5e:
                    37:90:fa:cf:e5:e9:5c:07:b3:03:d2:a1:ed:dc:c6:
                    0a:39:d6:37:30:36:47:22:4c:51:a4:03:e2:cc:1e:
                    15:d6:a6:4b:78:ce:1b:67:3b:7c:37:b5:4e:f3:dd:
                    bb:a9:b6:c0:96:a3:2a:73:68:8f:20:75:b4:a0:a1:
                    2d:f2:e8:cc:06:a5:9b:f3:da:e9:aa:9c:2b:4c:f5:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:52:74:CB:9F:AB:BA:8E:66:5A:19:B8:0B:B0:6D:B6:6E:E5:E4
            X509v3 Authority Key Identifier:
                keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:94:91:d5:2c:01:66:56:96:f8:e4:6b:3a:82:5e:a5:c6:e5:
         26:b8:2d:5c:7a:71:67:ab:b3:e5:ca:be:0c:b4:27:34:64:1f:
         42:8f:a2:09:b2:61:c9:a8:31:b0:2c:c1:2d:b6:1d:68:d3:ce:
         10:7d:97:8f:6c:d2:40:2d:d3:ec:73:69:7f:2b:9c:2a:d5:71:
         fc:c2:55:14:12:1e:0c:ac:3e:28:5e:3f:0a:ee:89:f4:33:93:
         0e:85:41:96:ac:b4:82:17:76:7a:e1:34:eb:39:eb:10:ea:3c:
         09:b6:01:ce:cf:e2:34:58:62:b4:2e:10:2d:8e:52:96:91:fd:
         04:bc:14:c7:89:98:a6:1b:8a:13:48:45:79:6e:f9:7b:27:4e:
         43:21:c3:77:b7:a9:a9:2a:2b:b0:4f:cb:b8:f2:96:6a:54:1d:
         97:e1:75:be:b7:07:b8:50:c4:c4:22:26:44:83:85:f9:3d:05:
         e8:f3:e3:cc:ac:5d:9f:61:88:d0:b0:9d:08:3c:21:35:68:60:
         7d:1f:bd:49:42:bb:eb:7e:91:66:e3:52:58:37:55:57:e6:97:
         4a:f3:d7:5c:42:fc:61:10:33:d1:33:6b:16:29:cb:e6:91:c8:
         9e:13:e6:0b:37:e1:62:f0:c3:bc:fd:ee:2b:f0:e7:88:87:cb:
         fa:54:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:02 2026 by rpki-client