Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File:                     B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier:          BAvhWZXKPYeUz5N3HZEZrWr4WRDfnp8bPVj3TLYrhig=
Subject key identifier:   14:8C:28:79:74:B4:47:FA:06:82:02:88:A9:F6:B8:3E:FC:AC:4A:C8
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer:       /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial:       019E1C102B24A196593DA112A49E2BAEC58D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number:          17DC
Signing time:             Tue 12 May 2026 12:01:22 +0000
Manifest this update:     Tue 12 May 2026 12:01:22 +0000
Manifest next update:     Wed 13 May 2026 12:01:22 +0000
Files and hashes:         1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: 11Zz132eHeATSuFDVNwCSmg10WstMflkDzYO+yxNX1U=)
                          2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
                          3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
                          4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:2b:24:a1:96:59:3d:a1:12:a4:9e:2b:ae:c5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
        Validity
            Not Before: May 12 12:01:22 2026 GMT
            Not After : May 13 12:01:22 2026 GMT
        Subject: CN=148c287974b447fa06820288a9f6b83efcac4ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:90:c6:42:50:4f:ae:11:39:64:e4:63:8c:
                    eb:68:43:54:85:5b:4b:d5:e4:9d:2f:bb:0e:91:af:
                    30:f1:b1:59:9d:b0:2f:33:6a:f0:b1:ff:2d:7a:80:
                    7a:0a:14:b4:d7:9f:05:94:14:7f:87:c1:ee:c8:5f:
                    aa:fd:e8:7c:b1:25:aa:28:89:78:4d:4d:c2:44:c7:
                    8f:2b:2d:ca:6a:5c:7b:1a:dd:72:ee:f9:6c:3c:bf:
                    83:4a:e2:8d:bc:eb:26:f0:97:71:82:38:4f:a7:c7:
                    cf:63:e7:c1:d1:b0:2c:a0:27:fd:19:e2:73:73:f9:
                    2e:d8:67:4d:8a:3b:03:47:16:da:f8:46:14:a5:92:
                    12:f9:1b:67:0f:17:74:7e:be:a2:df:14:9c:59:39:
                    64:1d:3b:2c:4b:b4:cb:6b:43:92:07:87:55:c9:d9:
                    6e:0f:0a:39:37:f0:dd:2d:83:57:e8:00:c0:4d:b9:
                    3f:ae:83:ec:99:5c:81:8b:c3:20:7f:0f:aa:8c:61:
                    ab:a1:b9:b7:85:c5:cb:b3:15:4c:0b:bc:c6:e0:d2:
                    09:07:71:e2:6b:ab:05:80:b0:a2:e8:84:9a:c3:6c:
                    62:aa:76:35:43:11:e2:21:f5:59:6d:08:1b:fc:90:
                    19:08:98:d7:54:df:c5:c1:ce:b6:b0:6b:9c:09:d4:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8C:28:79:74:B4:47:FA:06:82:02:88:A9:F6:B8:3E:FC:AC:4A:C8
            X509v3 Authority Key Identifier:
                keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:55:7f:a8:11:d5:74:51:39:72:d8:88:79:df:eb:d0:63:8b:
         20:c3:72:16:ec:9a:f2:3d:af:87:62:ee:29:f4:dc:0e:d1:ca:
         b4:bc:2c:10:38:16:7c:ae:99:d1:4b:08:a2:54:ef:77:90:1f:
         19:e0:8f:52:d5:bb:a5:b9:f8:62:5d:e9:af:a9:48:f3:89:93:
         2f:50:ed:38:8e:8c:36:4d:26:06:af:31:79:1f:91:b9:30:70:
         4a:fe:b6:e4:a6:a9:9c:fe:da:37:ba:16:73:56:5c:3a:13:3c:
         f1:c6:27:2c:f2:2a:76:c5:2b:bc:8b:6b:d1:7d:7a:c6:eb:01:
         ad:b0:29:48:20:37:5a:12:02:77:63:57:81:56:5f:40:8d:ce:
         4b:d3:0f:66:f8:04:06:f9:21:33:c1:26:02:01:d3:fa:b4:46:
         a2:a5:60:2d:81:6f:63:b1:39:f7:a5:0b:c3:77:df:43:68:b5:
         20:f1:5f:26:c9:d7:84:5c:1f:3b:50:3e:17:60:67:5a:d3:3d:
         98:fb:66:34:c4:5b:9e:95:43:68:5a:c4:15:82:ec:b5:04:79:
         83:9f:cd:bb:10:f7:38:ab:9f:5d:54:e4:85:9e:15:32:23:4a:
         6a:0c:44:e5:d4:9c:23:89:65:2b:29:18:65:26:d2:58:cd:9b:
         a6:98:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:31 2026 by rpki-client