Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File:                     KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier:          uj9EBik32hqrtH8qFOj4U0dQPDHBeuq8gLFOfOZNTPg=
Subject key identifier:   0A:13:CC:E6:01:DB:FB:FC:8E:FA:32:27:91:DE:88:7A:5C:CD:92:B4
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer:       /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial:       019E1F10EB2683D92E166955253361AD884E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number:          0CB9
Signing time:             Wed 13 May 2026 02:01:02 +0000
Manifest this update:     Wed 13 May 2026 02:01:02 +0000
Manifest next update:     Thu 14 May 2026 02:01:02 +0000
Files and hashes:         1: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: A9a0zHbRIzRVlehU2Y9LDwQW2zGX9W+DAQg1Q8ajq5U=)
                          2: Uo2zXb7xDJEIiCoeCYCC8PrL42A.roa (hash: oMrnSqWlYTSclklmzzYM7d3FpGFOzhG3FJDIuAEG0Rc=)
                          3: vQiZmPMf9IeoKABnozsDY-6d9UQ.roa (hash: 8GXH0TKZLcFAfjc4jnVxVr7204I+TJn5VFuiHQHtpKY=)
                          4: wbqmfwWmA_mTuxJMrgbcccVRq0o.roa (hash: ikwWrG/vEk9wIu3LnAsVyDpQOVfL5PBtwTAaO84nGNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:eb:26:83:d9:2e:16:69:55:25:33:61:ad:88:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
        Validity
            Not Before: May 13 02:01:02 2026 GMT
            Not After : May 14 02:01:02 2026 GMT
        Subject: CN=0a13cce601dbfbfc8efa322791de887a5ccd92b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:bf:22:59:29:b2:c5:4f:69:5f:43:f7:db:
                    31:69:04:69:9a:86:2d:ad:65:e1:d8:97:c4:74:40:
                    f0:f4:65:08:6e:fd:46:33:56:53:65:5d:a3:99:9d:
                    f0:9f:29:af:46:7a:70:2b:20:b9:82:a9:eb:31:56:
                    b8:60:ab:c9:89:d5:ff:fa:9e:0c:ee:ae:4d:a9:9f:
                    bf:8e:8f:98:7a:0c:66:9f:67:af:c3:08:13:d9:ae:
                    4f:25:c4:6e:29:46:fc:e4:74:fe:de:cd:e6:98:81:
                    27:a3:3f:fc:b2:7f:c6:71:b4:7c:a5:27:e5:06:64:
                    e7:04:08:c6:d8:84:ba:2c:ab:4e:28:9f:69:e6:cc:
                    3e:40:92:0d:99:a1:b3:10:d9:85:ac:68:68:86:c1:
                    45:51:c6:8f:49:81:74:8a:7c:52:08:30:6a:70:60:
                    56:ac:e6:47:6e:e1:29:26:1c:6d:b6:f3:cb:83:da:
                    97:db:39:24:f1:38:78:da:65:73:ec:c0:c8:13:8e:
                    6b:32:7d:08:fa:bb:6a:63:72:3b:4e:22:14:1d:44:
                    d5:b4:82:f9:00:90:37:57:9a:25:cc:11:21:6d:42:
                    72:7d:4f:79:48:1c:59:5f:e9:d4:fc:cd:97:1a:54:
                    2e:a8:22:34:fb:17:cd:52:c3:68:3c:5a:f2:5d:2f:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:CC:E6:01:DB:FB:FC:8E:FA:32:27:91:DE:88:7A:5C:CD:92:B4
            X509v3 Authority Key Identifier:
                keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:19:f0:f0:86:31:52:59:fa:d3:b5:bc:d0:8a:79:b7:c0:59:
         42:39:02:c3:80:1f:e0:f2:75:0a:ba:2c:47:d0:bb:d7:0d:db:
         69:d1:36:09:f5:0c:26:e4:f4:77:0e:d6:6f:16:2f:99:a7:44:
         97:0e:5a:76:74:f5:68:d2:91:ac:49:bf:e3:78:ba:60:cd:b3:
         8a:e0:6a:68:8b:68:ce:ca:d1:8d:9b:83:fa:b8:f5:29:5a:1b:
         4d:45:17:e2:ab:cf:12:64:ac:4c:61:78:53:b6:b8:37:5b:bd:
         d8:04:aa:be:51:a4:6f:12:f3:2a:52:ec:48:ec:e7:7d:18:4a:
         ff:50:cd:37:c4:52:29:93:cd:f4:23:54:e4:c3:1c:8c:04:f0:
         2f:db:5b:4a:d1:12:e5:b6:9a:7a:73:66:ee:fa:0b:68:da:dd:
         39:6b:67:5f:9d:ec:60:df:40:5d:8d:ff:24:b1:11:6a:36:b2:
         36:e3:39:59:6e:3c:d5:57:b2:08:b8:43:37:4f:5b:86:cf:4c:
         ae:38:50:4a:66:1d:2a:8e:cb:ad:ee:de:8e:4c:10:8e:20:66:
         c2:d8:25:95:0b:c2:c4:c1:f1:ee:37:de:66:53:e2:1b:6f:d7:
         f7:93:66:b8:46:2e:e3:9b:90:9d:00:00:3b:43:f1:b5:02:2c:
         53:6f:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:57 2026 by rpki-client