Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File:                     9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier:          znN2vSCGAGoeeM7ST+oEIJ6GprQZ2MQx/4fQZ2INOf0=
Subject key identifier:   0D:D4:1D:73:34:A7:FA:F5:37:C6:AA:5C:A0:DE:30:86:49:40:6A:67
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer:       /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial:       019E1CB47F75C06C215D680D68EB85B21732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number:          0AF5
Signing time:             Tue 12 May 2026 15:00:51 +0000
Manifest this update:     Tue 12 May 2026 15:00:51 +0000
Manifest next update:     Wed 13 May 2026 15:00:51 +0000
Files and hashes:         1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: fTqNBbWqrpfisAnMzrMT86qtrXZWnj6NEhrantbm0XY=)
                          2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:7f:75:c0:6c:21:5d:68:0d:68:eb:85:b2:17:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
        Validity
            Not Before: May 12 15:00:51 2026 GMT
            Not After : May 13 15:00:51 2026 GMT
        Subject: CN=0dd41d7334a7faf537c6aa5ca0de308649406a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:2d:80:6a:69:1c:b8:6e:19:3f:98:1d:e3:
                    ec:06:4a:a6:ae:43:de:25:06:cd:0f:0b:38:77:16:
                    51:4f:d4:2e:25:33:b7:e2:2a:b1:7e:10:04:56:20:
                    8a:c2:39:a6:6d:5b:ac:33:9e:1d:57:a7:86:9e:6d:
                    f3:ba:e9:0c:16:eb:2a:f6:2d:a3:48:a8:65:00:56:
                    96:f0:01:80:99:63:1e:2f:8e:4d:e2:2c:77:71:37:
                    5b:29:97:e7:c1:ba:c8:f5:10:23:bb:69:eb:08:63:
                    00:f2:36:0d:fb:68:d5:75:1c:cf:b2:db:97:30:99:
                    12:b5:0f:83:86:e2:3b:45:b0:89:9d:0b:fd:3f:d1:
                    a6:90:21:b8:72:6b:65:a2:36:e8:8b:e2:97:24:fd:
                    fc:12:23:b6:1e:11:67:62:fd:b4:13:09:03:a4:58:
                    60:a1:03:1b:89:e9:c4:29:c8:6f:f5:67:7b:66:14:
                    2f:83:80:10:99:6d:d8:1f:83:fc:81:2b:ea:43:34:
                    ff:ed:c5:17:7b:d9:3e:b1:31:d8:f8:78:17:e2:5d:
                    c8:a2:c4:c2:cd:1d:d1:f6:11:9f:28:f4:82:c6:76:
                    e7:94:e4:ef:4e:17:f5:0a:e2:d3:8a:d5:4f:d2:53:
                    cf:f6:84:75:ad:bc:50:f7:68:97:c0:8d:4c:f3:b4:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D4:1D:73:34:A7:FA:F5:37:C6:AA:5C:A0:DE:30:86:49:40:6A:67
            X509v3 Authority Key Identifier:
                keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d1:ab:a9:10:be:b1:35:f1:66:14:e3:42:d7:8f:03:bc:32:
         c1:ae:83:ca:f3:e5:13:80:21:e7:78:54:89:98:56:0a:d2:85:
         4b:b0:b1:9a:db:b7:b6:38:ff:a6:9f:e3:77:75:f2:e5:0e:76:
         a6:79:6f:e6:cf:30:79:d6:c3:8b:e3:1b:2d:0c:f1:a2:81:d0:
         2f:84:17:ee:11:15:70:53:14:6c:20:40:8a:20:10:8c:91:ce:
         84:43:ea:2d:70:0a:5b:e5:6b:84:ae:17:b6:51:25:a8:92:c4:
         46:d7:35:36:26:64:64:c2:e3:50:a0:7c:d4:84:df:bd:4d:bc:
         ef:e8:75:97:7e:70:b7:39:1f:e3:bf:22:08:c9:36:00:52:d0:
         70:c5:7a:4c:d9:5c:57:bd:21:50:bb:a4:3a:dc:1d:8e:19:e7:
         20:f1:40:0c:7c:8f:93:7e:42:ec:44:12:aa:80:8c:b8:b5:d0:
         32:d2:66:e9:f8:5f:0e:6b:90:6c:b0:56:b5:5e:29:d1:1f:22:
         47:69:fe:3c:18:9a:02:35:c9:59:0e:5f:0e:a7:46:62:8a:7d:
         a9:38:af:9f:e8:e6:f2:11:af:b7:bc:f9:53:ea:34:65:71:67:
         f9:35:6d:e6:44:7c:e6:ea:b4:6d:a1:51:5a:8c:bd:4e:5e:bb:
         64:93:60:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:19:15 2026 by rpki-client