Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File:                     9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier:          vJa8df/au03KbgefQg1WzGlkjJ6Qas5y4VC6yMPTDxc=
Subject key identifier:   C9:C7:65:12:93:67:D7:FA:87:1E:15:EC:E1:2A:1F:F3:BB:EE:88:2A
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer:       /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial:       019D9A3EEAF0CAA6336020BD5DBF44D582B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number:          0791
Signing time:             Fri 17 Apr 2026 07:01:47 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:47 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:47 +0000
Files and hashes:         1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: u1w6N1q3DSsKm6Tp3g6OwWXTP5ohNedMT4qsOEtjrGY=)
                          2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:ea:f0:ca:a6:33:60:20:bd:5d:bf:44:d5:82:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
        Validity
            Not Before: Apr 17 07:01:47 2026 GMT
            Not After : Apr 18 07:01:47 2026 GMT
        Subject: CN=c9c765129367d7fa871e15ece12a1ff3bbee882a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c8:64:af:a0:d7:6b:cc:52:42:d8:fb:d2:2b:
                    b9:30:0b:62:5f:36:e9:2b:16:c3:93:f5:da:93:cc:
                    ae:45:25:50:aa:79:a0:a0:1c:cd:9c:98:d4:78:7f:
                    29:f6:e9:1a:2a:da:ff:e1:6f:89:b8:31:b8:f0:d1:
                    23:5b:4f:24:d2:59:74:5e:68:1e:b7:47:a6:3d:15:
                    d4:a1:2d:e1:99:64:2e:43:b4:ae:6c:3e:85:e0:54:
                    a5:13:4c:4f:ad:c4:07:ff:13:10:70:1c:ed:a9:67:
                    81:fc:c8:c0:f9:5a:f0:2b:89:a5:2a:75:fa:6e:43:
                    c9:27:29:88:5e:cd:20:51:27:62:eb:d2:dd:6d:ac:
                    cd:27:d6:ff:f8:52:bd:0e:a5:ca:43:29:f7:1e:2c:
                    9f:e4:a3:69:7d:e9:e0:b9:c3:a8:0c:42:6b:a8:2c:
                    f0:f9:8a:a8:16:b5:6f:64:e4:51:48:a1:1e:b1:e2:
                    38:ea:5f:6c:3a:d2:87:4a:0f:95:4e:09:0e:ed:f0:
                    5c:84:47:0c:3f:f0:b8:df:0d:d8:a0:a9:d1:43:6d:
                    79:24:ed:07:be:79:a0:32:60:1b:3e:51:d3:b1:2e:
                    4a:34:6a:14:08:97:03:3c:b7:fe:59:c2:9c:91:b1:
                    64:41:3b:8d:e5:70:b6:a0:ed:b7:ed:17:67:8b:84:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C7:65:12:93:67:D7:FA:87:1E:15:EC:E1:2A:1F:F3:BB:EE:88:2A
            X509v3 Authority Key Identifier:
                keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:79:68:54:68:1c:a4:5c:23:a2:c0:54:7a:e7:64:8a:d5:52:
         0f:9f:c7:09:19:cd:28:5a:7c:26:eb:94:33:cc:8d:f1:c3:b4:
         74:1e:f5:5a:09:63:a9:af:13:77:97:0b:fc:76:2f:0c:0a:42:
         bc:5b:29:30:73:1d:52:02:1b:d1:7d:ba:9d:a0:a9:a0:1e:60:
         15:5d:be:4c:71:ee:f3:7a:df:b2:1c:c7:12:1a:0d:9e:72:f4:
         77:8a:81:6b:0a:12:23:1c:03:d2:ff:7e:d7:82:17:bc:68:37:
         57:2f:e8:e7:93:81:f6:f1:00:90:c1:75:18:b7:5e:14:d1:33:
         3f:26:cf:2c:5f:a7:ae:aa:82:e6:94:2b:2c:1e:c1:29:79:70:
         03:e0:33:5f:96:7c:0c:d5:16:80:aa:f2:f3:56:dc:4e:22:f6:
         e8:ab:36:3c:74:10:fd:48:52:79:92:41:b9:e2:06:be:93:fb:
         ae:1c:57:43:78:89:6a:73:fb:bc:7d:0d:90:2d:8f:2a:a0:41:
         a4:5d:2e:3f:59:6d:c0:1c:00:57:ab:19:5e:c6:9d:5b:71:a2:
         cd:05:08:f2:b4:fd:56:4c:d3:d1:e7:bf:1b:df:0a:0b:8b:e8:
         b7:82:97:f3:75:b3:fd:96:62:e3:6d:87:4c:e8:cd:01:ba:46:
         d8:f5:c1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:26 2026 by rpki-client