Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          HXJnlTS5TxqkC1MXau/IgnqJcp6CsNSwHzW5+4O4/fU=
Subject key identifier:   C3:A1:2D:D1:68:E2:7C:9A:C1:23:52:0A:CE:DE:06:2D:19:40:3D:2C
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       019D9A74D24B16BEB0466696DCAE19E22127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          0529
Signing time:             Fri 17 Apr 2026 08:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:40 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: x1gKne3HZB2YMMxX+pZWM0u7DF9xGvQlOTh66Uq+ssM=)
                          2: Q1BIazUMtU491Kfp1prxFz4oeuU.roa (hash: sJo8b2jgePbm04v5Oh4sG6+LqF87DEVfl2ISH3CHQlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:d2:4b:16:be:b0:46:66:96:dc:ae:19:e2:21:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: Apr 17 08:00:40 2026 GMT
            Not After : Apr 18 08:00:40 2026 GMT
        Subject: CN=c3a12dd168e27c9ac123520acede062d19403d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:73:ba:e6:e2:cf:c5:49:8f:56:c9:6f:d8:
                    fa:66:e8:bb:bf:d3:98:59:84:14:c7:20:db:68:f3:
                    5b:15:ef:8f:f6:48:37:0a:05:7a:6b:16:e6:ba:b0:
                    c7:96:05:e8:ca:fc:09:d5:4c:6e:cb:da:93:d5:17:
                    28:0d:84:2f:95:1f:23:69:d6:be:99:c3:51:99:f1:
                    ab:7e:4e:8d:ac:62:fd:39:ff:66:11:97:eb:95:6a:
                    89:d3:8d:6c:52:f6:26:95:18:41:db:3f:66:a6:80:
                    7b:78:bb:1d:f3:da:69:c4:73:cd:86:2d:1f:2a:aa:
                    54:6e:d6:d4:89:48:75:3e:cc:b3:21:bf:1d:4a:4c:
                    fd:92:46:d1:0f:83:14:36:97:ec:b4:e8:63:55:d6:
                    93:6e:c2:94:67:2f:5a:dc:fa:de:81:85:62:0c:25:
                    d0:f9:b5:d3:49:76:66:d0:7a:9e:a9:56:52:b6:24:
                    3f:5b:c0:2d:ba:75:06:68:be:c3:36:09:f2:96:d5:
                    82:02:60:e5:bf:dd:48:f3:9b:c6:af:c3:b7:80:93:
                    44:97:24:a0:f3:55:43:8f:66:97:ed:5f:dc:fc:6b:
                    23:ec:24:b7:e5:b0:c0:3c:e2:d6:03:ca:79:2b:7e:
                    23:0f:0a:fd:c1:68:fc:e6:c3:a1:71:e6:5f:cc:61:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A1:2D:D1:68:E2:7C:9A:C1:23:52:0A:CE:DE:06:2D:19:40:3D:2C
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:74:45:18:05:43:69:66:2c:0b:11:a6:10:9e:e8:50:cb:
         09:07:4e:a2:c4:f1:0d:08:d9:7f:0f:1e:f1:6f:1a:8b:55:96:
         44:06:87:7f:02:3b:ea:78:88:59:2b:77:1b:a2:01:e8:ea:06:
         04:9e:46:9f:a5:40:6e:4d:61:af:3d:83:78:cb:58:e1:d2:36:
         ae:7d:84:eb:c0:14:11:dc:e8:7a:1e:85:91:6b:e6:7e:c4:ae:
         fa:18:16:0a:a3:2b:13:2a:0d:91:36:35:8a:38:ca:ca:c9:62:
         a0:ef:90:a2:fe:d1:55:08:8b:fe:e8:4c:7d:4d:f8:6b:0a:b1:
         d7:c5:b9:36:5f:6d:55:90:a3:5d:7a:13:13:10:cc:2f:7a:d7:
         2d:00:ab:ba:30:1a:61:96:ca:d8:13:e4:c9:38:21:c3:6c:53:
         fb:29:37:06:db:66:aa:28:6a:bf:9a:0f:a0:98:2b:26:f0:20:
         1b:26:93:35:8b:8a:07:4e:a9:09:5e:24:0c:d0:82:2e:9a:31:
         0d:26:f8:ba:89:4c:ea:df:be:05:d7:e2:19:f0:86:8c:cf:db:
         ee:c5:c9:1d:48:e5:80:89:fc:da:60:86:5a:78:26:92:36:f1:
         e3:a5:bc:16:d8:47:56:41:a7:db:3e:c8:76:9d:b1:0f:4c:24:
         b8:f0:06:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:12 2026 by rpki-client