Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
File:                     9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json)
Hash identifier:          CswXSrOwz8NQdqlPgXyvy97DJ8woEUGG5fjtCgPLQGM=
Subject key identifier:   B1:92:50:00:D1:15:DD:50:3C:AC:F2:22:00:48:AC:A2:EE:DC:95:F6
Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
Certificate issuer:       /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Certificate serial:       01A0E73FFD79AE65026B7F54846CC65FB303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
Manifest number:          17E4
Signing time:             Mon 28 Sep 2026 09:02:05 +0000
Manifest this update:     Mon 28 Sep 2026 09:02:05 +0000
Manifest next update:     Tue 29 Sep 2026 09:02:05 +0000
Files and hashes:         1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: 48JsITGLgEiEzC8oy/DbmgB+IvIUjJAPRZ02wjhkYM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:3f:fd:79:ae:65:02:6b:7f:54:84:6c:c6:5f:b3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
        Validity
            Not Before: Sep 28 09:02:05 2026 GMT
            Not After : Sep 29 09:02:05 2026 GMT
        Subject: CN=b1925000d115dd503cacf2220048aca2eedc95f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:13:2c:8f:0c:2a:93:ea:42:2c:2c:bc:36:
                    68:72:7d:f7:54:06:6c:af:4c:a9:be:66:d4:25:95:
                    f7:c4:1a:ed:83:2e:02:09:72:c2:c7:2c:68:67:3c:
                    bf:60:ef:8c:55:e2:0e:bf:f0:72:bf:b0:1a:29:48:
                    51:c3:4c:bd:86:ed:68:21:26:cf:0f:bc:4c:31:03:
                    ea:c4:f5:45:56:06:d8:be:a3:ca:38:10:24:99:e7:
                    ce:65:eb:5b:4b:27:4c:89:44:2d:d0:60:ac:02:ef:
                    28:73:13:f5:13:4a:51:17:86:42:3b:bd:ce:38:d1:
                    e4:8c:d8:8b:f8:25:94:98:fb:1f:c5:8f:52:2f:37:
                    ba:c1:44:97:31:9f:b8:a7:09:53:70:f4:35:a9:33:
                    12:9e:51:25:74:3a:e0:ae:81:0a:a6:be:62:f8:5a:
                    b9:cb:7f:13:bc:f8:a7:72:45:ea:56:84:db:78:61:
                    cb:4b:58:4d:0f:a5:ea:83:dc:c3:1e:b0:9c:f8:92:
                    84:62:f4:f4:e7:40:86:81:66:93:ee:0f:a0:cd:b1:
                    17:10:37:e5:a6:ab:ff:04:c6:4a:60:57:84:e5:c4:
                    d4:f7:9e:76:6a:4f:58:78:e5:c8:47:cf:fc:18:1e:
                    aa:10:17:9e:7e:ca:d4:69:fd:51:35:80:71:c4:ee:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:92:50:00:D1:15:DD:50:3C:AC:F2:22:00:48:AC:A2:EE:DC:95:F6
            X509v3 Authority Key Identifier:
                keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:78:08:f4:43:4b:6f:3e:38:1f:68:49:2f:3d:1d:3b:df:
         95:62:64:ee:7c:ea:11:83:68:15:d7:c7:85:60:21:db:1e:30:
         0b:51:e0:da:a6:23:a4:87:cd:d8:e0:42:80:5a:60:e6:fe:8d:
         30:93:ad:e0:79:e1:c6:fc:65:e8:c9:21:a1:76:6f:e9:1d:bb:
         b5:0e:0e:32:d4:05:89:09:88:80:db:ac:f9:3b:50:7c:6d:e0:
         18:a2:5b:64:49:02:73:dd:0e:e6:3b:0d:9f:35:ac:f0:6d:8a:
         12:fa:3d:b2:df:b6:ae:bb:d9:8d:90:bf:3e:c0:5b:e3:8a:9a:
         70:ab:ad:64:3e:a3:0b:07:b1:7d:ed:13:b8:55:9d:fc:2a:f6:
         6f:b7:df:d6:28:d4:bc:14:68:32:49:6d:d8:ab:ef:05:a2:f9:
         cb:76:13:12:92:24:33:30:3f:91:9c:c9:69:bd:b7:3e:f5:b9:
         90:60:e2:60:81:c1:a0:af:89:ff:16:c9:b0:7c:28:84:c2:5b:
         8e:7b:ca:26:48:60:08:34:99:ca:1a:dc:c9:8b:24:1f:c1:1e:
         10:e3:0e:5b:0f:1f:0f:7e:06:b6:05:23:c2:e8:ad:9d:dc:6c:
         88:52:ab:71:1f:c2:af:6b:54:08:50:c8:65:2d:61:6e:93:7c:
         32:d8:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:45:42 2026 by rpki-client