Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File:                     1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier:          I7m/5ehbxaclIR6JaGdartNWa3aYu4K8F4El2udyHEw=
Subject key identifier:   EA:73:79:C7:68:0F:52:1E:3E:97:48:86:05:4A:FF:4A:D4:3E:9D:E7
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer:       /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial:       019EC17F7C3EE0D51D132CB79A2F99E00EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number:          09E5
Signing time:             Sat 13 Jun 2026 15:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:17 +0000
Files and hashes:         1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: fZxGiizUNMgABzO7zWN1BG9hhj01sEaVWXKVGtiGZjY=)
                          2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:7c:3e:e0:d5:1d:13:2c:b7:9a:2f:99:e0:0e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
        Validity
            Not Before: Jun 13 15:00:17 2026 GMT
            Not After : Jun 14 15:00:17 2026 GMT
        Subject: CN=ea7379c7680f521e3e974886054aff4ad43e9de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:b2:a0:bb:9d:5b:e2:9b:9e:fd:43:2b:2e:
                    ed:c5:ff:7f:57:62:04:24:c9:16:a8:18:93:74:ca:
                    0c:65:11:68:75:3d:aa:89:27:92:37:0f:56:4c:92:
                    82:34:ac:be:e5:5a:8b:1a:de:c5:fe:50:d2:55:a8:
                    e3:bd:6f:58:51:a4:8e:f3:da:52:7e:39:64:21:15:
                    81:a9:6a:22:8e:3b:6c:4b:30:16:f3:bd:a9:0e:a6:
                    4e:81:ac:ff:70:4c:fe:de:b8:59:b9:9a:a3:ac:7b:
                    53:8b:0d:fa:7c:f3:4d:8a:8c:db:a6:85:5c:53:4f:
                    82:44:52:10:c0:a3:f4:0e:3d:86:af:ce:95:02:74:
                    c8:99:6d:dc:67:2e:32:5f:98:68:2e:2a:74:62:9a:
                    f3:4d:9b:fe:91:7a:14:54:3d:e3:f1:f8:1f:17:b1:
                    58:e6:ad:a0:11:65:51:28:04:70:72:be:f4:e9:4b:
                    1e:fa:29:7c:fe:29:70:f1:83:cc:3b:db:8d:60:0a:
                    fb:69:07:6f:77:03:28:d9:21:2d:ac:8b:1b:54:f4:
                    62:c9:04:ea:a6:91:90:91:97:c2:00:85:dc:82:e0:
                    7a:ca:98:ba:d7:38:14:0f:aa:d5:89:9a:d8:7a:7f:
                    14:85:07:c7:b2:95:37:c7:6f:60:62:42:9b:1b:a1:
                    85:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:73:79:C7:68:0F:52:1E:3E:97:48:86:05:4A:FF:4A:D4:3E:9D:E7
            X509v3 Authority Key Identifier:
                keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:9f:bb:da:b7:50:fa:61:31:4b:f1:97:3b:07:df:74:dd:
         2e:8f:66:a6:bb:04:a2:55:ff:0f:e5:37:31:d0:73:6f:b8:f8:
         c6:86:3f:4e:40:23:b4:de:9b:74:8c:6f:91:89:53:d4:a4:7b:
         e9:0e:20:84:c4:d2:83:90:18:62:53:7f:5c:2c:8c:1a:a6:c6:
         15:6e:30:a8:cc:69:63:49:10:f8:50:1e:5f:c2:84:92:f4:6e:
         6f:a2:cc:f9:f7:e7:3a:ee:a7:f8:3c:3d:d7:95:46:ff:ee:79:
         d5:8d:ba:6d:50:5c:ae:21:db:30:37:97:75:a3:16:15:2d:f4:
         06:0b:45:de:ce:35:e1:67:57:54:e1:8f:de:77:10:f0:5a:22:
         f0:0a:11:60:31:5b:f3:8a:6d:48:c5:4e:cf:36:d6:b2:25:ef:
         45:ad:bc:d9:b3:55:9c:33:11:df:89:d8:2c:69:76:a6:46:71:
         fa:e5:b8:0c:92:13:86:81:5f:81:bf:77:f6:a3:c6:86:6c:2d:
         97:75:e9:50:a3:8f:f2:3e:09:9f:94:fa:b1:8d:d0:46:e1:7b:
         97:a8:eb:66:68:fa:ed:27:02:6f:4f:aa:68:45:c8:e9:55:16:
         17:cf:5c:b4:ce:7e:ce:c6:0e:f1:de:8f:25:d6:d3:58:3c:28:
         f4:d7:c8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:51:42 2026 by rpki-client