Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File:                     9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier:          vdzoI531Fi4oEqjNqmsE0vTIbHwsNYyfUjXKxuCjCX8=
Subject key identifier:   54:F7:E0:66:61:90:61:E1:D3:BB:D0:02:DA:A0:EF:BC:DA:0B:DB:CF
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer:       /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial:       019D996313FCC75D222055D582856CFD33EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number:          0893
Signing time:             Fri 17 Apr 2026 03:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:40 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:40 +0000
Files and hashes:         1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: IxqfxB0hrr144Az643p7Z/JUVFf9FybKaw+buNLNgbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:13:fc:c7:5d:22:20:55:d5:82:85:6c:fd:33:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54460596d6d532401de313df890366e5376d602
        Validity
            Not Before: Apr 17 03:01:40 2026 GMT
            Not After : Apr 18 03:01:40 2026 GMT
        Subject: CN=54f7e066619061e1d3bbd002daa0efbcda0bdbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:1c:66:65:17:6e:c3:7b:4a:6c:78:fe:6d:
                    19:75:58:40:0b:97:eb:48:a1:d4:d7:20:1e:98:12:
                    31:ad:45:66:69:76:f1:34:19:11:d2:21:78:db:80:
                    65:7c:5f:29:0a:26:95:e5:e3:5e:47:64:78:5d:e8:
                    48:b4:fc:88:e9:7b:b0:50:b3:66:22:37:83:21:82:
                    46:6e:b4:38:a5:a2:05:9f:25:f0:7b:57:34:5e:61:
                    26:b2:a8:6a:d8:f3:5d:f2:38:d0:eb:a0:1a:b0:98:
                    76:91:dd:11:ff:2a:62:b5:ba:c1:ff:ee:93:51:65:
                    49:48:7e:62:05:95:9d:f1:7f:ae:1b:bb:61:2b:77:
                    28:4e:93:ac:25:c5:0b:7d:85:d1:0e:2f:d8:2d:99:
                    fd:fa:fd:a5:85:4f:c8:90:84:ae:c5:56:6f:48:41:
                    69:a9:61:04:e3:c5:48:f0:10:ab:84:c9:54:0b:ea:
                    c2:4e:46:4b:a2:5a:0a:84:30:5b:c2:a7:1e:45:7c:
                    92:d7:a7:1b:eb:c2:25:6d:7e:dc:33:21:42:01:44:
                    79:73:c0:d2:09:8a:81:23:8c:59:a7:73:95:e3:d9:
                    60:02:e5:1f:c3:9f:75:ba:e7:75:0c:2d:ee:e5:d6:
                    e7:04:9e:09:e2:e7:fc:f3:19:c0:2c:5c:c0:be:49:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F7:E0:66:61:90:61:E1:D3:BB:D0:02:DA:A0:EF:BC:DA:0B:DB:CF
            X509v3 Authority Key Identifier:
                keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:06:29:e0:a4:68:37:c3:84:7a:51:58:65:17:3b:91:2d:e9:
         97:d8:05:95:5e:40:e4:43:60:98:57:ab:bc:b8:70:ea:49:43:
         a5:c7:fe:fc:73:97:ad:ea:1b:3f:5c:16:57:be:18:eb:5e:8e:
         d6:d6:d8:cb:46:fc:e1:2d:1e:80:bd:5d:56:f3:a3:b5:c4:19:
         f0:71:b4:61:7d:b9:83:06:69:7b:91:92:4a:8d:55:93:20:42:
         a4:a5:75:79:79:a5:71:5a:86:bd:07:a6:65:14:2b:5f:f5:9b:
         d1:a4:bf:4d:8d:5b:29:7c:95:b2:91:58:e0:bd:40:b4:79:70:
         9c:de:b8:46:fa:ad:40:6e:02:c0:a9:56:7c:08:11:39:68:5f:
         b2:a9:ad:95:02:18:3b:a1:93:28:da:2d:60:ab:25:88:44:26:
         6d:9c:c6:a6:a0:6e:c0:12:c6:cf:3d:41:c8:29:65:2c:e6:aa:
         81:d4:07:86:4e:61:93:15:26:92:27:1c:26:f7:2b:0f:d3:df:
         ba:af:84:9b:1f:f0:30:b0:09:b6:60:6a:4e:28:bb:10:01:d5:
         e1:16:e4:79:8f:9f:fc:ee:dc:d5:3d:4e:a4:5c:3f:85:df:e9:
         3a:1c:e5:79:4d:cb:44:1c:69:5a:a0:b8:6e:2b:96:e8:35:3d:
         7d:08:c3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:38 2026 by rpki-client