Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File:                     9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier:          JqVdm/Q0XdI68BalG6+KfvJpHkBqNThzjDvb8VkhA8s=
Subject key identifier:   A9:92:35:F5:50:E7:23:B6:BD:A9:52:B7:C1:E0:83:E4:29:E4:47:4A
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer:       /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial:       019EBEECD20DFD3363FCC832F6A1E8650930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number:          092B
Signing time:             Sat 13 Jun 2026 03:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:51 +0000
Files and hashes:         1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: IofotXTECo1pMjAUzO7oKaAEZdEVvylzu597fRfX8Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:d2:0d:fd:33:63:fc:c8:32:f6:a1:e8:65:09:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54460596d6d532401de313df890366e5376d602
        Validity
            Not Before: Jun 13 03:00:51 2026 GMT
            Not After : Jun 14 03:00:51 2026 GMT
        Subject: CN=a99235f550e723b6bda952b7c1e083e429e4474a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:ad:c5:7d:a5:45:c3:bf:58:e1:8e:f8:af:
                    80:a8:49:f3:47:27:fc:8d:f5:51:67:40:b0:09:6f:
                    da:1e:48:9e:a1:1a:1a:f3:3c:34:02:b7:ed:ab:05:
                    d0:3a:33:ff:07:1a:bc:95:29:18:cd:16:df:60:2e:
                    56:52:af:34:de:1f:0c:86:cf:81:47:a5:3e:46:04:
                    d3:71:2f:7c:3c:1b:c7:18:99:f8:46:10:70:71:3c:
                    36:a1:29:b1:04:0b:be:b5:9b:7c:f4:fd:4d:45:d6:
                    90:4d:f0:7f:ec:79:5a:58:4a:90:97:82:f3:03:d3:
                    b1:0e:9b:07:65:5f:c8:3e:b4:52:c4:98:76:a8:d1:
                    1e:0c:f6:81:d6:d3:0d:51:1d:fa:6d:1c:5d:e5:fb:
                    44:99:da:84:e4:30:8e:f9:e8:e6:d1:70:29:fe:dc:
                    dd:c5:3c:90:a7:d7:c2:6c:0c:3f:e8:5f:4c:50:9d:
                    d0:59:c2:c2:4a:75:24:29:b7:8c:a6:46:7d:18:6b:
                    2c:cc:de:c4:e7:26:84:56:5b:bf:e5:36:ba:b3:23:
                    d6:46:96:56:cd:68:21:01:c3:a0:9a:16:cb:fb:ba:
                    e9:2f:07:e8:24:26:7a:7d:ad:ce:13:b2:84:4c:5a:
                    c9:81:2c:25:e5:c8:d3:37:12:7b:c7:8e:e9:3f:a5:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:92:35:F5:50:E7:23:B6:BD:A9:52:B7:C1:E0:83:E4:29:E4:47:4A
            X509v3 Authority Key Identifier:
                keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d6:5a:70:86:05:a5:e3:eb:35:9c:e5:c4:05:c9:e8:c6:b5:
         12:d4:9d:1a:21:43:89:7d:d7:51:9b:69:03:e9:9d:f2:5a:19:
         54:08:0e:8b:91:bb:ce:10:14:88:9c:d8:c8:ad:d0:df:76:56:
         c8:db:b1:74:dc:81:0a:b2:ec:c9:2b:ad:fb:36:ab:b8:46:62:
         0b:e6:3e:8e:ff:6b:c2:7e:d3:a0:77:22:63:4b:72:e7:c9:4f:
         08:62:8b:64:c1:81:06:bb:eb:69:b9:d0:4a:c3:c0:07:e9:d6:
         38:a7:2e:85:f9:8f:81:e1:1a:a4:24:74:c5:7e:41:c4:a3:a7:
         39:ed:0b:59:e4:30:e4:d4:fa:38:eb:86:16:6d:be:ba:70:ae:
         86:1a:06:fe:fd:ff:ee:6a:cc:41:7e:7a:2a:6c:75:d5:80:66:
         4a:bb:a2:74:5f:ab:3b:01:77:26:f0:61:e6:c6:f0:f6:95:ec:
         c5:bc:18:58:ef:90:8e:ed:da:42:0d:e7:06:5b:c5:f0:c1:27:
         8d:15:74:70:29:36:57:fa:c8:cd:fe:20:85:0c:8d:85:c4:dd:
         3a:56:16:f3:f6:ba:fe:ea:ee:b1:fa:4b:90:1e:d4:f5:0b:0a:
         77:59:05:7e:d9:cb:b6:7b:3e:00:99:14:e0:68:4b:a1:65:9a:
         21:a4:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:15 2026 by rpki-client