Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File:                     9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier:          H/ioxGqkSR/SS9obebYJTrU2nip01Rqib9+FX25oFAY=
Subject key identifier:   82:86:79:B1:11:05:91:CD:25:1D:10:BE:6F:4F:D7:21:B1:42:78:10
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer:       /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial:       019EC1B778DD1A361BA5F930678F115E8454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 16:01:27 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:27 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:27 +0000
Files and hashes:         1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: wqsFee8ed713JkCwMWknrzkNNjJlxpkpbQdZ6O8iJyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:78:dd:1a:36:1b:a5:f9:30:67:8f:11:5e:84:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
        Validity
            Not Before: Jun 13 16:01:27 2026 GMT
            Not After : Jun 14 16:01:27 2026 GMT
        Subject: CN=828679b1110591cd251d10be6f4fd721b1427810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:83:cc:e2:5e:1b:0c:6b:26:9a:84:e5:df:98:
                    81:b9:39:05:ba:d6:ea:83:7c:80:c7:2c:43:1a:96:
                    70:2d:7e:4c:14:12:d9:a1:b9:24:c8:f3:fb:46:30:
                    31:63:5a:34:30:bb:d1:b2:6c:9a:58:c5:7c:a4:33:
                    bd:57:a1:f8:64:50:6c:d7:41:87:eb:3f:d7:c1:e5:
                    e8:ed:33:ba:df:68:02:af:62:70:66:e5:7c:cf:43:
                    a6:bf:0a:38:ec:0e:09:72:cc:c6:14:96:30:15:13:
                    2a:11:aa:6a:b8:0d:10:d8:b0:2e:9f:07:0e:18:b8:
                    a1:69:dd:b4:07:c1:02:e5:5d:4a:40:04:26:d5:87:
                    f5:be:be:d1:48:b0:24:f3:17:58:14:23:e0:4a:28:
                    15:f1:b2:2a:6c:74:53:80:97:58:59:40:96:15:73:
                    23:84:a8:e9:c8:29:06:eb:7e:73:2c:d0:15:6c:ec:
                    0d:3e:75:c0:79:37:77:a7:f8:9f:37:da:5c:71:df:
                    00:c2:0a:3d:56:2e:0c:13:4b:40:e9:e2:21:dc:fb:
                    d6:e9:2a:d5:49:21:2a:9b:10:96:00:94:e4:95:e9:
                    89:94:c2:57:1f:22:3c:04:68:1d:bc:35:e6:ce:87:
                    7f:fa:02:1d:59:02:3c:fa:41:3f:c0:1b:a9:9c:6e:
                    15:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:86:79:B1:11:05:91:CD:25:1D:10:BE:6F:4F:D7:21:B1:42:78:10
            X509v3 Authority Key Identifier:
                keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:49:f7:98:37:f6:b1:01:95:10:e2:f3:0b:91:97:50:0b:80:
         f9:65:f0:34:47:04:83:99:65:46:f2:03:f8:b8:a7:34:75:cf:
         b7:1b:c2:fc:96:91:f8:b5:8e:85:70:66:27:a0:3e:e6:30:28:
         96:72:d0:a5:37:2f:a3:0c:51:ee:f7:52:7c:cd:94:d1:8a:b8:
         4b:c9:af:22:9b:1c:44:1a:d6:3a:47:37:a2:a0:0c:38:c1:44:
         a0:1a:37:9f:8f:45:29:c5:18:60:1f:83:47:8b:69:38:76:8e:
         8b:c8:66:94:ef:58:1e:a3:bf:eb:8e:73:f6:07:a5:e1:7e:a3:
         63:d7:fe:1f:fd:cc:53:a2:15:bc:0b:c7:af:07:bf:32:5f:30:
         b7:3a:dd:93:f3:00:fe:1c:34:48:e3:4d:e2:37:78:7d:20:d3:
         e4:4e:69:63:3b:8d:bb:6f:a6:7b:1d:99:34:99:09:d8:59:11:
         77:f1:39:8f:86:c6:0c:15:eb:a6:30:92:62:26:97:53:51:bb:
         a4:bb:93:63:2a:21:b0:05:a9:6d:41:85:42:c0:55:ef:15:19:
         da:92:3a:98:81:2f:b7:fe:74:7d:68:c5:d6:ef:69:c7:5d:96:
         35:70:de:7e:7c:88:70:f7:f6:e1:64:18:32:61:2c:a6:47:a8:
         37:7c:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:46:27 2026 by rpki-client