Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File:                     9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier:          dOXuTomXx8E0esF4Ia7ziTAJlJS/4B+JIiphwOAqaZI=
Subject key identifier:   4A:50:D2:6D:96:28:11:C6:0F:C5:AB:F0:90:E4:81:3C:75:C6:A3:F5
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer:       /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial:       019EBEEC53E693CD6ADB7680A14B5010F9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number:          18E7
Signing time:             Sat 13 Jun 2026 03:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:19 +0000
Files and hashes:         1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: C4k1uRSCV0o6AIBVHYKs8M90fO3tOgXMOGTww6t2ANo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:53:e6:93:cd:6a:db:76:80:a1:4b:50:10:f9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
        Validity
            Not Before: Jun 13 03:00:19 2026 GMT
            Not After : Jun 14 03:00:19 2026 GMT
        Subject: CN=4a50d26d962811c60fc5abf090e4813c75c6a3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:d6:1a:fb:63:44:c8:c5:d5:3e:b8:50:2b:
                    bb:c3:1b:d3:f2:c7:8a:53:9c:22:b8:ac:ea:2f:1b:
                    b8:12:c3:ae:49:00:9b:bd:1a:ec:bc:27:2a:da:36:
                    9d:01:82:8c:3f:f3:83:87:85:ea:b0:49:41:6a:18:
                    0e:58:65:41:43:e8:6e:de:8f:0d:1d:55:80:2f:55:
                    6f:ff:ce:68:b1:a7:c4:00:cb:b8:7b:ee:46:50:c5:
                    31:04:c2:45:86:67:30:52:23:bb:da:4f:57:08:e1:
                    8c:d2:01:24:00:ba:c3:81:a0:eb:03:29:6e:41:34:
                    4f:d2:c4:bc:4d:32:d9:86:8a:86:7b:7c:9d:ca:a6:
                    f2:e5:d4:7d:ed:54:79:aa:5e:59:a1:e5:f8:61:f5:
                    26:0b:ac:d0:05:bf:3e:30:bb:93:78:1a:84:c1:ec:
                    15:5d:86:ce:aa:62:8b:a7:db:9c:da:55:15:ee:02:
                    cd:8e:70:5f:17:df:3f:54:68:fd:2a:48:a9:1b:5d:
                    01:cb:c6:7a:2a:70:a1:9d:af:7b:b7:fe:6a:41:dd:
                    37:53:fd:69:36:57:7b:19:20:87:bc:c2:3e:1a:33:
                    58:de:18:fc:06:0b:d4:b5:60:49:ea:df:d8:8f:fc:
                    67:ce:bc:9e:d2:ce:45:00:7a:bc:bb:99:71:66:66:
                    25:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:D2:6D:96:28:11:C6:0F:C5:AB:F0:90:E4:81:3C:75:C6:A3:F5
            X509v3 Authority Key Identifier:
                keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:41:ff:03:60:36:ef:d5:7e:73:03:ef:d5:21:03:c6:0b:fe:
         08:35:a4:85:61:2f:53:08:ab:a8:e8:cb:a4:4f:00:25:62:24:
         29:26:db:e9:fb:47:bd:f5:b2:9f:a3:80:a7:a8:40:e8:b6:fc:
         33:70:47:44:36:72:19:5f:78:76:96:7c:e3:e4:1e:c0:1c:94:
         69:66:46:29:cf:64:11:3a:25:1c:0d:d5:c6:3a:e1:a0:9b:5b:
         7e:55:fb:4b:7c:21:69:6b:ef:ac:e1:05:1d:51:68:1e:fa:33:
         d7:b5:8c:3d:1d:f3:9f:16:82:74:24:84:38:a0:0e:5a:66:a5:
         77:a5:40:a8:97:44:a8:10:ec:aa:b3:65:1d:9d:cb:89:ff:0a:
         ed:aa:0e:e6:8e:e2:70:1c:73:b4:77:95:7e:7e:a8:13:b5:15:
         ed:dd:d2:ca:1d:16:7f:05:3e:ab:a9:32:1f:21:a3:a2:93:12:
         e7:a0:cf:6b:12:63:c1:9e:ac:a2:e4:21:df:1f:e6:93:09:70:
         e3:19:67:43:91:83:76:09:59:a2:6d:88:5e:6f:4e:34:4b:83:
         7a:50:6b:a8:6b:b3:54:df:64:75:91:86:38:34:63:c1:f2:bf:
         70:9f:1e:6d:dd:67:87:b1:fb:f2:73:62:71:63:a9:b0:ec:0a:
         21:94:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:58 2026 by rpki-client