Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
File:                     v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json)
Hash identifier:          VA0IrzKrdJF0iIZj+PWPrnhyQwu7vUCpP+w+Ys+JqSs=
Subject key identifier:   13:B2:5D:B6:9B:F9:1B:25:83:93:E2:42:A0:53:15:11:40:BD:6E:B0
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Certificate issuer:       /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial:       019D9AE2BFEE17C1A7EAF09B1104C7DC73B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 10:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:44 +0000
Files and hashes:         1: 53zsREaM2oPiZZAzLOSiMVZ-6g8.roa (hash: mergViMqW0iRpJxItykCDQvuzt2m62RrKr9ZIa1m8MY=)
                          2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: e+tKOpYuTdHK99TULBDLQaqxh0X52s1ekekKPpynbe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:bf:ee:17:c1:a7:ea:f0:9b:11:04:c7:dc:73:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
        Validity
            Not Before: Apr 17 10:00:44 2026 GMT
            Not After : Apr 18 10:00:44 2026 GMT
        Subject: CN=13b25db69bf91b258393e242a053151140bd6eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:1a:8a:b5:b6:fe:69:7c:84:0d:9b:99:8a:
                    5d:98:86:e3:98:e0:e5:74:77:eb:10:58:ba:ce:a1:
                    4a:cd:fc:bf:c7:0b:a7:30:5f:ca:ac:72:49:00:da:
                    c5:e1:34:5c:e0:16:8b:f9:98:4c:c0:78:a0:83:6d:
                    08:31:82:55:94:0e:4f:ba:72:58:c3:93:9c:99:b9:
                    2a:fb:ce:12:35:52:aa:c7:6a:05:4b:dc:6e:2b:69:
                    03:30:f0:77:63:3a:f6:a0:25:99:2a:49:25:45:49:
                    e1:8a:54:6a:50:6f:25:9a:a6:b2:eb:b6:d7:24:d9:
                    75:55:fa:cd:f6:61:43:f1:41:7a:a0:ec:ef:e2:d7:
                    a9:47:46:44:3f:a0:54:a8:5c:ba:78:1b:a0:52:99:
                    8b:8c:be:26:86:29:c1:39:74:d2:3d:09:79:3d:11:
                    31:b1:af:76:1e:67:b3:6f:69:84:74:d0:67:90:42:
                    d5:a2:0c:6a:a0:36:22:f0:00:7e:cf:12:89:c3:44:
                    10:47:27:d1:2a:ed:8b:43:68:6f:59:52:6c:8c:a0:
                    c6:b5:11:98:c0:c6:18:6b:22:ee:64:e3:31:4f:ef:
                    91:90:db:e1:d2:82:ec:53:7d:d9:84:b7:e8:bc:86:
                    70:35:09:35:f4:c3:fa:39:2b:df:ce:53:88:ab:98:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B2:5D:B6:9B:F9:1B:25:83:93:E2:42:A0:53:15:11:40:BD:6E:B0
            X509v3 Authority Key Identifier:
                keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:92:f9:a2:73:8b:0f:ff:aa:e9:42:a9:e1:5c:20:84:31:77:
         d8:4e:a2:cf:40:87:41:42:a6:7c:9e:37:35:67:e3:c6:e3:c1:
         9d:c3:e2:c5:c9:44:ec:df:91:ce:4b:2e:f1:44:15:6c:56:31:
         50:65:a5:23:eb:f5:fe:8b:ff:be:98:f3:9a:6a:ba:3a:5d:ef:
         94:29:a1:c2:e1:fb:67:ae:07:16:71:0f:65:3c:b6:e4:13:71:
         1b:be:16:8f:03:45:65:8e:e0:db:dc:dd:27:d1:f8:63:4b:aa:
         97:1b:20:34:84:2d:ea:aa:31:41:ca:d4:8c:6d:b6:b3:c5:65:
         cc:0f:7b:09:fc:d9:58:7b:0e:71:ff:44:97:e5:b1:f7:d9:da:
         57:57:62:f1:ea:ee:8a:32:e1:51:56:09:b0:a1:8d:bd:7b:b0:
         d0:2b:b3:06:08:8d:44:1b:bb:0f:80:3d:bc:7c:36:fb:94:20:
         91:ef:d6:e8:85:d1:6b:f2:7c:3b:99:cc:2d:28:b2:8d:7c:fe:
         5c:ff:c8:71:ac:d1:be:e3:40:03:b3:b8:87:07:df:01:ee:65:
         92:5e:0d:95:e6:2f:ec:55:31:d6:35:52:2c:ba:ac:cf:1b:4e:
         01:63:2b:a8:ce:67:58:fd:cf:0e:b5:e8:e4:22:8b:de:12:f5:
         29:ca:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:35 2026 by rpki-client