Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File:                     9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier:          72zA9aIFPxuoY9xopzbumDfQt+qudJIvTKkmYjrfyDk=
Subject key identifier:   55:F6:55:C0:A8:C9:93:22:EA:8E:93:DC:A8:B4:80:77:38:4B:25:9D
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer:       /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial:       019DA3E69B80F20C6968BFD64ED4B490D589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number:          0F5B
Signing time:             Sun 19 Apr 2026 04:01:32 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:32 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:32 +0000
Files and hashes:         1: 9SmHJmrRitclj89O3P3NGh06YYQ.roa (hash: W4KwZ7FIlwcvzJ1G1mBi+F6bA87M/+t0Oq23zCNKxM0=)
                          2: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: Klrh6K+0G31aBYUEIJEoIdqhVYlXkqjAiy7tj8zNYBQ=)
                          3: aQ_GfdLhVfeWZDkm7-WSjIfSbIw.roa (hash: dZ1mg6u90Iped4j/Ep8zJIk/Xe9I73j9HaUUu+dqgcc=)
                          4: pEFtj6Nro20j5spflBdzEuX8rMA.roa (hash: MXSSlBPtlMFzBs9OUlqNPvPkqCnFxlhb4rh8/UD72i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:9b:80:f2:0c:69:68:bf:d6:4e:d4:b4:90:d5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
        Validity
            Not Before: Apr 19 04:01:32 2026 GMT
            Not After : Apr 20 04:01:32 2026 GMT
        Subject: CN=55f655c0a8c99322ea8e93dca8b48077384b259d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:7d:b4:90:3e:9d:83:a6:83:9e:4a:fd:bf:
                    de:ac:e4:de:92:d9:6f:50:72:35:cf:6d:c7:72:a3:
                    05:a6:bb:b2:91:33:99:4d:fe:d0:1a:b7:f2:b9:40:
                    bd:dd:de:87:4f:b9:9e:d6:f6:be:79:e6:f7:9f:c1:
                    34:e5:d8:b1:cc:f1:ae:ed:08:4a:42:b2:70:8c:27:
                    2b:bd:53:3f:2e:d2:c0:f1:4a:3f:63:34:a5:43:ae:
                    ec:62:fd:40:eb:e6:c1:c4:b7:e4:e6:b9:fe:1b:07:
                    ae:a4:91:34:8e:f1:c8:37:6d:9d:4d:97:0c:53:90:
                    24:02:38:f7:a3:28:e0:43:62:9e:de:62:4d:bb:be:
                    f7:e9:8c:9c:5d:64:bf:9a:ac:17:de:ab:6c:cf:5f:
                    2d:c7:de:4c:8c:a7:15:05:cf:31:ba:6f:b5:65:4d:
                    ce:3b:37:1e:b4:e2:57:e3:4b:97:19:21:a8:ec:d5:
                    9c:70:f9:3f:e1:53:bb:88:38:48:8c:aa:e0:1e:48:
                    56:03:06:de:ec:6a:8b:54:8a:3b:e5:6a:9d:70:97:
                    a5:a1:f3:24:39:94:46:d2:44:88:18:dc:eb:6a:4a:
                    37:8f:34:aa:b8:f4:f8:e5:c1:e0:89:a0:60:a2:8f:
                    58:c0:86:94:07:4e:05:f7:9b:95:e5:bf:f4:33:e0:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F6:55:C0:A8:C9:93:22:EA:8E:93:DC:A8:B4:80:77:38:4B:25:9D
            X509v3 Authority Key Identifier:
                keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1f:d2:f3:e2:73:e1:5a:32:36:7c:fe:47:62:5d:fc:1f:fa:
         91:68:a8:1d:ca:a9:5a:c5:8d:4c:27:fc:ea:e4:d3:09:4e:36:
         9a:ef:1e:66:82:8e:45:99:b6:d2:99:a5:22:6f:bd:22:87:7a:
         51:ee:b1:0c:54:74:60:00:87:16:2b:f4:96:f6:7e:db:74:61:
         d3:83:c5:6f:35:98:d2:ed:f7:19:75:40:c3:d1:54:5a:c1:49:
         29:ce:b6:dc:e1:85:91:c4:5d:7f:d7:73:73:58:e4:81:58:99:
         b2:5a:f4:a8:0e:d5:5c:c0:0c:21:e0:1e:95:48:f2:59:f3:98:
         cb:94:a0:eb:ee:dc:41:44:17:33:9c:40:00:ee:75:8a:cd:61:
         b7:c0:e9:fc:95:4b:be:04:9e:ea:6d:2b:6a:18:fb:da:68:5d:
         5a:19:b7:29:5a:1a:6c:f9:32:06:2d:cd:e9:ba:a6:ef:c9:9d:
         e7:6a:08:b8:d5:b2:b6:13:1d:76:68:67:c3:79:94:46:2f:84:
         ad:36:8d:1b:6a:d3:82:a4:6e:a9:60:22:40:4a:67:6e:90:11:
         b4:32:de:06:67:fc:66:38:b7:60:7d:89:d7:27:19:06:3c:4d:
         84:fb:f5:a5:c4:6f:fc:62:c5:2a:e7:03:ae:15:52:aa:fa:3f:
         b6:14:bc:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5puA8gxpaL/WTtS0kNWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz
ZjQ0MmIwHhcNMjYwNDE5MDQwMTMyWhcNMjYwNDIwMDQwMTMyWjAzMTEwLwYDVQQD
Eyg1NWY2NTVjMGE4Yzk5MzIyZWE4ZTkzZGNhOGI0ODA3NzM4NGIyNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAV9tJA+nYOmg55K/b/erOTektlv
UHI1z23HcqMFpruykTOZTf7QGrfyuUC93d6HT7me1va+eeb3n8E05dixzPGu7QhK
QrJwjCcrvVM/LtLA8Uo/YzSlQ67sYv1A6+bBxLfk5rn+GweupJE0jvHIN22dTZcM
U5AkAjj3oyjgQ2Ke3mJNu7736YycXWS/mqwX3qtsz18tx95MjKcVBc8xum+1ZU3O
OzcetOJX40uXGSGo7NWccPk/4VO7iDhIjKrgHkhWAwbe7GqLVIo75WqdcJelofMk
OZRG0kSIGNzrako3jzSquPT45cHgiaBgoo9YwIaUB04F95uV5b/0M+DexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX2VcCoyZMi6o6T3Ki0gHc4SyWdMB8GA1UdIwQY
MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt
MWM2NTRlMDJkNzVkLzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk
LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASB/S8+Jz
4VoyNnz+R2Jd/B/6kWioHcqpWsWNTCf86uTTCU42mu8eZoKORZm20pmlIm+9Iod6
Ue6xDFR0YACHFiv0lvZ+23Rh04PFbzWY0u33GXVAw9FUWsFJKc623OGFkcRdf9dz
c1jkgViZslr0qA7VXMAMIeAelUjyWfOYy5Sg6+7cQUQXM5xAAO51is1ht8Dp/JVL
vgSe6m0rahj72mhdWhm3KVoabPkyBi3N6bqm78md52oIuNWythMddmhnw3mURi+E
rTaNG2rTgqRuqWAiQEpnbpARtDLeBmf8Zji3YH2J1ycZBjxNhPv1pcRv/GLFKucD
rhVSqvo/thS8jA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:45:03 2026 by rpki-client