Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File:                     9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier:          2CqLNh+Ehvczmlwg70642w4Au5PwhQ+BzRIx9N2kM7A=
Subject key identifier:   EF:AF:41:40:D1:44:BC:8D:E8:15:52:ED:3B:6F:68:16:1D:48:3D:13
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer:       /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial:       019D9961F35637033C8ED22886A43836F7D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number:          0D0C
Signing time:             Fri 17 Apr 2026 03:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:26 +0000
Files and hashes:         1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: v5ueF17XZumO44W2eHnJqFWC3OGBT4Erd3D7DXXiMBw=)
                          2: uvizS4ukuC_gEdKACqyA3QErVlg.roa (hash: 7ZQzxgJlvYq7/1nZi/aQGYcGnnJ6bHEVEWXvW9zSYP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:f3:56:37:03:3c:8e:d2:28:86:a4:38:36:f7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
        Validity
            Not Before: Apr 17 03:00:26 2026 GMT
            Not After : Apr 18 03:00:26 2026 GMT
        Subject: CN=efaf4140d144bc8de81552ed3b6f68161d483d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5b:23:7d:64:67:39:32:06:cc:6e:be:c1:aa:
                    47:97:5b:d7:f2:ed:d2:d6:32:67:8a:00:17:cc:e5:
                    89:e1:cd:cf:b5:0e:6b:81:9f:85:a0:8d:89:60:0e:
                    9c:53:80:2e:00:37:69:bb:d7:4b:7f:48:b5:61:c3:
                    3b:0d:c6:ab:5e:d8:92:f9:7c:27:b8:a2:51:b5:37:
                    13:cf:84:41:a5:3d:1a:6c:30:2d:d8:49:6c:35:a1:
                    35:91:03:fd:a5:dd:57:66:8d:0c:99:c2:23:5b:b6:
                    94:39:fd:74:4f:08:e9:10:d5:45:10:55:58:a6:15:
                    8a:b5:21:ba:26:3b:6e:e6:d6:b1:a8:99:11:3d:a0:
                    e3:b3:ce:8f:30:d6:fc:9c:19:b7:e5:a3:5d:3b:f7:
                    85:81:b8:9b:a7:0a:21:b8:16:9c:f0:a5:b8:bd:b3:
                    01:00:35:35:ee:95:67:ef:b4:74:dd:b7:96:b8:2e:
                    21:4f:d3:27:41:56:3a:a3:b2:ea:05:f5:2b:98:29:
                    a3:3e:ed:14:c7:8f:bf:48:51:94:88:4f:59:5a:5f:
                    91:64:7a:07:0c:ac:76:b5:12:80:56:1f:aa:ce:9b:
                    16:4b:00:c1:bf:17:5a:24:e6:6a:9e:20:87:fc:6f:
                    c1:e6:09:d2:81:6d:8b:66:fc:9e:b9:91:a8:68:6d:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AF:41:40:D1:44:BC:8D:E8:15:52:ED:3B:6F:68:16:1D:48:3D:13
            X509v3 Authority Key Identifier:
                keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5a:b9:6f:27:95:1b:97:b7:6b:8f:47:b3:e8:80:56:34:bb:
         97:ec:fe:03:4f:33:02:92:94:45:f8:27:00:2a:89:ae:36:ae:
         52:44:83:5b:b2:a6:04:8c:1b:60:8b:8c:83:3d:0f:31:62:5f:
         c8:5d:4e:32:2a:f4:d9:05:8d:c9:a2:a6:17:62:a4:94:f8:05:
         65:f0:62:2d:74:dd:9e:1b:56:af:39:c5:5c:9c:ae:ba:52:d2:
         99:4c:31:c8:a1:56:11:ad:1e:1c:7d:98:0d:f1:da:c3:e6:23:
         5c:97:cf:3e:bb:aa:e3:09:21:41:28:81:25:47:a4:e6:f7:2d:
         c1:5a:0d:31:87:85:76:25:f0:41:75:98:3b:37:b5:5b:7d:4e:
         bc:68:2a:12:18:be:2c:1e:94:88:37:f6:ab:c7:f5:cf:2a:1d:
         79:5a:2e:ba:79:66:29:16:44:25:fc:67:80:0c:88:6d:15:3c:
         aa:42:1e:88:cc:05:fa:52:1e:a7:d7:ab:29:8c:35:20:81:b2:
         71:c2:66:ca:85:0e:60:3d:02:9b:f1:75:07:ef:ce:1d:62:49:
         52:3c:ab:38:1f:57:12:e8:74:2f:68:16:a6:c2:9b:fa:00:b8:
         3a:d0:54:68:19:01:5a:60:13:a1:73:3e:24:84:6b:a8:d3:55:
         82:8e:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:11 2026 by rpki-client