Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File:                     Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier:          svE7huzbO9RitA/4yx5ngcyUro9vcONu76sCjHb2CY0=
Subject key identifier:   54:CF:AE:A2:C1:A5:F4:AE:E1:1C:D2:BC:AD:AF:AA:F0:C2:77:1D:D9
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer:       /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial:       019E1D905C50EE13441A4FDAC96876B6884F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number:          107D
Signing time:             Tue 12 May 2026 19:01:00 +0000
Manifest this update:     Tue 12 May 2026 19:01:00 +0000
Manifest next update:     Wed 13 May 2026 19:01:00 +0000
Files and hashes:         1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: 0A3ZYCla5FRqB/YlHVSPZY4YhJqksKlFRVL9zoT4oic=)
                          2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:5c:50:ee:13:44:1a:4f:da:c9:68:76:b6:88:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
        Validity
            Not Before: May 12 19:01:00 2026 GMT
            Not After : May 13 19:01:00 2026 GMT
        Subject: CN=54cfaea2c1a5f4aee11cd2bcadafaaf0c2771dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:57:5a:e8:c2:16:fe:cf:88:97:bf:41:5b:
                    dd:56:1b:02:41:76:e0:c7:3e:8b:e5:c9:7d:62:03:
                    ba:06:c9:17:66:78:6d:00:5b:da:f7:a2:dd:4c:1a:
                    de:a5:c1:1b:9e:9d:53:27:e6:f1:92:ac:c4:ef:a4:
                    ca:7a:93:26:65:72:15:6f:57:f4:e1:cc:0e:54:4c:
                    9a:98:83:5c:37:2b:55:aa:e6:09:aa:fe:df:a2:d3:
                    35:5e:96:20:c0:2c:05:78:91:c0:8f:f4:71:60:13:
                    04:bf:73:61:24:51:99:d9:d8:f3:de:55:4a:06:db:
                    3b:ce:e6:10:da:25:57:c5:44:b3:5d:8b:91:cb:09:
                    d5:29:5c:0c:db:01:7f:68:37:1a:13:85:59:96:f3:
                    8c:7e:94:da:5e:35:c5:cc:75:01:e6:03:12:93:6c:
                    69:90:b5:f5:63:fa:67:cc:27:9b:66:ac:a4:f0:48:
                    2f:2c:cf:a1:aa:5c:0e:fc:b5:79:c3:32:b2:a0:58:
                    2b:8b:74:f8:04:d7:b4:1d:17:a0:96:ee:31:91:9b:
                    91:a8:be:09:04:36:c0:76:ef:38:6d:1b:d5:0c:76:
                    2c:09:af:96:27:31:59:50:8c:b7:05:d9:e8:68:3e:
                    d7:dd:a6:fe:e3:47:06:66:a6:8e:db:5a:17:0e:d8:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CF:AE:A2:C1:A5:F4:AE:E1:1C:D2:BC:AD:AF:AA:F0:C2:77:1D:D9
            X509v3 Authority Key Identifier:
                keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:db:8e:58:29:38:c1:ac:75:98:b7:d9:f5:aa:5d:69:23:b5:
         11:3e:5a:59:87:f0:f5:47:ab:7f:4f:39:9a:78:2d:ca:54:bf:
         44:67:9a:9e:5e:16:10:36:43:ee:64:55:55:b1:9a:06:83:b1:
         a7:a5:76:f4:00:d8:99:79:62:a1:0d:f7:82:18:c6:59:4c:77:
         e2:9d:ca:de:11:62:47:e9:f6:c8:f8:b6:c0:c5:0b:f3:e7:89:
         6e:61:2e:9f:ef:40:94:e1:82:bd:1b:c1:3e:6f:de:77:36:76:
         25:a4:81:14:8b:e6:ea:c9:3c:b9:f8:b6:2d:a3:d2:33:21:13:
         4f:9d:5c:04:0d:20:ef:1a:d5:11:fd:93:ae:44:2e:50:75:dc:
         10:43:c2:ac:65:2f:78:b9:6a:0b:bb:22:56:6e:e0:99:91:d2:
         70:d2:66:97:8b:f7:80:95:c0:c1:43:60:67:0d:cf:1c:94:0e:
         30:8d:b2:87:59:64:90:63:65:c1:a5:bb:5a:cb:f5:3b:15:03:
         df:9a:a3:e4:92:e0:4c:02:09:9e:9e:ce:da:34:a6:9b:2b:e8:
         02:f1:50:e5:3f:62:ef:ef:09:d6:b7:3a:7b:1a:55:a8:c9:89:
         2b:f9:87:92:84:77:6e:69:49:77:e2:72:7f:3a:12:53:53:5e:
         3f:41:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:16 2026 by rpki-client