Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File:                     D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier:          lZ2hh8pAWO6gBgtp1J2J1FD0dneLX1sPG/J3RVHvliw=
Subject key identifier:   78:A6:29:89:41:12:67:31:9C:FB:F4:44:A5:70:81:3D:61:8B:41:2E
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer:       /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial:       019E1EA305DAEA028350C1EE9E2C7E02CCB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 00:01:00 +0000
Manifest this update:     Wed 13 May 2026 00:01:00 +0000
Manifest next update:     Thu 14 May 2026 00:01:00 +0000
Files and hashes:         1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: ByZWxEbfK8Pm1GVwI5J6hYq3N0z79ZlQ0IC/MJ/coR8=)
                          2: Lacc-4_5zErIhaLObDnS5evETUo.roa (hash: E1jD2Nnvra6sUfCdyofjtOGms4KS2srmXM/6u5x0Za4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:05:da:ea:02:83:50:c1:ee:9e:2c:7e:02:cc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
        Validity
            Not Before: May 13 00:01:00 2026 GMT
            Not After : May 14 00:01:00 2026 GMT
        Subject: CN=78a62989411267319cfbf444a570813d618b412e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:45:78:4b:03:85:16:c4:72:cd:bb:76:5b:
                    fd:54:8b:ad:e5:5c:24:39:d0:3c:ce:99:92:9b:80:
                    6f:29:6b:52:3e:3c:04:99:2a:8b:1e:54:21:24:e5:
                    f3:12:c7:72:94:dd:79:3d:b1:11:1d:d9:b9:4c:6b:
                    4f:53:ce:4d:09:a9:ce:78:42:13:e5:c5:4d:a5:c0:
                    e5:ce:6e:a0:ce:50:f9:a3:c8:50:32:a2:e5:43:ce:
                    9c:6c:9d:7c:41:af:0d:90:70:d8:f8:71:58:ce:3c:
                    b9:08:1e:62:54:25:4f:01:ac:82:57:12:c7:1d:f4:
                    39:97:b6:ff:d6:cb:d7:65:78:d2:34:e4:53:c5:5e:
                    df:6f:35:d4:4e:d2:44:06:28:f7:b5:42:fd:71:23:
                    85:a3:81:8a:8b:d8:e4:cd:41:0e:ea:cd:ca:a1:fe:
                    49:07:42:10:70:5f:cc:2e:90:1a:85:a0:20:5b:cb:
                    07:46:7c:21:24:b9:0d:94:71:db:f2:d3:31:89:53:
                    72:61:9a:b9:39:20:ad:cd:0e:a6:36:f4:db:c8:96:
                    54:03:2a:bc:81:69:94:70:25:e7:7a:88:f1:6e:50:
                    f5:9b:e4:e4:10:ae:2a:c8:c0:06:70:b6:92:c7:d0:
                    f9:52:de:66:0a:ea:7b:86:a2:a6:1c:fb:ae:b7:e7:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A6:29:89:41:12:67:31:9C:FB:F4:44:A5:70:81:3D:61:8B:41:2E
            X509v3 Authority Key Identifier:
                keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:49:0d:a4:92:d8:40:66:da:9f:1c:48:ba:13:b0:25:05:
         1e:55:0c:0c:47:75:c2:84:84:9e:ed:b9:01:fb:5d:7e:43:39:
         e5:18:ec:17:d0:51:9b:61:c2:12:5d:07:23:38:60:47:98:cb:
         63:7f:e5:1e:cd:a8:36:1a:6e:d1:3f:d7:34:24:b1:ea:b8:25:
         68:ad:47:e3:06:c6:a4:cd:ab:38:70:2a:5b:10:b2:9a:6c:07:
         ad:43:a1:89:d6:3c:07:e0:1e:77:eb:2e:02:89:78:f2:34:ce:
         53:e5:de:62:f9:8c:0d:38:e2:c2:ad:02:2d:30:fb:eb:f1:66:
         3a:be:21:89:db:72:df:c0:2d:94:28:b8:a4:15:bd:f2:4b:26:
         d7:d0:20:3d:0b:f8:96:01:30:31:d9:43:d9:df:16:48:b9:9f:
         4f:81:00:4f:e9:e4:88:4d:1f:0c:52:97:97:59:14:7c:6b:3c:
         24:cd:9b:97:89:12:a8:9f:d6:88:34:6f:b6:f1:56:fc:2d:b8:
         48:ad:23:56:24:cd:cb:97:29:4a:85:55:3a:0d:cc:75:32:9f:
         58:51:04:c9:9b:13:52:d9:cd:e7:9c:8c:c0:82:be:35:9c:62:
         44:e6:34:6f:8e:55:7b:19:d3:b0:4a:b7:86:6b:6c:c1:ba:e0:
         5f:87:b3:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eowXa6gKDUMHunix+Asy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjhlOTNmMzQ3MmVhNmJlNThmM2ZlYjc0NDk1NDcwMDk1
YTE3N2QwHhcNMjYwNTEzMDAwMTAwWhcNMjYwNTE0MDAwMTAwWjAzMTEwLwYDVQQD
Eyg3OGE2Mjk4OTQxMTI2NzMxOWNmYmY0NDRhNTcwODEzZDYxOGI0MTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uBFeEsDhRbEcs27dlv9VIut5Vwk
OdA8zpmSm4BvKWtSPjwEmSqLHlQhJOXzEsdylN15PbERHdm5TGtPU85NCanOeEIT
5cVNpcDlzm6gzlD5o8hQMqLlQ86cbJ18Qa8NkHDY+HFYzjy5CB5iVCVPAayCVxLH
HfQ5l7b/1svXZXjSNORTxV7fbzXUTtJEBij3tUL9cSOFo4GKi9jkzUEO6s3Kof5J
B0IQcF/MLpAahaAgW8sHRnwhJLkNlHHb8tMxiVNyYZq5OSCtzQ6mNvTbyJZUAyq8
gWmUcCXneojxblD1m+TkEK4qyMAGcLaSx9D5Ut5mCup7hqKmHPuut+eZQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHimKYlBEmcxnPv0RKVwgT1hi0EuMB8GA1UdIwQY
MBaAFA/46T80cupr5Y8/63RJVHAJWhd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYt
ZmNlM2Q1OTBjNmRiLzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYtZmNlM2Q1OTBjNmRi
LzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0tJDaSS
2EBm2p8cSLoTsCUFHlUMDEd1woSEnu25AftdfkM55RjsF9BRm2HCEl0HIzhgR5jL
Y3/lHs2oNhpu0T/XNCSx6rglaK1H4wbGpM2rOHAqWxCymmwHrUOhidY8B+Aed+su
Aol48jTOU+XeYvmMDTjiwq0CLTD76/FmOr4hidty38AtlCi4pBW98ksm19AgPQv4
lgEwMdlD2d8WSLmfT4EAT+nkiE0fDFKXl1kUfGs8JM2bl4kSqJ/WiDRvtvFW/C24
SK0jViTNy5cpSoVVOg3MdTKfWFEEyZsTUtnN55yMwIK+NZxiROY0b45VexnTsEq3
hmtswbrgX4ezrw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:33:56 2026 by rpki-client