Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File:                     0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier:          kHfvCT2PvSp059DXkuEVO4sSCSBFDsb29vPVNyIGMA4=
Subject key identifier:   54:B6:94:84:D1:A5:9A:28:69:A2:E1:4F:5B:B3:8B:1D:B1:D8:D2:DE
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer:       /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial:       019E1D597629DEE2250777BEEDAE362E6CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number:          0889
Signing time:             Tue 12 May 2026 18:01:02 +0000
Manifest this update:     Tue 12 May 2026 18:01:02 +0000
Manifest next update:     Wed 13 May 2026 18:01:02 +0000
Files and hashes:         1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: CfvkLUXg1AZr3m7kG2Jfyyr+7K7Lcym6g1Somp4RPDA=)
                          2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:76:29:de:e2:25:07:77:be:ed:ae:36:2e:6c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
        Validity
            Not Before: May 12 18:01:02 2026 GMT
            Not After : May 13 18:01:02 2026 GMT
        Subject: CN=54b69484d1a59a2869a2e14f5bb38b1db1d8d2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:67:d7:23:e3:fc:21:26:b2:60:2e:16:2d:
                    1f:3e:7f:cd:dd:93:3d:b6:35:61:9b:53:5e:31:be:
                    73:8b:89:9a:2d:13:7c:7c:46:61:b8:b5:91:76:65:
                    d8:57:ed:14:0f:6d:a5:1c:51:28:2e:50:46:d3:98:
                    c2:6e:9f:17:b7:a7:b2:e0:fb:50:7e:cc:e3:41:f2:
                    49:ca:3f:3e:7e:4d:4d:df:8c:4b:ec:f5:c8:8a:17:
                    17:a7:4b:d1:41:7f:83:33:e5:01:cf:80:e1:39:53:
                    41:ee:4d:ed:b9:3c:09:9f:73:ae:c5:84:be:f3:08:
                    af:1e:a7:0e:8a:79:25:1e:a8:7e:11:0c:ba:02:04:
                    62:31:8e:90:78:b8:5a:0b:c8:f2:68:ec:bf:e2:a5:
                    32:87:50:1d:a4:72:bc:fa:2a:68:49:13:ab:d3:8a:
                    98:0b:0a:a6:e5:20:78:4b:80:f1:91:55:4f:77:8f:
                    3c:3b:ed:7b:3a:be:17:ac:3a:34:5d:10:c6:42:bf:
                    c8:be:fa:21:59:8c:0e:8e:4e:13:5c:6f:85:c4:1f:
                    4c:2a:cd:27:e3:43:ba:16:46:83:c6:ec:53:c8:b3:
                    4b:40:b4:86:3f:b8:1e:e0:d2:1d:8e:b9:a8:a7:bd:
                    ab:cb:b3:27:e2:72:ed:2b:e9:46:b2:d0:4d:b7:0f:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B6:94:84:D1:A5:9A:28:69:A2:E1:4F:5B:B3:8B:1D:B1:D8:D2:DE
            X509v3 Authority Key Identifier:
                keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:52:b6:ee:bf:86:dd:d0:ca:87:df:98:34:54:8d:9c:f2:82:
         dd:e7:76:cc:f9:bd:bf:81:0b:2b:05:3f:28:0e:db:1c:b4:1b:
         61:84:67:67:a9:39:13:ed:d5:72:72:e4:27:9f:2e:f1:49:01:
         7b:f1:3c:f1:89:a7:e4:44:8b:e1:81:0d:19:d5:c2:86:21:7c:
         e3:40:30:92:85:36:a9:2b:5c:3b:fb:3c:a4:5b:bf:ee:91:4f:
         7b:ef:e0:3d:a2:c0:aa:d1:65:b9:69:a1:5e:dc:1d:43:c9:02:
         00:22:3c:08:6d:31:72:94:e3:c5:10:03:83:21:9a:bd:4f:9a:
         03:03:86:4d:89:d9:18:7f:0d:0f:2b:16:68:ee:9c:21:c6:2b:
         cc:67:0d:68:1f:38:54:0d:b4:00:11:67:fa:63:fb:70:76:e5:
         01:7e:52:4e:30:0b:c9:00:a5:5f:d6:47:65:03:ab:cf:0a:96:
         ba:f5:08:81:8c:63:f7:4b:ab:6e:87:aa:77:d8:d2:3c:b5:40:
         a8:73:b5:ac:9d:9f:55:a3:a7:f8:5f:a9:1d:e6:9c:60:e6:89:
         e5:19:38:bc:2b:1e:d4:6a:cf:08:51:c6:4c:7f:2b:0b:10:ca:
         74:f4:8a:d9:ff:2b:99:23:ae:73:37:0f:eb:63:c6:f7:ef:96:
         56:9e:99:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:08:25 2026 by rpki-client