Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          aIj6lxvtv8ArgQdqxB2oy0dEQitK9Hm3RfYcu25trLo=
Subject key identifier:   9F:23:3C:C3:E6:D7:DB:CA:D7:96:E7:5F:20:EC:51:88:74:AD:66:F0
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       019E1D22359E037E8AB8A51AB1C684FBF8F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          0DDB
Signing time:             Tue 12 May 2026 17:00:41 +0000
Manifest this update:     Tue 12 May 2026 17:00:41 +0000
Manifest next update:     Wed 13 May 2026 17:00:41 +0000
Files and hashes:         1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=)
                          2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=)
                          3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: k+nxqK2Ugdwb8k7PQQa2tLOeiioKbkWSkpql8r97LdU=)
                          4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=)
                          5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:35:9e:03:7e:8a:b8:a5:1a:b1:c6:84:fb:f8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: May 12 17:00:41 2026 GMT
            Not After : May 13 17:00:41 2026 GMT
        Subject: CN=9f233cc3e6d7dbcad796e75f20ec518874ad66f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:e7:46:c3:bd:ed:f2:78:61:b7:ab:a4:59:
                    87:c4:2f:46:a7:95:33:7b:09:d8:73:19:5a:18:2e:
                    1e:17:f3:1f:13:53:b1:89:c3:23:b9:22:7e:b1:7e:
                    41:ac:10:14:c3:cc:5a:33:d8:f6:cb:b0:20:e2:1c:
                    89:c5:1f:a3:ab:2d:38:07:f3:8f:b6:b9:f1:d2:d4:
                    81:61:88:8f:4b:27:83:b5:8b:bd:09:2b:dd:7b:ec:
                    2e:d5:f7:d2:f3:dd:f6:4a:a3:9e:8a:ee:a1:95:4b:
                    aa:06:00:e6:5f:03:d5:e4:9a:6c:ef:65:bf:a5:03:
                    c2:e1:09:b5:00:7f:84:d3:a1:3c:db:28:a9:2f:1d:
                    2c:80:22:77:e2:0f:4a:d3:12:b0:84:0f:74:85:c7:
                    f4:ba:ab:9a:fa:6d:b4:cd:07:fd:87:a4:03:6b:87:
                    2c:aa:39:42:52:60:08:2b:56:0f:f9:95:ab:9c:4e:
                    93:75:cc:13:9d:f5:38:3b:85:d4:4d:16:b4:61:2f:
                    03:75:f6:f0:57:17:e0:b4:65:d7:2b:e3:9a:09:fc:
                    14:60:d5:0d:b8:53:fd:48:7a:79:96:70:87:ec:51:
                    6c:67:34:29:e8:35:e4:58:bf:8d:b0:f7:ba:cf:0c:
                    f9:7e:3f:4f:d9:d8:fc:81:47:42:d7:d3:f1:b6:f4:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:23:3C:C3:E6:D7:DB:CA:D7:96:E7:5F:20:EC:51:88:74:AD:66:F0
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b0:55:bd:10:29:e3:31:d4:44:c1:58:80:74:3d:11:dc:30:
         0d:45:ef:8d:36:ea:33:26:cc:11:56:02:8c:2d:75:b7:89:26:
         9d:9e:24:2e:8b:d9:94:52:22:cc:5c:c0:01:29:00:91:02:18:
         6b:20:ca:cb:e7:61:61:df:c8:19:28:54:c5:5c:35:a0:50:6b:
         e6:22:6d:42:d8:6e:c3:a0:b5:9d:6c:43:53:43:3b:c7:43:c5:
         a9:20:53:ba:a5:8a:2c:a3:71:3a:96:12:14:0a:a3:86:27:4d:
         96:c4:ca:77:6d:c6:d4:95:91:54:e3:9a:e0:14:22:ff:94:dd:
         e2:93:75:b1:6a:ef:fd:be:ac:ae:b5:0e:c0:c6:78:f1:fa:5b:
         d3:90:21:db:fb:a9:3b:7c:77:9e:fe:26:7d:9b:b1:e2:d4:88:
         0d:cb:04:c6:25:47:c1:b0:6d:85:5d:46:84:a3:e4:cd:b9:ea:
         9d:37:74:37:53:eb:54:f8:ee:d3:00:d2:1f:65:4a:a9:fc:d0:
         ba:7e:0f:70:de:34:71:84:07:96:7f:4e:cf:cb:fa:1e:8a:c9:
         6a:79:d5:d5:1d:8f:34:1b:c6:09:db:c7:1d:ae:5a:18:f2:e9:
         b9:ae:5a:16:7a:36:9e:d1:45:17:7c:b3:05:ee:65:64:9e:44:
         0d:49:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:55 2026 by rpki-client