Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File:                     0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier:          uQJFr0hU2sGUAAh9JpSCRrS496KJkKNEz34/VBRP48s=
Subject key identifier:   6F:D9:86:9F:A8:C0:35:79:49:76:9F:0A:B8:FF:F9:82:7A:7E:25:35
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer:       /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial:       019E1CB4DC9870C098D1D90658DD10F6E67E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number:          190F
Signing time:             Tue 12 May 2026 15:01:15 +0000
Manifest this update:     Tue 12 May 2026 15:01:15 +0000
Manifest next update:     Wed 13 May 2026 15:01:15 +0000
Files and hashes:         1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: KNnTSdjlD4/L5ftGUyoQiV7GZBpqRIH8SH61n/OhsCU=)
                          2: fBAOzxis5zFocT70Z97qbse-bDQ.roa (hash: VdDmUIYDxdhSfqEfsTGgmGBNLV3h2tDEtcnlVnKzLfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:dc:98:70:c0:98:d1:d9:06:58:dd:10:f6:e6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
        Validity
            Not Before: May 12 15:01:15 2026 GMT
            Not After : May 13 15:01:15 2026 GMT
        Subject: CN=6fd9869fa8c0357949769f0ab8fff9827a7e2535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:6d:00:60:b0:54:a6:e0:5d:da:87:79:48:
                    50:61:8c:30:84:31:54:56:08:a9:64:1a:b3:dc:77:
                    f9:a8:b1:00:bd:75:47:c7:6a:f1:f1:e5:eb:a0:73:
                    5d:39:d6:a8:ce:a4:d8:2a:ea:ad:3c:29:48:b7:e9:
                    df:db:97:28:6c:85:47:01:10:c9:b8:67:c6:1c:c9:
                    ff:aa:65:3e:89:43:65:66:e1:17:1f:77:0e:1d:8b:
                    69:15:18:b2:97:d9:3c:d9:f6:4a:91:7b:27:bd:24:
                    1e:d4:d5:25:ce:fd:30:c6:9d:10:e6:35:8f:27:a8:
                    cd:c0:8b:18:a9:10:c0:6a:c2:cb:cb:2b:94:fd:a3:
                    fb:85:98:41:8c:05:43:ad:69:ae:c4:ed:42:74:6d:
                    f7:13:d4:c4:23:e9:82:bc:cb:47:f5:49:b6:43:f5:
                    f5:be:6e:79:5c:69:af:a5:2b:a1:27:05:19:92:39:
                    1c:3a:77:64:36:14:78:2d:e5:40:60:9c:ea:8a:83:
                    78:db:8f:76:9a:47:6e:ec:a3:39:39:4f:43:44:b0:
                    dc:f9:f5:56:cf:14:38:9d:89:53:26:ab:29:f8:5d:
                    03:d2:3a:1a:f0:d2:7a:7a:00:66:09:f9:41:97:23:
                    ed:7e:47:c8:ef:a6:ff:f5:92:ce:6d:a3:a5:a6:22:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D9:86:9F:A8:C0:35:79:49:76:9F:0A:B8:FF:F9:82:7A:7E:25:35
            X509v3 Authority Key Identifier:
                keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8c:af:fb:e1:07:32:a9:fd:41:0e:3d:6c:00:89:cc:27:d6:
         93:ae:1a:3b:b7:2e:ff:d7:a5:b7:68:90:f7:69:36:72:95:82:
         19:54:aa:6e:dd:60:f6:52:30:35:f0:2b:9f:2d:3f:1e:2e:3c:
         9c:a5:2e:f0:eb:2b:2b:bf:67:f8:92:0c:56:a9:5e:1e:b2:96:
         68:18:7a:2a:4f:fb:91:de:ec:2d:ac:9d:3d:8e:2a:0a:54:59:
         33:bf:60:f7:04:26:fc:af:90:a3:f6:e9:da:22:68:aa:47:61:
         85:9d:19:ad:94:ab:6d:8a:3c:53:63:c7:09:35:73:3a:fb:41:
         73:a0:53:36:6c:cb:81:8c:8d:7e:a9:53:20:51:02:13:c5:d2:
         04:f5:5c:48:a2:b9:e3:96:7b:f4:aa:2b:0d:64:2c:53:6f:45:
         1d:db:f7:a8:1a:c9:5f:d3:91:0a:71:87:ef:9e:06:05:9e:ef:
         3a:4d:db:7c:af:ee:ab:02:89:dc:a1:f3:c8:ea:66:fe:8b:24:
         ae:16:63:33:d1:7a:5e:83:a5:e3:ad:40:b9:42:34:4c:65:cb:
         3f:6b:62:ef:1f:4a:94:b6:c3:ab:93:d4:1f:68:60:19:fb:e4:
         8d:57:d0:e4:ec:0f:0e:8d:44:ed:aa:89:2a:6a:95:0b:af:15:
         ce:4e:06:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:12 2026 by rpki-client