Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File:                     0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier:          wuyUWYI9VwkJWbHFKvP3/LuKsMZWSTWFKNkWa6wUUWk=
Subject key identifier:   03:B2:E5:F1:F0:DE:FB:0C:FB:1E:20:30:62:B1:2E:F2:5D:D1:1A:5E
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer:       /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial:       019E1C0FA17B7253C6411AE6C37C982E4452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number:          0232
Signing time:             Tue 12 May 2026 12:00:46 +0000
Manifest this update:     Tue 12 May 2026 12:00:46 +0000
Manifest next update:     Wed 13 May 2026 12:00:46 +0000
Files and hashes:         1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: 2XMMB0MnbrnkdMuv9LMcwOYeBOuv5Zbup32Td+iqz54=)
                          2: BMvBIwftHVjOq-ECziUj7FT9eNs.roa (hash: VyJ9dmhC8T/OTxMz+hnV4q4zH9/xxLGMFMd7o25VL7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:a1:7b:72:53:c6:41:1a:e6:c3:7c:98:2e:44:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
        Validity
            Not Before: May 12 12:00:46 2026 GMT
            Not After : May 13 12:00:46 2026 GMT
        Subject: CN=03b2e5f1f0defb0cfb1e203062b12ef25dd11a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:ad:19:75:a5:f7:d9:dc:00:2a:5a:cb:ad:
                    f8:b5:43:9e:58:28:ac:eb:28:11:c2:1d:0b:ff:1d:
                    de:ef:da:3e:58:59:29:50:8f:69:ff:ad:b3:4d:13:
                    15:b9:b7:18:fd:cf:d4:44:f9:ce:6f:57:84:43:39:
                    01:e8:85:7f:a9:78:92:e2:0d:13:74:8c:0d:0f:f4:
                    67:02:2b:23:24:85:5f:38:a4:ec:72:83:82:24:90:
                    5b:6c:4b:fd:1a:69:e1:01:fd:bc:26:d8:60:c7:b2:
                    b8:0b:df:f5:16:ce:b7:d2:62:08:c3:30:cc:97:cc:
                    a3:81:8e:28:22:17:f5:36:39:29:04:06:8f:28:f8:
                    44:8d:60:47:db:a1:b8:04:ef:59:d2:04:bb:e2:83:
                    f3:e5:60:1f:09:fb:0b:34:a9:0b:7f:b4:5c:49:b6:
                    ac:57:5c:bd:7d:91:6b:77:cf:6d:7e:2a:01:08:d1:
                    41:7d:1e:26:16:bc:1d:14:dc:98:0d:b0:a3:13:92:
                    18:1b:40:37:8a:5d:18:74:34:07:dc:97:ce:94:b8:
                    32:3d:4a:bc:36:88:7c:c2:11:34:80:17:bf:5a:ad:
                    8d:40:d3:d3:8c:2e:97:5c:48:f3:05:c0:99:a1:1f:
                    6c:d1:df:7a:03:c2:4b:28:82:7f:9a:02:01:4e:24:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B2:E5:F1:F0:DE:FB:0C:FB:1E:20:30:62:B1:2E:F2:5D:D1:1A:5E
            X509v3 Authority Key Identifier:
                keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:0f:f3:5c:e6:1b:6c:29:41:33:20:41:40:5b:fc:d4:1d:
         4a:21:4d:cb:6e:1e:4f:0f:d1:28:32:1d:b9:c4:39:84:c2:82:
         b3:22:b7:41:68:70:79:e8:1c:7c:cb:f7:9e:83:06:0b:f4:c9:
         48:f6:02:2b:4b:6d:9a:0a:66:0e:c8:7d:f6:9c:ad:2f:62:2f:
         e9:0b:b5:75:9c:3f:c6:b6:4f:29:26:e7:85:68:90:a7:aa:bb:
         01:52:66:3d:5b:c3:77:22:97:90:ea:e5:af:ad:7a:74:c8:fa:
         a6:01:1b:cc:e5:20:85:76:19:62:ab:e9:a8:19:1e:12:43:b5:
         a4:00:84:22:0d:3a:f7:ae:bc:9a:1a:b5:08:dd:c8:75:6d:ab:
         f8:d9:71:26:c2:4c:94:93:46:d5:41:7b:01:37:8a:e0:7b:a8:
         69:1f:24:e8:1c:43:c3:fb:e0:2d:96:6b:6b:72:22:00:41:2a:
         6d:ed:fb:a2:a9:79:f3:8b:73:75:35:70:2f:ce:9f:21:e8:b0:
         0f:1e:c5:90:28:0c:26:5a:f6:2f:a9:0d:29:91:25:fa:33:48:
         cf:5b:dd:3c:e6:0d:fa:be:ee:10:f8:05:d7:ce:f3:f5:4a:d8:
         47:3e:1d:60:a6:e0:be:b3:16:da:42:39:97:66:c7:aa:e9:bb:
         e5:e0:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:55 2026 by rpki-client