Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File:                     0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier:          iijyFwGI9czObnMcI8AsTV3O5/lSHcmzD4HFo4Aq3Ec=
Subject key identifier:   17:DD:B6:64:90:12:69:FF:51:2F:9C:85:53:9A:79:BA:8E:53:58:DD
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer:       /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial:       019E1F11A7D227A64088CEE434E450E385AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 02:01:51 +0000
Manifest this update:     Wed 13 May 2026 02:01:51 +0000
Manifest next update:     Thu 14 May 2026 02:01:51 +0000
Files and hashes:         1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: Df9sqWA88qlahRAiH10v+PbjUm4jWdlNl/cptgzAZCI=)
                          2: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (hash: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:a7:d2:27:a6:40:88:ce:e4:34:e4:50:e3:85:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
        Validity
            Not Before: May 13 02:01:51 2026 GMT
            Not After : May 14 02:01:51 2026 GMT
        Subject: CN=17ddb664901269ff512f9c85539a79ba8e5358dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:db:2a:58:89:d4:79:69:cc:34:6f:f8:31:
                    6a:c2:f5:f1:a5:ff:0f:3a:25:78:45:ca:de:8e:e0:
                    53:62:b9:78:a9:fe:e4:ef:82:ae:31:ee:11:03:08:
                    2a:5d:ca:6a:5a:19:0b:71:5c:de:26:d1:2f:e2:b8:
                    ef:e5:48:c2:64:5b:73:0c:27:c4:cf:e5:71:42:4d:
                    6a:4b:a4:03:41:25:db:dd:cb:6d:b3:43:9a:d5:3c:
                    a5:9c:c9:20:92:64:0a:86:0d:70:ef:a4:f6:f1:fe:
                    c8:77:10:93:6e:74:0b:99:85:a3:b9:d9:2c:22:df:
                    ac:05:bd:3b:60:15:23:e3:41:d6:bd:11:9d:0a:65:
                    9b:65:52:e9:32:65:7d:0c:e8:6e:8a:3d:33:ab:2b:
                    1d:25:76:44:d0:04:fb:26:c4:e6:4f:b9:db:4b:b6:
                    bf:e9:a8:86:af:ef:2b:b9:c5:9d:28:c4:0e:63:e7:
                    af:46:ac:eb:a6:da:ba:15:66:4c:67:95:c1:ce:3d:
                    1d:af:7a:b1:01:df:c6:ed:68:25:19:70:3a:2a:55:
                    a7:0a:30:1b:ef:b2:c4:68:db:79:08:c2:2b:ce:69:
                    4d:e2:8b:31:54:a9:1d:02:d0:70:85:25:0a:37:03:
                    1a:01:ae:3c:45:a8:f9:4b:b8:cf:34:7c:42:70:59:
                    fe:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:B6:64:90:12:69:FF:51:2F:9C:85:53:9A:79:BA:8E:53:58:DD
            X509v3 Authority Key Identifier:
                keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:96:85:e0:b7:2e:be:bf:cf:9c:f7:62:68:f3:04:4e:b9:31:
         42:8a:c1:15:d8:db:55:f6:68:38:14:c0:0d:8e:75:19:ed:60:
         a0:32:16:c9:2d:3c:7a:32:8c:cc:5f:9f:21:e4:fe:d6:56:0e:
         e1:83:af:68:ec:e4:3d:b1:7f:6e:75:de:db:d4:bb:bb:1e:a8:
         50:2d:b0:ba:a7:e3:30:76:00:87:ca:9b:04:a1:b8:33:77:e4:
         4a:e1:9e:98:b6:e7:cf:91:fe:36:7a:ba:9f:df:c5:05:36:51:
         4e:af:99:8f:f2:62:3a:84:89:87:39:d5:83:ea:bf:64:f3:b7:
         b4:b8:a3:69:6b:25:ea:36:ce:e6:ca:9b:c9:39:3c:d2:05:f3:
         5f:ad:24:5f:37:0d:0d:a4:73:a7:f8:78:dd:4f:9c:02:74:1c:
         63:6d:ec:72:66:6d:a2:a4:7b:50:67:b7:76:6b:9f:a6:ac:b4:
         94:3f:d1:5c:49:24:93:2c:15:99:d2:44:c7:c2:94:ed:17:01:
         eb:fd:b0:b9:ff:e5:8b:da:65:e3:c7:da:cd:63:b5:19:66:52:
         b8:22:52:89:c7:f2:2d:dc:91:9a:0e:4e:b4:1f:5f:36:fe:78:
         4e:44:05:f9:6a:80:c4:1c:74:60:71:45:d1:24:b6:e9:0a:de:
         d8:be:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:29:37 2026 by rpki-client