Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File:                     D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier:          vC4mr8XFKVK1k1H3MHltRrrsdPlAeyibUWbEXkQ4IZI=
Subject key identifier:   62:EB:C3:42:CB:67:B5:F1:BB:99:2D:EA:3A:EB:15:DF:EB:B4:A3:27
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer:       /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial:       019E1DFE9D3D4FB507B198BFDD8929684879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number:          0E11
Signing time:             Tue 12 May 2026 21:01:26 +0000
Manifest this update:     Tue 12 May 2026 21:01:26 +0000
Manifest next update:     Wed 13 May 2026 21:01:26 +0000
Files and hashes:         1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: ljmiTu9JBouvowV/xCZ/FnxZmDalbADXAo+g5V9jIP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:9d:3d:4f:b5:07:b1:98:bf:dd:89:29:68:48:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
        Validity
            Not Before: May 12 21:01:26 2026 GMT
            Not After : May 13 21:01:26 2026 GMT
        Subject: CN=62ebc342cb67b5f1bb992dea3aeb15dfebb4a327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d4:cd:11:7e:a3:ac:a7:18:b5:26:14:0a:1b:
                    29:71:b1:15:1c:33:f3:fc:48:e7:14:90:8d:c1:aa:
                    44:de:01:39:c6:08:c1:9c:58:c3:ef:55:83:82:c3:
                    80:87:e3:5d:ad:b6:b9:47:a4:8b:00:71:76:c5:f5:
                    19:ec:d6:53:34:fe:6d:8c:f4:e3:ac:e3:21:93:70:
                    f9:5d:18:0e:bf:f6:23:2e:a3:0c:20:d0:f1:5a:e6:
                    95:0a:8e:51:22:b8:63:5a:79:b6:69:b0:1b:b7:c0:
                    c2:24:6e:cf:02:8f:cb:01:a9:67:c4:ef:e0:08:3c:
                    58:be:db:4f:59:a9:e1:c8:ee:71:63:01:1f:39:77:
                    3d:9c:ef:34:11:80:ba:94:e1:af:5e:08:d0:86:2d:
                    99:fe:a4:65:2f:eb:70:08:67:cb:45:fc:d6:cf:c1:
                    41:95:86:63:b7:b5:0a:78:76:af:09:c1:db:62:80:
                    3c:60:d1:85:6b:34:bb:b5:0e:7b:0f:73:2a:3c:e4:
                    70:df:90:3b:9d:62:a3:66:3e:69:16:3d:28:66:f5:
                    04:68:92:81:6e:28:cc:76:8f:5c:4c:cc:7b:27:3a:
                    6a:17:21:82:db:a6:6d:f9:d4:3f:d2:8e:db:ce:74:
                    df:78:ad:76:c9:3b:46:34:a4:32:92:8f:18:b9:18:
                    ba:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:C3:42:CB:67:B5:F1:BB:99:2D:EA:3A:EB:15:DF:EB:B4:A3:27
            X509v3 Authority Key Identifier:
                keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:02:c5:21:1c:fb:03:ce:1c:3a:21:8c:67:65:73:60:4a:03:
         27:90:02:59:3d:3c:94:44:5c:a6:a5:be:95:88:c6:be:81:2b:
         b5:ee:0a:e5:7a:21:98:f9:ab:c5:78:52:97:a8:fa:4e:62:00:
         9c:dc:1b:87:c7:7d:4d:fb:45:4f:cc:13:db:89:80:b4:2a:23:
         2b:c3:c1:3d:5f:54:92:e2:e1:a0:dc:6f:19:3f:da:cd:79:7c:
         ee:5d:b2:3b:75:d3:69:50:5a:65:57:01:dc:b8:b3:47:6c:24:
         f8:4c:45:85:17:8c:8e:19:bc:a3:43:91:2d:7b:15:51:3f:2c:
         20:f2:16:e6:d3:bf:91:68:11:9d:3e:85:1b:10:ee:a2:13:aa:
         95:a2:ce:23:55:70:c0:ac:fc:80:9e:b7:97:2b:c3:6d:73:57:
         3a:ae:ac:f6:ae:ee:cf:f9:56:6a:a1:47:b1:48:36:76:1c:12:
         45:f2:c2:d3:09:58:46:7d:c3:2b:09:f2:fa:93:7d:9b:e4:99:
         19:c0:68:2f:7a:bb:c4:fa:59:70:dc:c5:ce:d6:99:bf:9b:c6:
         b4:98:77:c9:a3:0e:d1:9c:f0:0c:97:4b:1d:35:ae:fe:70:9f:
         c6:22:80:28:1c:d5:bf:bb:d8:a3:24:5e:c9:01:15:4b:46:7e:
         8a:21:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----