Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
File:                     0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft (raw, json)
Hash identifier:          roFWyHTF3aatXC/3MzNu9uYoUuGzBKNjjlrTp2u6Zew=
Subject key identifier:   FC:51:EE:87:3C:80:6F:BA:0E:1A:5B:D2:AA:8C:DF:5E:B8:94:F4:F4
Authority key identifier: D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
Certificate issuer:       /CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Certificate serial:       019E1F480AF14F65111A23322DEC76ECEDC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 03:01:15 +0000
Manifest this update:     Wed 13 May 2026 03:01:15 +0000
Manifest next update:     Thu 14 May 2026 03:01:15 +0000
Files and hashes:         1: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl (hash: RpZ4JNQbmig8aLvajDItcYfMOTT95zfl9vV9xufU87U=)
                          2: qB-yYmmoZAETKywXU4O90SMz9p4.roa (hash: zSfrh0GvpLorIoRjiLIdctGLnu0vrYxfcdrku/RI+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:0a:f1:4f:65:11:1a:23:32:2d:ec:76:ec:ed:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
        Validity
            Not Before: May 13 03:01:15 2026 GMT
            Not After : May 14 03:01:15 2026 GMT
        Subject: CN=fc51ee873c806fba0e1a5bd2aa8cdf5eb894f4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:39:bb:b8:e8:72:dd:ea:18:fc:35:80:6f:
                    31:0b:f2:c1:a2:68:5f:af:2b:88:ca:0d:c6:9e:19:
                    26:1f:32:5f:c1:55:c0:0d:63:bc:3d:f3:a8:3d:07:
                    86:07:27:ab:7a:7e:59:ce:82:e5:1f:2f:3b:22:77:
                    3c:1c:b5:ba:3f:93:7c:e0:ad:5d:77:c2:a7:af:9a:
                    53:b6:80:3b:15:fe:7b:a1:92:4e:3a:e8:29:6f:8d:
                    ab:81:56:10:08:cb:69:1e:2a:be:41:e4:6f:61:b4:
                    50:e0:c7:fa:d5:e3:bf:94:ec:a1:ce:ab:0a:20:f9:
                    98:73:59:0c:06:a5:a0:6e:3d:79:7f:65:13:63:d1:
                    b1:04:56:c9:05:43:c3:e6:17:ea:f9:2f:06:aa:87:
                    4f:b9:c1:11:23:fb:dc:38:9c:b0:7d:90:db:e1:d3:
                    56:81:2e:f7:96:58:ca:b5:f5:17:cb:9c:05:c0:56:
                    28:a8:01:98:2b:bd:55:fe:ce:27:af:64:10:2e:fe:
                    af:2b:f1:00:dd:c3:8a:1f:63:d1:d5:a9:0b:86:ff:
                    12:84:a5:94:e2:00:b5:f9:e1:17:41:be:7a:7d:89:
                    7e:3e:5c:09:06:5b:3e:05:47:f1:0c:16:41:37:89:
                    5f:34:a3:66:dc:e6:e6:82:77:c5:13:65:8c:1c:eb:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:51:EE:87:3C:80:6F:BA:0E:1A:5B:D2:AA:8C:DF:5E:B8:94:F4:F4
            X509v3 Authority Key Identifier:
                keyid:D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:33:ac:24:a8:32:24:51:5e:d4:c6:30:3e:b5:08:22:00:d5:
         d3:54:d7:d1:0e:fb:14:fd:98:26:69:bd:f0:78:70:4c:fa:72:
         e1:d6:dc:14:2e:db:48:7a:dc:b9:8c:f7:2a:a9:91:a7:ab:53:
         13:b5:83:0b:bd:6c:b8:b7:23:46:5a:5a:cf:a5:99:f4:6f:6b:
         a6:90:a9:af:9e:8c:6d:fd:66:32:9c:1e:60:c7:c2:26:88:d0:
         41:31:ef:73:69:47:4a:af:d3:d0:ee:de:c3:ba:5a:e8:a6:7f:
         69:a7:1d:b9:67:e3:9b:e1:23:7c:93:9f:42:6d:0a:76:fb:f2:
         b8:dc:0b:08:32:ed:32:69:e6:2f:27:d3:40:70:98:ec:1a:3b:
         bd:b6:52:0a:74:e1:f9:07:78:10:63:11:3a:41:69:c6:7a:5a:
         ae:0e:ae:88:c9:78:e3:dd:f5:f5:3f:6b:d3:f1:b5:57:ed:7d:
         8c:41:8d:9b:df:67:31:0b:88:5a:71:5b:76:c2:c8:32:5c:78:
         7e:63:9e:b3:73:c0:67:9b:f0:bf:65:0b:52:ef:d7:f1:cc:1c:
         23:f4:d5:6d:01:65:b2:76:00:e6:c2:ff:40:1d:20:08:ea:1b:
         03:88:d0:44:05:71:bb:51:1f:48:dd:d9:a5:83:98:77:6e:e2:
         3c:6b:6b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:55:21 2026 by rpki-client