Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          DkHv/PeEoE3VKh6no42uPd4zeKzMV95fRhVdZEBokGY=
Subject key identifier:   91:26:18:D9:82:B2:5A:72:59:06:7A:87:12:5B:6D:72:80:06:B9:05
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       019E209232F4B1B8D31D31E162AA921AC49B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          1925
Signing time:             Wed 13 May 2026 09:01:52 +0000
Manifest this update:     Wed 13 May 2026 09:01:52 +0000
Manifest next update:     Thu 14 May 2026 09:01:52 +0000
Files and hashes:         1: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (hash: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: JmAdpQEHVBqcBvrKv7kxRkqpXuPIcQnPwkkawk6sqKE=)
                          3: LOr_QJgq7XHCzXGXYreqgevp6GQ.roa (hash: bWW1LhXvcs5ivMuZ9/zxiozy2wvwiqjIIxDSDsGNKBw=)
                          4: LkgYk9rkPhPJQFFGIea1x0t7xaw.roa (hash: eEHFzypg2Qt2Rl1NxfyRu/ldhxRjE/9kd2bXjUoqoAI=)
                          5: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (hash: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig=)
                          6: mJmloBqH1ccv7pf7_dE3WxThQ58.roa (hash: L0vhterDlOQyvmoADd6+0joQnbdSLqt2I9Yyqwk+Dl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:32:f4:b1:b8:d3:1d:31:e1:62:aa:92:1a:c4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: May 13 09:01:52 2026 GMT
            Not After : May 14 09:01:52 2026 GMT
        Subject: CN=912618d982b25a7259067a87125b6d728006b905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dd:26:f7:64:32:30:28:1e:0b:00:4f:59:21:
                    88:7f:69:a3:87:7a:65:ba:fa:93:f7:db:bc:e9:25:
                    41:65:43:e4:c5:92:b4:0f:54:66:ea:ae:67:37:ee:
                    2f:76:9e:0d:a1:c1:e9:91:02:e8:f2:a8:16:9a:c3:
                    6e:90:0e:35:0f:54:6b:bf:2b:c9:5c:24:9b:f8:f5:
                    05:7c:c6:c2:6b:ac:68:3d:e7:de:bc:f3:1b:de:85:
                    a1:79:6b:03:34:c3:34:19:04:ac:a9:a5:5b:28:3b:
                    31:76:2e:f3:d7:ee:d8:38:36:97:c8:a3:a5:6d:86:
                    fd:52:bb:5b:68:5e:ff:9b:f4:3e:d2:0c:dd:ed:40:
                    29:10:cb:45:26:73:0d:f7:3d:cc:e7:38:c8:e1:5c:
                    ad:ee:13:c4:2f:15:e4:56:53:51:c2:46:ee:21:7d:
                    cd:c7:d0:c7:60:54:6f:9f:c2:42:4f:a9:97:c6:92:
                    a1:6a:ff:b0:a7:f4:6e:22:21:8f:33:65:85:cf:76:
                    ca:a5:b0:0e:d2:4b:7b:09:7b:b0:d3:75:8f:33:b8:
                    1e:d4:ea:35:03:33:77:38:11:93:71:d8:5a:c3:0f:
                    61:1a:7c:15:d9:d6:2e:0d:93:fe:78:75:fc:b6:41:
                    81:6b:fd:88:a5:d1:3e:92:84:e0:a0:27:86:bd:87:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:26:18:D9:82:B2:5A:72:59:06:7A:87:12:5B:6D:72:80:06:B9:05
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3c:0d:e0:5f:f8:e4:99:08:0d:d9:3e:96:d3:d0:ca:ad:ca:
         31:b1:2d:bf:c6:88:de:76:f7:58:79:f3:7d:07:39:60:c2:14:
         84:0b:97:da:23:be:31:94:ef:35:e0:69:1b:4c:89:61:35:c2:
         1b:a7:29:7b:b7:60:b4:30:ce:95:24:78:78:63:9d:c5:be:04:
         15:95:50:a1:1f:99:a8:5b:e2:07:79:5b:45:f0:c0:0b:65:f1:
         f6:23:03:25:94:4f:2e:2c:61:36:34:f7:38:e5:d1:f2:fd:b8:
         a8:b3:2b:82:e0:1b:bd:61:b7:23:cb:1c:12:fe:28:46:7c:11:
         b4:42:f8:d8:02:d5:76:3c:bd:01:97:ad:2d:80:06:00:2f:aa:
         ce:59:64:89:10:35:64:78:44:86:ee:8a:17:a7:c5:77:85:c5:
         f7:79:c2:68:d0:d4:45:51:c9:e5:c8:ac:34:51:8a:57:8f:13:
         df:c3:b7:f0:8e:5b:f0:bf:58:e3:71:81:86:63:6a:71:80:1c:
         4c:75:2c:b3:43:d0:ff:62:37:3d:d9:d1:65:4e:9c:66:2a:30:
         2f:0a:da:81:72:a7:47:49:36:4f:36:72:e5:d6:9d:45:b5:c2:
         0c:64:a4:f4:24:b9:6c:76:4d:ee:f1:89:f9:86:cd:3b:df:de:
         c3:4e:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:07:24 2026 by rpki-client