Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File:                     0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier:          4xcT0cGVwupJapdnV690+zHKz9wa+UdwFAiHt3TpDaw=
Subject key identifier:   28:F4:09:B0:AC:65:26:00:DD:0C:D8:C6:28:40:78:68:8B:70:35:10
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer:       /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial:       019E1FB598F4FA549D85C9672ABEEA5CAC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number:          141E
Signing time:             Wed 13 May 2026 05:00:55 +0000
Manifest this update:     Wed 13 May 2026 05:00:55 +0000
Manifest next update:     Thu 14 May 2026 05:00:55 +0000
Files and hashes:         1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: GOoeh89Npb8JSULfy0FZBfbvo5qkoBLWinvAKhP/JLk=)
                          2: vTP-a1JInjsi0zs43YUjMr0tQhw.roa (hash: AksN4qlHwN45fSCKy9ilLdGULzgppZOt64KCaKI1vlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:98:f4:fa:54:9d:85:c9:67:2a:be:ea:5c:ac:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
        Validity
            Not Before: May 13 05:00:55 2026 GMT
            Not After : May 14 05:00:55 2026 GMT
        Subject: CN=28f409b0ac652600dd0cd8c6284078688b703510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:e6:64:e3:a6:fc:1b:fb:1d:90:7d:ee:ef:
                    aa:5b:e0:7c:d2:5f:e8:8c:35:b5:08:f2:fd:89:17:
                    89:bb:8c:02:52:f1:ca:50:8d:8b:8e:71:58:46:81:
                    d2:7d:1c:7c:df:57:50:fe:d5:aa:86:30:72:09:fe:
                    36:6d:9e:6f:9f:a6:d8:eb:b9:76:0a:3c:d4:39:ba:
                    04:c1:4a:b7:0b:3a:63:97:d8:58:91:ae:2e:ea:36:
                    aa:86:87:b9:7d:a2:36:80:eb:82:51:6d:47:26:0f:
                    3c:9b:1c:a3:73:26:31:7d:c3:11:24:2c:6f:50:96:
                    98:9d:77:73:e3:80:ff:54:0a:dc:c6:ba:24:3d:2f:
                    b9:45:9f:99:7a:2d:18:38:91:ff:0a:3f:97:b5:80:
                    cd:45:09:5f:99:48:15:1d:c0:e4:c5:b2:b9:ab:3b:
                    1d:9e:48:3c:51:d3:8a:1a:78:b0:73:ab:22:35:d5:
                    1f:03:d7:33:29:c8:83:e2:43:89:ed:37:13:c4:b5:
                    1e:5e:59:7a:2e:11:1e:20:b2:d2:af:06:a8:4b:59:
                    1f:5b:6e:74:8c:95:6f:6b:b0:4d:55:29:a3:70:61:
                    53:12:00:ad:9c:d3:e1:33:86:26:25:75:18:ec:c0:
                    57:c5:5b:14:25:8f:10:fd:ac:9a:56:ac:a3:7d:2a:
                    7f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F4:09:B0:AC:65:26:00:DD:0C:D8:C6:28:40:78:68:8B:70:35:10
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8a:09:bd:b1:81:fc:b7:7f:da:d7:16:4a:c4:05:d3:9f:8e:
         1a:a0:23:0e:ed:43:6d:3f:1f:a4:36:a5:c4:44:a0:95:fc:00:
         a1:f7:18:5b:44:85:1a:15:e1:d2:c4:ed:9f:b7:a9:06:01:80:
         1d:ea:41:39:c0:6b:a5:4b:cf:ea:11:83:e4:25:99:3d:e6:c8:
         3c:e7:a6:7a:3f:9c:f5:69:10:c8:a0:13:34:ee:43:c5:8d:9b:
         ab:e5:37:48:4e:69:52:03:94:4c:52:de:b7:9d:75:88:74:57:
         12:bc:98:b7:04:49:da:40:d5:20:c5:53:2d:e5:80:fa:c4:6c:
         ca:8d:65:fa:2c:2b:cf:9e:41:d2:36:31:ab:c2:ee:06:d7:0c:
         76:b7:08:1e:d3:ae:1b:80:c0:f7:63:63:4b:75:50:0e:cd:39:
         3a:2b:10:36:c3:40:03:c2:cc:42:f1:9f:7d:9b:92:49:b9:67:
         41:f4:64:34:09:14:39:ef:34:e0:e7:24:95:58:e4:aa:f7:71:
         ff:c6:0d:c5:b0:19:28:65:d7:fb:8a:bc:1b:42:97:2c:e1:27:
         7a:75:38:84:34:04:bf:0e:79:c5:41:ab:99:01:54:47:d7:67:
         7f:af:75:ef:85:c0:d0:7f:a1:6c:6c:5c:c8:6e:f1:31:66:37:
         1c:f6:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:59 2026 by rpki-client