Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File:                     DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier:          8ktOmDFQmoemsoYgsAToWZvz6UpQviRUJ/l+d/oIXhY=
Subject key identifier:   7C:87:7B:FF:5F:D0:55:5F:45:AA:65:07:EB:EA:D7:3A:E0:5E:7A:55
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer:       /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial:       019E1D593B255E4FBA25830D1B3A1BD82DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number:          0BCD
Signing time:             Tue 12 May 2026 18:00:47 +0000
Manifest this update:     Tue 12 May 2026 18:00:47 +0000
Manifest next update:     Wed 13 May 2026 18:00:47 +0000
Files and hashes:         1: Ajd0L8XQdcyvJF9_JDszHwb-ypM.roa (hash: JhIrWGN9lZ7WVHOAnXcV9RrmyiG8gnQ8alzgC7IHdko=)
                          2: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: KasVwO57fIIZxdHextGd/z6iewapVN3nCC1HxXrKQ2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:3b:25:5e:4f:ba:25:83:0d:1b:3a:1b:d8:2d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
        Validity
            Not Before: May 12 18:00:47 2026 GMT
            Not After : May 13 18:00:47 2026 GMT
        Subject: CN=7c877bff5fd0555f45aa6507ebead73ae05e7a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:ff:fb:28:df:59:66:06:40:67:7c:9d:8c:
                    fb:00:cd:c4:67:a3:33:08:4b:1d:50:1a:b4:7d:97:
                    a5:93:b7:21:06:b6:66:96:79:b2:f3:79:f4:9f:b5:
                    50:dd:f0:55:ed:91:d4:ee:78:69:40:e6:d5:b4:dc:
                    5d:42:40:e9:fa:05:62:3a:1b:da:eb:c8:ce:25:36:
                    46:6b:68:97:1a:91:26:dc:e0:19:e6:5a:af:cd:a9:
                    5b:b2:8c:06:09:37:ad:10:1c:c0:fe:dc:8c:81:1d:
                    5e:9d:00:4b:5f:ed:e1:57:44:1d:6a:2a:83:20:85:
                    04:04:35:65:40:e6:f8:9e:a8:43:ee:cb:a3:b1:f6:
                    2c:9d:d6:ef:44:86:c6:bd:6a:2a:33:83:fe:ac:5d:
                    cc:f8:9a:0c:c3:b6:5f:24:a2:eb:f3:dd:1e:bd:06:
                    58:42:13:28:af:fa:a2:68:14:59:b5:91:eb:99:03:
                    37:7b:8f:28:c2:98:e8:05:bf:5f:aa:cb:3a:57:b0:
                    f1:04:b4:0d:aa:da:d0:02:0f:56:82:c8:e6:6a:29:
                    f8:12:82:ce:1b:b2:5c:4b:79:81:c2:2a:1e:20:6c:
                    30:ea:db:4c:85:13:f8:1b:2f:ae:53:08:3a:bd:98:
                    2d:f4:91:42:64:e5:65:d7:f3:c8:dd:da:14:d0:b5:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:87:7B:FF:5F:D0:55:5F:45:AA:65:07:EB:EA:D7:3A:E0:5E:7A:55
            X509v3 Authority Key Identifier:
                keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:ae:5c:a5:e4:9a:eb:bc:60:77:e7:3e:09:9b:13:63:cd:5e:
         fd:f8:81:48:2a:c8:9a:65:6c:8e:19:40:08:28:a4:84:fa:9c:
         1b:fa:10:40:c5:5c:0b:ae:6c:25:80:4c:4c:e2:d1:68:e9:6a:
         fe:e3:d6:23:7c:5e:60:f9:a0:ce:ab:cc:30:33:30:fc:82:0c:
         e7:c8:8e:8d:c7:a1:78:01:18:e8:1a:7e:50:71:c6:96:f3:06:
         5f:4b:f1:dc:6e:75:51:d3:58:cc:cb:72:14:55:6e:fc:3f:0e:
         c3:5e:9e:6c:ea:c4:06:07:d5:b0:78:28:86:f4:85:16:71:96:
         d1:ee:ac:30:9f:2e:15:7f:dc:26:a2:c6:96:a6:58:ae:66:75:
         19:49:16:4a:24:2f:f6:90:51:9d:c4:b0:b7:48:2d:9b:f1:72:
         08:77:35:c6:eb:77:89:50:80:50:79:47:73:db:e3:0b:d9:d2:
         5f:9b:5a:a9:c3:0a:b7:a7:fc:a3:a4:0a:e4:0e:de:bc:92:a1:
         91:2e:f4:8f:4b:f3:89:32:1d:f5:3f:f4:d1:2b:a5:84:1b:54:
         90:06:85:7b:c5:15:9e:78:f5:19:b2:64:a3:6c:c2:6b:da:fc:
         92:f9:b3:1c:d9:d1:2b:52:48:b7:47:e0:4c:e0:61:2f:4d:61:
         a4:09:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:13 2026 by rpki-client