Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File:                     0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier:          3Bngl1OiTkNmPSqoCP9x28uWLgp3oNqcHkLq4R2Uf7Y=
Subject key identifier:   92:D2:1E:95:23:35:27:0B:35:F4:C3:C9:D1:9B:93:F1:E6:3D:CC:98
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer:       /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial:       019E1CEB8FA74196052A354C02DC64EF0895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number:          0737
Signing time:             Tue 12 May 2026 16:01:00 +0000
Manifest this update:     Tue 12 May 2026 16:01:00 +0000
Manifest next update:     Wed 13 May 2026 16:01:00 +0000
Files and hashes:         1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: 1vATlMcs91z81Q3RYHhA0RwJu+dRFeXchJgwIQ5z8jA=)
                          2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:8f:a7:41:96:05:2a:35:4c:02:dc:64:ef:08:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
        Validity
            Not Before: May 12 16:01:00 2026 GMT
            Not After : May 13 16:01:00 2026 GMT
        Subject: CN=92d21e952335270b35f4c3c9d19b93f1e63dcc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4c:c0:03:07:41:7b:6c:a5:35:11:28:45:85:
                    25:90:47:c5:81:ba:2e:34:d2:f4:ad:e3:ae:13:bf:
                    22:3e:46:7f:34:55:e9:b1:53:ac:dd:12:31:48:b5:
                    73:75:51:23:04:8d:29:52:e0:2c:f6:7c:cf:76:6e:
                    70:0a:5e:07:6e:0b:f5:c2:b0:58:85:88:b8:50:cc:
                    7c:72:eb:cb:7b:6e:c6:a8:a1:44:6d:62:d6:3f:f3:
                    51:2f:42:f5:ae:d9:82:9d:2f:fe:fc:22:4a:73:68:
                    e1:fd:bd:97:c7:8b:61:3d:a3:c5:ca:d0:77:d5:6f:
                    86:fc:22:32:61:05:04:3c:bb:6b:a6:b5:69:12:b0:
                    a8:41:7b:9b:ef:ae:87:01:e7:01:ba:20:88:f7:bc:
                    6a:2e:fb:dd:3c:70:e2:7c:b0:97:d4:98:ce:02:a5:
                    35:f9:a6:de:61:f4:2c:ad:ef:76:50:bf:c8:c5:b1:
                    ac:f2:4f:75:fe:f7:59:48:6b:3e:9d:e2:a0:ac:01:
                    0c:4d:0a:4b:14:f3:05:5a:ab:5c:06:97:36:ff:76:
                    02:91:2b:5e:a0:85:8a:5e:e9:fe:2f:55:48:5d:c5:
                    e8:2f:a1:96:df:ad:74:72:1e:d5:e8:7f:ab:18:47:
                    16:52:f2:cf:e7:47:02:c1:97:94:94:f9:b9:c4:ae:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D2:1E:95:23:35:27:0B:35:F4:C3:C9:D1:9B:93:F1:E6:3D:CC:98
            X509v3 Authority Key Identifier:
                keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1a:36:38:71:ad:c1:52:4f:bc:15:07:6f:92:dc:4f:59:f3:
         8e:4a:bf:69:06:ab:43:29:b3:bf:74:99:51:25:ea:44:51:7b:
         e7:16:3f:3a:1e:84:6f:20:e5:f9:45:e8:de:32:fe:a6:a8:9f:
         30:32:01:52:66:36:68:ef:6f:0c:4c:2f:a5:cf:b6:72:d8:27:
         a4:82:40:1e:36:70:bb:43:ba:5e:db:83:e8:1c:9d:de:c4:86:
         a2:e4:fb:1e:48:82:6b:a3:2d:69:af:9c:3d:70:47:c1:0c:5d:
         52:27:e8:c9:76:5b:c9:99:7d:dc:69:84:69:00:24:74:ac:ac:
         07:ad:70:93:f0:f6:38:c4:ba:be:52:ae:28:c5:67:36:02:5d:
         d1:89:7a:4e:f5:25:83:46:80:71:de:b3:bf:49:49:57:1e:cb:
         05:82:bc:3c:de:5e:52:0e:69:ba:07:66:dc:a4:20:c6:17:f4:
         04:14:56:5b:e7:8c:64:e0:5a:a4:12:5c:c8:14:59:bc:c9:59:
         8e:f7:67:1c:02:ad:74:dd:24:75:67:10:77:08:74:07:ff:61:
         db:c3:c8:09:8e:8e:d3:e0:db:fe:09:4a:25:42:3f:4b:32:2d:
         46:38:2c:cc:e7:7f:ac:52:2e:83:00:dd:c6:a5:e5:9a:86:2d:
         30:9d:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:02 2026 by rpki-client