Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
File:                     0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft (raw, json)
Hash identifier:          E5YEo7lvcwav8LAk9ijYEoKai5aeCHLoNjl3adLSRg4=
Subject key identifier:   D9:05:75:67:A2:EF:53:FA:FC:43:E4:0C:D8:30:21:37:9C:35:68:E5
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Certificate issuer:       /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial:       019E1C7E11CD5183FCDE530E0F3386C3CECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
Manifest number:          1417
Signing time:             Tue 12 May 2026 14:01:24 +0000
Manifest this update:     Tue 12 May 2026 14:01:24 +0000
Manifest next update:     Wed 13 May 2026 14:01:24 +0000
Files and hashes:         1: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl (hash: on/DwyypkHs0lKPrLUjHEzOWJUehWJqnoYm6M3dUhPk=)
                          2: 2a-ajfpkZAsjReLLQ1xduA5jH68.roa (hash: lQdPyjxms9XmoRw9yTquBchApgiBDYUsw2V+v//4ubw=)
                          3: 3qWiv8aUt9sce-sZcGdmrNaNLPY.roa (hash: fDS2D0rIZulEuzsnb+BYc++UCvsn6GakJSLWm65oY60=)
                          4: 5o_jXKDrMZ_VUtAMAA1b61XpZY4.roa (hash: cW/aLAiDeErlaNGgC/UoOefJEPVaWg9YZ9ILa/HwLxQ=)
                          5: iCg9tDwj1vgv7l4zkfBWYVXyBYs.roa (hash: +sR86m8s5uPTFwMcLKL+T0A/ZDbNibZcTed4QGQkB+U=)
                          6: m-4Bzgn_XA7AnDHyUCDMxv4tjws.roa (hash: AQFWIEldUOojspkBOhlpdbyceFMGqpqRnivtz2V3WHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7e:11:cd:51:83:fc:de:53:0e:0f:33:86:c3:ce:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
        Validity
            Not Before: May 12 14:01:24 2026 GMT
            Not After : May 13 14:01:24 2026 GMT
        Subject: CN=d9057567a2ef53fafc43e40cd83021379c3568e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:52:e4:4e:ed:a1:55:1f:79:8e:3d:63:54:
                    bf:19:95:68:1b:af:a4:2d:4e:9a:f2:cf:20:e8:82:
                    4c:9e:ac:02:f3:23:f2:ea:1f:14:46:f6:7f:4d:33:
                    d9:77:9b:df:32:d3:0f:df:25:71:2e:9f:99:d0:6e:
                    4e:2a:f0:e9:f8:da:ba:cf:e6:1d:b0:63:56:68:14:
                    4e:a7:8d:da:4b:f8:2a:22:25:32:9d:52:64:80:a9:
                    e2:12:e7:47:31:a8:32:9c:ac:cf:f0:6b:8a:b9:e5:
                    9e:db:5c:0f:f7:45:a4:cb:17:3f:33:d3:73:2d:d6:
                    ca:36:68:a7:5e:50:6a:8a:ba:a7:e2:e2:4b:08:4c:
                    a2:38:4f:f4:d1:29:69:70:aa:d8:af:52:0a:c2:0c:
                    a4:c8:5b:07:4c:7f:bb:86:64:d1:d8:04:e2:e0:86:
                    2a:64:5c:0a:12:85:5b:5f:63:29:4a:ce:68:13:43:
                    62:bc:d4:d3:6e:ed:e3:01:85:6b:eb:0d:48:f6:eb:
                    50:44:51:2d:e8:61:02:30:f2:93:78:c4:72:8c:f4:
                    4a:3a:33:a9:a7:8e:8e:0c:3b:d2:5b:0c:29:94:28:
                    23:1b:54:c9:8a:bc:e6:08:b9:9b:fb:c4:9a:c3:8d:
                    b9:2c:cb:4c:f4:95:bf:40:04:cd:5f:6d:e7:31:06:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:05:75:67:A2:EF:53:FA:FC:43:E4:0C:D8:30:21:37:9C:35:68:E5
            X509v3 Authority Key Identifier:
                keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:2d:36:16:fa:1f:81:7e:66:f3:f5:98:3f:f8:d7:ee:4f:
         54:b0:a5:52:b5:e6:b1:05:4f:4a:ed:e6:f9:27:73:62:a2:80:
         73:19:70:6f:4d:36:ab:64:7b:fa:66:22:fc:87:b8:b1:b1:5c:
         9a:69:ee:a9:f4:be:a9:bb:69:ad:b9:7e:93:e4:97:ef:57:be:
         6f:b2:f3:ac:07:8c:d7:cb:e2:fb:d4:74:a6:6a:11:8a:28:84:
         25:76:65:9d:07:bc:a4:e8:ce:1b:da:3e:0d:f9:c2:3a:cb:b0:
         9c:62:46:3d:56:eb:51:76:0e:04:3b:49:f9:6d:cd:e1:f3:b8:
         e9:61:c7:fa:39:21:bf:d6:34:c2:fb:a6:47:6d:e4:02:81:0c:
         6f:cc:dd:f5:42:08:e8:a4:bc:a6:46:84:b8:9d:77:82:9c:f3:
         6d:73:19:af:f6:83:f8:c4:b1:79:5d:19:9d:45:f8:43:1b:d4:
         a7:f5:82:74:b5:de:3a:bd:93:3d:1a:96:ee:94:b9:32:04:96:
         13:f4:12:b1:16:cb:38:68:ad:26:6c:6b:d4:e0:76:34:18:13:
         96:7a:6f:b5:7b:92:2d:dd:73:99:22:40:c1:fc:ca:58:3e:61:
         fe:78:4b:87:ed:45:4f:4a:15:f0:f5:c5:7e:f3:35:59:19:1b:
         1d:69:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:05 2026 by rpki-client